Version 2026-10-13-v1 · Effective 2026-10-13
Telari Privacy Notice
Who uses your information
The Wine Atlas Ltd, trading as Telari Labs, operates Telari at https://www.telari-labs.com. Registered in England and Wales, company number 17014628. Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Contact TLsupport@telari-labs.com about privacy, your information rights or this notice.
We decide how personal information is used for individual Telari accounts, service administration, billing, platform security and our own legal obligations. For organisation training records, an employer or other Enterprise customer will normally decide the purposes and act as controller, while Telari processes those records on its instructions. The organisation's notice explains its training and employment purposes. Educator and partner roles depend on the particular service and the purposes they determine; separate controllers do not become Telari staff merely by using the platform.
The Wine Atlas Ltd also operates other services. A Telari account does not automatically subscribe you to another brand's marketing or authorise unrelated sharing of learning information.
Information we receive
We receive information directly when you register, use courses, supply material, choose AI or voice features, make a purchase or contact us. An educator or organisation may provide your invitation, role, training assignment and course access information. A partner may supply the account-linking and entitlement information needed for an integration you use. Payment and service providers supply transaction, delivery, usage and technical-status information.
The information depends on the features you use:
| Category | Examples |
|---|---|
| Account and access | Email address, account/profile details, authentication records, roles, invitations, course enrolments and personal-account adult declaration/terms acceptance evidence |
| Learning | Submitted answers, feedback, scores, attempts, progress, completion records and learning conversations |
| Course creation | Course materials, uploaded source content or extracted text, Studio conversations, generated drafts, review records and editing history |
| Billing | Selected membership, payment-code use, order details, customer/subscription references, payment status, paid terms and invoices |
| Audio and voice | Microphone audio sent for transcription, transcripts, spoken commands or answers, text sent for speech generation, recordings, playback position and usage limits |
| Provider configuration | Your selected provider/model, encrypted API-key references and usage/error information |
| Operations and support | Device and network information, request/error records, generation diagnostics, relevant prompt/output excerpts, support messages and administrative audit records |
Personal-account confirmation records contain your account reference, your declaration that you are 18 or over, the effective terms version and a server-generated acceptance timestamp. We do not collect a birth date, identity document, IP address or marketing consent for this confirmation. This is a declaration, not verification of your age. Reading this notice is not consent to all processing.
We use Stripe-hosted payment pages. Telari does not receive or store your full payment-card number or card security code through that checkout. Stripe processes payment and billing information under its own applicable terms and privacy information.
Information required to create an account, authenticate you or fulfil an order is necessary for that service. You can use available text-based features without enabling your microphone. If you do not provide information necessary for a requested feature, we may be unable to supply that feature. Do not include unnecessary information about other people or sensitive personal information in course work or prompts.
Purposes and legal bases
For processing where Telari is controller, the legal basis depends on the purpose and the relationship with you:
| Purpose | Legal basis |
|---|---|
| Set up your personal account and supply the learning, AI, course-creation and Audio services you request | Performance of our contract with you, where the processing is necessary to fulfil that contract |
| Process purchases, paid access, renewals and cancellations | Contract; legal obligation for records we must keep |
| Maintain accounting, tax and legally required records | Legal obligation |
| Protect accounts, prevent abuse, investigate faults and keep the service secure and reliable | Legitimate interests in providing a safe, functioning service, subject to assessment of your rights |
| Respond to enquiries, complaints and rights requests | Contract, legitimate interests in handling enquiries, or legal obligation, depending on the request |
| Send optional marketing or use storage/access technologies requiring consent | Consent where required, obtained separately from service terms |
For organisation-directed processing, the organisation identifies its own basis; Telari follows the agreed processing instructions. An employee is not assumed to have an individual service contract merely because their employer uses Telari.
Where we rely on consent, you can withdraw it without affecting the lawfulness of earlier processing. Withdrawing optional marketing consent does not stop essential messages about your account or purchases. Choosing a feature or allowing browser microphone access is not blanket consent to unrelated processing or overseas transfers.
AI processing and automated assessment
When you use an AI feature, Telari sends the information needed for that task to the authorised provider. An assessment request can include course material, the assessment instructions or rubric and your submitted answer. A Reference conversation can use authorised course extracts and your question. Studio generation can use the course framework, source material and draft or review instructions.
For native assessments using Telari-funded API access, the selected provider receives your answer and the relevant assessment material through Telari's credentials. You do not need an individual provider login for this route. Telari does not include your name, email address, account identity, membership or payment details in the request, keeping your Telari account identity separate from the grading content. Text you or an educator supplies can still contain identifying information; avoid including unnecessary personal information in that material.
Telari is model agnostic: the authorised provider and model depend on the feature and account configuration. Supported providers include DeepSeek, OpenAI, Anthropic, Google Gemini, Mistral and Z.ai where available and authorised. DeepSeek is currently the default for approved Telari-funded assessment. Telari controls access to its funded credentials; an educator cannot authorise learners to spend through Telari's keys. A personal key changes who supplies credentials and pays the provider; it does not remove Telari or the provider from the data flow, and the provider may associate that key with your own provider account.
If you access Telari through an external AI client or connector, that client can also receive the course information, tool results and conversations made available through your authorised session. Its provider's own privacy terms apply to the information you enter into that client. Telari does not control that provider's separate conversation history.
The model's response can produce a recorded score, feedback and completion or progression outcome according to the course rules. Outputs can be wrong. Contact your educator or TLsupport@telari-labs.com to question an outcome or seek review. We do not intend these learning results to be used as the sole basis for a decision with legal or similarly significant effects. An organisation wishing to use them in a significant decision must address its own legal basis, assessment, transparency and human-intervention safeguards.
We may retain generation diagnostics and request/response excerpts to investigate errors and operate the service. These records are separate from your saved course work and can contain parts of prompts or model outputs. Telari does not use your private course work or uploaded materials to train its own AI models. Each external provider's use and retention of information depends on the applicable API agreement and settings; a personal API key does not guarantee that information is excluded from provider training.
Audio and microphone use
If you activate Voice Answer or Audio Mode and permit microphone access, the browser streams microphone audio to Soniox for real-time transcription. The implemented microphone path does not upload the raw recording to Telari. Telari records speech-session usage, and transcripts may become a command or your submitted answer; submitted answers follow the normal learning and assessment processing. Text needed for narration or spoken feedback may be sent for speech generation. Generated recordings and playback information can be stored so authorised users can listen and resume playback. Generated narration is different from a recording of your microphone.
Soniox supplies speech processing. You can stop microphone capture through the feature or your browser permissions. The processing locations and applicable transfer arrangements are described below.
Soniox's published API privacy policy describes its retention and training practices. These are separate from Telari's retention of submitted transcripts and generated recordings. The relevant provider arrangements must cover the service and account used for your request.
Who receives information
Information is made available to people and providers who need it for the relevant service:
| Recipient | Purpose and relevant information |
|---|---|
| Educators and authorised organisation users | Course access, submitted work, feedback, progress and reports within their permitted roles |
| Vercel | Website hosting, application execution and operational request/log information |
| Supabase | Account authentication, database records and stored files/recordings |
| Stripe | Payment processing, subscriptions, invoices and the billing portal |
| Resend and the configured authentication email service | Account, invitation, billing or course notifications and delivery information |
| Selected AI providers | The relevant prompt, course extracts, answers, conversations or source material for the authorised task |
| Soniox | Speech audio for transcription and text for speech generation |
| Sentry, if enabled | Error and performance diagnostics; these can include technical or incidental personal information |
| A hosted partner you use | The linking, entitlement and course-delivery information needed for that integration |
| Professional advisers or authorities | Information necessary for advice, a legal obligation or a valid legal claim |
This list describes supported recipients; it does not mean every user record is sent to every provider. Embedded third-party videos or external content may receive your network/device information when they load. Their own policies apply.
Processing outside the UK
Hosting, support, AI and speech suppliers may process or access information outside the UK. Processing locations and safeguards depend on the selected provider, configured service and applicable API agreement. Using Telari-funded access keeps your Telari account identity out of native assessment requests as described above; it does not determine where the provider processes the submitted content. A customer-supplied API key does not itself provide a transfer safeguard.
The account database is hosted by Supabase in Ireland. Our hosting, database and email suppliers operate internationally. Their published data-processing terms describe contractual protections for covered international transfers, including standard contractual clauses and the UK transfer addendum where applicable: Supabase, Vercel and Resend.
AI and speech processing locations depend on the selected supplier and service region; suppliers can operate in the United States, Europe, China or other countries. The applicable API terms govern the submitted content. Where UK personal-information transfer rules apply, the processing must be covered by an applicable adequacy arrangement, contractual safeguard or other permitted mechanism. This notice does not treat an account-sharing choice or use of an API key as consent to every overseas use.
Contact TLsupport@telari-labs.com to request information or a copy of the applicable transfer safeguards.
Retention
We need different records for different purposes. Membership expiry can restrict feature or history access without deleting the underlying records. Archiving an educator course preserves authorised existing delivery and learning records; it is not a deletion request.
| Records | Retention period or criterion |
|---|---|
| Account and personal learning records | While your account is open and the records supply your learning history. On account closure or an erasure request, assess which records can be deleted and which limited records remain necessary for a specific legal duty, unresolved dispute or another person's existing rights |
| Course/source material and generated Audio | While needed to deliver the course or recording to authorised users, including existing paid entitlements. Removal of an educator's account or archiving a course does not by itself end those entitlements; continued retention must relate to an existing entitlement, rights claim or legal duty |
| Orders, subscriptions, payment-code and financial/audit records | Until the applicable accounting and tax record-keeping period has ended and any outstanding refund, payment dispute or legal claim relating to the record is resolved. These obligations may require limited records to remain after account closure |
| Generation diagnostics and excerpts | Individual generation records, including limited request/response previews, are configured to expire after 30 days; separately encrypted full payloads expire after 14 days. Organisation records use their configured policy; the default is 90 days for records, with no separately retained full payload. Expired records and payloads are processed by routine maintenance, so removal is not guaranteed at the exact expiry instant. These diagnostic limits do not delete your saved answers, feedback or course material |
| Security, support and operational records | While needed to resolve the particular enquiry, investigate the incident or dispute, or protect the service against an identified threat. Review continued need when the case or incident is closed; retain longer only for an identified legal requirement or ongoing claim |
| Backups | Where recovery copies are held, deleted information can remain until the copies expire or are replaced under the applicable backup schedule. Copies are used for recovery rather than ordinary account access. Completed deletion requests must be reapplied when restoring data. Backup availability and rotation depend on the configured service plan; we do not promise a fixed recovery period |
| Organisation-directed training records | According to the organisation's agreed instructions, applicable holds and the implemented disposal process |
We review whether records remain needed and delete or anonymise them when their purpose and any applicable retention requirement end. We do not retain information indefinitely just in case it might be useful. Erasure requests are assessed against legal duties, third-party rights and other lawful exceptions; they do not necessarily require immediate deletion of every backup or financial record.
Cookies and browser storage
Telari uses session cookies for authentication. Supported partner journeys also use a visitor/linking cookie. Browser storage can preserve your lesson presentation preference, playback position and an answer draft or timed pause in the current session. Browser permissions control access to your microphone.
Error and performance reporting can send technical diagnostics to Sentry when enabled; automatic inclusion of personal information is disabled and session replay is not configured. Embedded videos load from their providers when displayed and can introduce third-party requests or storage. Your browser's privacy settings can restrict third-party storage and requests. Telari does not currently offer a separate in-app preference centre for these features.
Clearing browser storage can remove saved preferences and unsubmitted local drafts. It does not delete submitted work held by Telari. Disabling necessary session cookies can prevent sign-in.
Your information rights and complaints
Depending on the processing and applicable law, you may request access, correction, erasure, restriction or a portable copy of your personal information. You may object to processing based on legitimate interests, and to direct marketing. You may withdraw consent where that is our basis. Rights and exceptions depend on the purpose and legal basis; a request is not automatically refused because your account is free or a membership has ended.
Send requests or privacy complaints to TLsupport@telari-labs.com. We may need proportionate information to verify your identity or clarify the request. We will respond within the applicable statutory period and explain any permitted extension or refusal.
If the information concerns organisation-directed training, contact the organisation named in your training notice; we can help route the request and assist under our agreement. Telari handles requests relating to its own controller purposes directly. Closing an account, cancelling a membership and erasing personal information are different actions. Telari does not currently provide a complete self-service account-erasure flow.
You can complain to the UK Information Commissioner's Office through its complaint service. Other regulators may be available where their laws apply. You do not have to complete our internal complaint process before contacting a regulator.
Children and security
Telari is a general-audience learning platform. Personal learner and educator accounts are for people aged 18 or over in the initial release. Any future school or institutional offering will have separate eligibility and processing arrangements. Educators determine appropriate course audiences within the applicable account rules; that does not remove Telari's responsibilities for the personal information it processes. Contact TLsupport@telari-labs.com if you believe someone under 18 has a personal account, so we can review it.
Telari uses access permissions and technical controls to protect information, including encryption for stored provider credentials and private access controls for relevant files. Access by educators or organisations follows their roles. No online system is risk-free. Contact us promptly if you think your account or information has been exposed; avoid sending secrets or full payment-card details in a support request.
Notice updates
We will update this notice when processing changes and identify its effective date. Material new purposes or provider/data-boundary changes require appropriate notice and any additional legal basis or consent before the new processing begins. A change to the notice does not itself create permission for every new use.