PLAIN-LANGUAGE DATA MAP

Privacy

Talons is built to inspect security-sensitive information without casually turning your computer into a cloud dataset. Checks and repairs run in the installed app. Its online coordination service receives only the bounded results and records needed to complete the work you chose.

What stays on your device

Raw machine inspection, file reads, command execution, periodic background monitoring, and remediation happen locally. Talons does not upload a copy of your disk. A capability may return selected findings, excerpts, metadata, or receipts to the assistant when that information is needed to explain or complete your request.

What the service keeps

We store your Owl + Kestrel account identifier; registered device and connection identifiers; access requests and approvals; task state; bounded results; security and action records; feedback; and source contributions needed to operate, secure, debug, and improve Talons. Sign-in and session cookies are essential service cookies, not advertising trackers.

The alpha does not yet publish one blanket retention period for every record. Active connections and standing permissions remain until they expire or you revoke them. Security, consent, contribution, and update records may be retained longer because they establish what happened and who authorized it. We will publish narrower schedules as the service matures.

ChatGPT and other assistants

When you use Talons through ChatGPT or another model provider, that provider processes the conversation and tool results under its own account settings and privacy terms. Talons does not control the provider's copy of your conversation. Use the local CLI if you do not want a hosted model involved.

Research and contributions

Feedback enters Talons' private product work queue, where related reports can be reviewed and combined. To triage that queue, Owl + Kestrel sends the submitted feedback, limited device context included in it, and a bounded list of existing Issue summaries to Google AI Studio. Google's Gemma model recommends whether the report relates to product work or another support lane; it cannot change code, close feedback, publish research, or deploy software. Local monitoring observations are not sent for triage unless you or your assistant explicitly submit them as feedback.

Suggested source changes, reviews, votes, and research contributions are attributed to the signed-in contributor. Only research explicitly approved for publication appears in the public feed; customer-specific and unpublished observations remain private. Retractions and removals are logged rather than silently rewriting the moderation history.

Your controls

You can pause monitoring, deny or revoke a connection, remove standing permissions, stop elevated access, sign out, or remove the app. You may request access, correction, export, or deletion of personal data tied to your identity. Some de-identified, security, accounting, contribution, backup, or legally required records may remain where necessary.

Providers

We use service providers for hosting, identity, model interaction when you choose it, Google AI Studio for bounded feedback triage, payments when you donate, email, and security operations. We do not sell Talons data, run ads, or use advertising trackers on the Talons product site.

Contact

Privacy questions or deletion requests: privacy@owlandkestrel.com.