Privacy Policy

Tally Voice lets you ask questions about your QuickBooks accounts in plain English, by typing or by speaking. To do that, it keeps a record of your conversation. It does not keep a copy of your books.

1. Who we are

Tally Voice is operated by Infolabs Pty Ltd (ABN 61 615 110 346), an Australian company. We are the ones who decide what happens to the information described in this policy, and we are the ones you contact about it.

This policy covers the Tally Voice mobile app, the Tally Voice Telegram bot and the Tally Voice web dashboard at app.tallyvoice.ai, including its account-deletion page. It does not cover QuickBooks itself. Once you are inside QuickBooks, Intuit's own privacy terms apply to what happens there.

2. What we store

Every time you ask Tally Voice a question — in the app or through the Telegram bot — we store four things:

• the text of your question;
• the assistant's reply;
• which interface it came from, the app or Telegram; and
• the date and time.

That is the conversation history you see in the app. It is there so the assistant can follow what you are talking about, and so you can scroll back and check what it told you.

A voice note sent to the Telegram bot counts as a question here: it is transcribed and the words are stored the same way a typed one would be. Speaking in the app is different and stores nothing. Section 3 sets both out.

Your account

To have an account at all we store your email address and a scrambled (hashed) version of your password — we cannot read your password, and neither can anyone who reads our database. Alongside it we keep what you enter in Profile: your name, your business name, your plan, and your BAS reporting cycle and lodgment method.

Your QuickBooks connection

When you connect QuickBooks we store the identifier of your QuickBooks company and the access tokens that let us fetch figures on your behalf.

We are going to be exact about how those tokens are protected rather than reach for a reassuring phrase. They are held in our database, encrypted at rest. That database is not reachable from the internet — it accepts connections only from the application running on the same server. And you can revoke our access from inside QuickBooks at any time, which makes the stored tokens useless the moment you do it. That revocation is the strongest control here, it is entirely in your hands, and it does not depend on us.

Your Telegram link

If you connect Telegram we store your Telegram chat ID and user ID, your Telegram username and your first name, so the bot knows which account is asking. The codes used to set up that link are short-lived and expire ten minutes after they are generated.

Draft cards

Sometimes the assistant proposes an action rather than just answering — creating an invoice, adding a customer, adding a product or service. When it does, it shows you a draft card with a summary of what it is about to create.

We store the contents of that draft, not just a label for it. For a draft invoice that is your customer's name and every line's description, quantity and price. For a draft new customer it is whatever contact details were given for that person. Section 3 explains what that means for "we do not keep a copy of your QuickBooks data", and section 7 covers how long they are kept.

Your accountant's contact details

If you choose to enter contact details for your accountant or bookkeeper — their name, firm, email address and phone number — we store them. You enter these yourself, and we store them for one reason: so the app can show you a call button and a message button instead of making you go and find the number. We do not contact your accountant, and we do not use these details for anything else.

Because these are someone else's details, please only enter them if that person is happy for you to have them in the app.

3. What we do not store

We do not keep a copy of your QuickBooks data

Every figure Tally Voice quotes is fetched live from QuickBooks at the moment you ask. There is no copy of your ledger, your invoices or your accounts sitting in our database. When you stop asking questions, nothing about your books remains on our side.

Two honest qualifications, and the second is the larger one.

First, because we store the assistant's replies, a stored reply can contain a figure — for example, "your outstanding receivables are $42,300". That figure was accurate at the moment it was written, and it is stored as part of the conversation.

Second, when the assistant prepares a draft, the contents of that draft are written to our database. For a draft invoice that means your customer's name, the description of each line, the quantities, the prices and the total. For a draft new customer it means whatever contact details were dictated for that person — their name, and their email address, phone number or address if those were given. That is real information from, or on its way to, your books, sitting in our database. As set out in section 7, those rows are kept until you delete your account — confirming, cancelling or abandoning a draft does not remove it.

So both of these are true at once, and we would rather write the second one down than have you discover it: we hold no copy of your ledger and nothing copies your books across to us in the background — and it is not the case that nothing from your books is stored here.

We never keep a recording of your voice

No audio file is ever written — not on your phone, not on our servers, not anywhere. There is no recording of you to hand over, lose or leak, because none is ever made. That is true of both ways you can speak to Tally Voice.

What happens to the words is not the same for both, and the difference is worth setting out plainly rather than leaving under a reassuring heading.

So "we do not record your voice" is true in both cases, and in one of them it is not the whole answer. If you send a voice note to the Telegram bot, assume the words are written down, because they are. If you would rather nothing was kept, use the microphone in the app.

We do not sell your data

We do not sell your information, and we do not share it with anyone for advertising or marketing. The only places it goes are the service providers listed in section 5, and each of them is there to make the product work.

4. Where it is kept

Your conversation is stored in our own PostgreSQL database, running on a DigitalOcean server in Sydney, Australia (the SYD1 region). It is our database, not a shared one, and it is the only place your conversation history lives.

Your information does not leave that database except in the cases set out in the next section.

5. Who else sees it

Your information stays in our database except in the following cases. These are all service providers doing a specific job for us, not partners we hand your data to.

Anthropic — writing the answers

When you ask a question, your question and the recent part of your conversation are sent to Anthropic, which is the service that writes the assistant's reply. This is not an extra step where your question is passed along somewhere else afterwards. Sending it to Anthropic is how the answer gets written.

OpenAI — reading answers aloud

When the assistant speaks a reply to you, the text of that reply is sent to OpenAI, which turns it into speech.

OpenAI — transcribing Telegram voice notes

When you send a voice note to the Telegram bot, the audio is sent to OpenAI, which turns it into text. We keep the text; we do not keep the audio.

Telegram — the bot channel

If you use the Tally Voice Telegram bot, your conversation with it passes through Telegram and is held on Telegram's servers: the questions you type, the voice notes you send, and the replies the bot sends back, including any figures in them. Telegram is the channel the conversation travels over, not a service we send your data to for processing, but what Telegram holds is under Telegram's terms, not ours. Speaking in the app does not involve Telegram.

Google or OpenAI — live voice conversations

For live voice conversations, your audio is streamed to either Google (Gemini Live) or OpenAI, depending on which voice mode you have chosen. As above, the audio is streamed and discarded rather than recorded.

Intuit — your QuickBooks data

Questions about your books go to Intuit under the QuickBooks connection you authorised yourself, using your own login. We can only see what you gave that connection permission to see, and you can disconnect it from within QuickBooks at any time.

These providers are overseas

Anthropic, OpenAI, Google and Intuit are all based outside Australia, mainly in the United States. This matters and we are not going to bury it: while your conversation is stored in Australia, the text of your question does leave the country each time it is sent to one of them to be answered, spoken or looked up. That is unavoidable for a product that works this way, and by using Tally Voice you are agreeing to it.

6. One conversation, two doors

The mobile app and the Telegram bot are not two separate products with two separate histories. They are two doors into the same conversation. Ask a question in Telegram and it appears in the app. Ask it in the app and the bot knows about it.

This is deliberate and it is useful, but it has a practical consequence worth being clear about: if your business uses a shared Telegram account, then everyone with access to that account can see the whole conversation history — including questions asked from the app by someone else, and any figures those answers contained. If that is not what you want, use a Telegram account that only the right people can reach.

7. How long we keep it

Conversation messages: 365 days. A scheduled job runs every day and deletes messages older than that. This is a fixed window, not a guideline — there is a single value in our code that sets it, and the job runs daily whether anyone is watching or not. We have written it this way so the promise can be checked rather than taken on faith.

That 365-day window covers the messages in your conversation, and nothing else. It is worth being precise about the rest, because a retention promise that quietly applies to one table is not much of a promise.

Kept until your account is deleted:

• your account — email address and hashed password;
• your profile — your name, business name and plan;
• your accountant's contact details, if you entered them;
• your BAS reporting settings;
• your QuickBooks connection, for as long as it stays connected; and
• your Telegram link, for as long as it stays linked.

Kept until your account is deleted: draft cards. When the assistant prepares a draft invoice, a draft customer or a draft product, the contents of that draft are stored and they stay stored. Confirming it, cancelling it, or leaving it until it lapses does not delete the record — it only changes the status noted against it. Clearing your chat history does not remove it, and the daily 365-day job does not touch it. Only deleting your account removes it (section 8). We are stating this plainly because both "draft" and "expired" sound like something temporary, and in our database neither is.

8. How to delete it

Open the app and go to Profile → Clear chat history.

That is the whole process for your conversation. It happens immediately, it is permanent, and it covers both the app and Telegram — because they are the same conversation. You do not need to email us, raise a support request or wait for anyone to action it.

Note what it does not cover: it clears your messages. It does not clear your profile, your accountant's details, your QuickBooks connection, your Telegram link or your stored draft cards. Deleting your account, below, removes all of those.

Deleting your QuickBooks connection

You can disconnect QuickBooks from the Tally Voice web dashboard at app.tallyvoice.ai (there is no disconnect button in the mobile app). Doing so revokes Tally Voice's access with Intuit and deletes the stored tokens and company identifier from our database. You can also remove Tally Voice from inside QuickBooks, under Apps → Connected apps, which makes our stored tokens useless straight away; our copy of them stays in our database until you disconnect from the dashboard or delete your account.

Deleting your account and everything in it

You can delete your account yourself. In the app, go to Profile → Delete account. Or, from any browser, go to app.tallyvoice.ai/account/delete and log in. Either way you are asked to confirm first, because it is permanent and cannot be undone.

Deleting your account removes:

• your profile, your accountant's details and your BAS settings;
• your QuickBooks connection;
• your Telegram link;
• your entire conversation history; and
• any draft invoices, customers or products, including the contact details stored in them.

It also removes the email address and password that make up the account itself.

We revoke Tally Voice's access with Intuit as part of the deletion, so the app also disappears from QuickBooks → Apps → Connected apps. If Intuit cannot be reached at that moment, your account is still deleted on our side, and you can remove Tally Voice from Connected apps yourself at any time.

Anything already written to your QuickBooks books stays in your books. Confirmed invoices, customers and products belong to you and are not touched. We only remove what is ours.

Nothing is kept for reactivation: there is no soft delete and no way to bring an account back. The one trace that can remain for a short while is the routine infrastructure backup described in section 9, which is destroyed on a schedule. We do not restore individual deleted accounts from backups.

If you cannot log in, email us at the address in section 13 and we will delete the account for you.

9. Two things deletion does not cover

Two limits on the above. We are stating them here rather than in a footnote, because you should know about them before you rely on deletion.

10. Your rights under Australian privacy law

We are an Australian business, you are an Australian business, and your conversation is stored in Australia. Australian privacy law gives you a set of rights, and here is what each one actually means for Tally Voice.

Seeing what we hold

Section 2 is the full list of what we hold. Some of it you can already see for yourself: your conversation history is in the app in full, and so are your profile and the accountant contact details you entered.

Some of it you cannot see. Your QuickBooks connection details, your Telegram identifiers, and any draft card that has already been confirmed or cancelled are held in our database without being shown back to you. If you want the whole of it, in a form you can read, email us and we will send it.

Correcting it

If something we hold about you is wrong, email us and we will fix it. For the conversation history itself, correction is usually beside the point — it is a record of what was actually asked and answered — but you can clear it whenever you like.

Complaining

If you think we have mishandled your information, email us first. Tell us what happened and we will respond. If you are not satisfied with how we handle it, you can take the complaint to the Office of the Australian Information Commissioner, the regulator responsible for privacy in Australia, at oaic.gov.au.

Anonymity

Tally Voice cannot be used anonymously. It answers questions about your books, so it has to know whose books they are.

11. How we protect it

Access to the database described in section 4 is restricted to the people who need it to run the service, and the database itself is not reachable from the internet — it accepts connections only from the application running on the same server.

Your QuickBooks connection uses OAuth, which means we hold an authorisation token rather than your QuickBooks password — we never see or store your Intuit login. Section 2 sets out exactly how that token is held and what protects it. Read the two together; this section on its own is not the whole picture.

12. Changes to this policy

When we change this policy, the change appears on this page and the "last updated" date at the top changes with it. That date is how you can tell whether anything has moved since you last read it.

Where a change is significant — something that alters what we store, where it goes, or how long we keep it — we will also email account holders directly, so that you are not relying on noticing a date.

13. Contact us

For anything in this policy — a question, a correction, a complaint, or a request for information we hold about you — email hello@tallyvoice.ai.

We aim to respond within a few business days.