Privacy Policy

Effective Date:** June 19, 2026
Last Updated: July 4, 2026

This Privacy Policy describes how Thalos Inc ("Thalos," "Dallesk," "we," "us," or "our") collects, uses, and protects information when you use our website, platform, and services (collectively, the "Services"). By using the Services, you agree to the practices described in this policy.

1. Who We Are

Thalos Inc is a company doing business as Dallesk, providing done-for-you business automation services for small and medium-sized businesses. Our services include automated missed call response and lead capture, omnichannel messaging management (SMS, Google Business Profile, Facebook, Instagram, and website chat), AI-powered lead engagement, appointment reminders, Google review management, AI voice answering, customer win-back campaigns, and related pipeline and revenue reporting. Our principal place of business is in the United States.

2. Information We Collect

2.1 Account & Contact Information

When you create an account or contact us, we collect:

Full name
Email address
Business name and contact details
Any other information you voluntarily provide

2.2 Your Customers' Contact Information (Uploaded)

When you use Dallesk to run outbound campaigns — such as win-back or reactivation sequences — you may upload a contact list containing your existing customers' names, phone numbers, and email addresses. This data is subject to the special protections described in Section 4.

2.3 Inbound Lead Data (Automatically Captured)

When your business receives a missed call, an inbound message through a connected channel (SMS, Google Business Profile Chat, Facebook Messenger, Instagram Direct), or a website chat widget interaction, our system automatically captures:

The contact's phone number or messaging handle
The content of their message or the fact of their missed call
The timestamp and channel of the interaction

This data is captured on your behalf, belongs to your business account, and is handled under the same protections described in Section 4.

2.4 User-Generated Content

Content you create, upload, or submit through the Services, including campaign messages, templates, and media assets.

2.5 Usage and Technical Data

We may automatically collect certain technical information when you use our platform, including:

IP address and browser type
Device and operating system information
Pages visited and features used
Session timestamps and clickstream data

We use this information to operate and improve the Services. We may use cookies and similar technologies for this purpose. You can manage cookie preferences through your browser settings.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Services
Send automated responses to missed calls and inbound messages across connected channels
Capture, log, and route inbound leads into your pipeline
Execute outbound campaigns (appointment reminders, review requests, follow-up sequences, win-back campaigns) on your behalf
Answer inbound calls via AI voice agent (Total Control plan only — see Section 6)
Communicate with you about your account, billing, and support
Send service announcements and updates
Improve and develop new features
Detect and prevent fraud, abuse, and security incidents
Comply with legal obligations

We do not use your information for targeted advertising to third parties, and we do not sell your personal information.

4. Your Customers' Data — Special Protections

Whether your customers' contact information was uploaded by you or captured automatically by our system (e.g., from a missed call or an inbound message), we treat it with strict confidentiality:

Purpose limitation: Your customers' data is used solely to execute the specific automations and campaigns you have authorized. We do not use your customers' contact information for any other purpose.
Sent through your dedicated channel: All outbound messages (SMS and voice) are sent through a dedicated business phone number provisioned by Dallesk on your behalf. Your customers see your business identity, not Dallesk's. The number belongs to your account for as long as you remain a subscriber.
No sale, rental, or trade: We will never sell, rent, lease, share, or trade your customers' contact data to or with any third party for their own purposes.
No cross-client use: Your customer data is logically isolated to your account and is never combined with data from other Dallesk customers.
Retention: Customer contact data is retained only as long as necessary to deliver the Services and fulfill any legal obligations, after which it is deleted or de-identified.

5. SMS Messaging and A2P Compliance

Dallesk sends SMS messages on your behalf using dedicated business phone numbers registered through the carrier A2P 10DLC (Application-to-Person, 10-digit long code) system.

Your responsibility to obtain consent. You, as the business using Dallesk, are responsible for ensuring that all contacts who receive automated SMS messages have provided the consent required under applicable law, including the Telephone Consumer Protection Act (TCPA). Dallesk sends messages as your agent — we do not independently verify that consent exists for any specific contact. You agree not to use Dallesk to send messages to contacts who have not consented to receive them.

A2P 10DLC registration. To send SMS through U.S. carrier networks, Dallesk registers your dedicated phone number and messaging campaign with carriers. This registration requires us to provide carriers with information about your business and the nature of the messages being sent. Carrier registration fees are passed through to you at cost; Dallesk does not mark them up.

Opt-out handling. Our system automatically honors opt-out requests (e.g., STOP replies) and suppresses those contacts from future automated messages.

6. AI Voice Agent (Total Control Plan)

Subscribers on the Total Control plan may have inbound calls answered by an AI voice agent. The following applies:

Disclosure to callers. You are responsible for ensuring that callers are informed they may be interacting with an automated AI system, as required by applicable law. Dallesk will configure the AI agent to identify itself appropriately, but you should review the configured greeting for compliance with your jurisdiction's requirements.

Call recording and transcription. Inbound calls handled by the AI voice agent may be recorded and/or transcribed. Recording laws vary by state — some require all-party consent. You are responsible for ensuring compliance with applicable recording laws in your jurisdiction. Recordings and transcripts are stored in your account and are subject to the data retention policy in Section 8.

Data from calls. Information shared by callers during an AI-handled call (such as name, service inquiry, or contact details) is captured and stored in your pipeline as a lead record. This data is subject to the same protections described in Section 4.

7. How We Share Information

We do not sell your personal information. We may share information only in the following limited circumstances:

Service Providers. We work with trusted third-party vendors (e.g., cloud hosting, analytics, payment processors) who assist in delivering the Services. These vendors are contractually obligated to use your information only to perform services on our behalf and to maintain appropriate security.

Business Transfers. If Thalos Inc is acquired, merges with another entity, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you of any such change via email or a prominent notice on our website.

Legal Requirements. We may disclose information if required to do so by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Thalos, our users, or the public.

With Your Consent. We may share information with third parties when you have given us explicit permission to do so.

8. Data Security

We implement and maintain industry-standard technical and organizational measures to protect your personal information against unauthorized access, loss, alteration, or disclosure. However, no method of transmission over the Internet or electronic storage is 100% secure. We encourage you to use a strong, unique password for your Dallesk account and to notify us immediately if you suspect unauthorized access.

9. Data Retention

We retain your account information and personal data for as long as your account is active or as needed to provide the Services. We may retain certain data for longer periods where required by law or for legitimate business purposes such as dispute resolution and enforcement of our agreements. When data is no longer needed, we securely delete or anonymize it.

10. Children's Privacy

The Services are intended for users who are 18 years of age or older and are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will promptly delete it. If you believe a child under 13 has provided us with personal information, please contact us at the address below.

11. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to Know: You may request that we disclose what personal information we have collected about you, including the categories, sources, purposes, and third parties with whom it has been shared.
Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising. No opt-out is required, but you may contact us to confirm this.
Right to Limit Use of Sensitive Personal Information: To the extent we collect any sensitive personal information, you have the right to limit its use to what is necessary to provide the Services.
Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To exercise your California rights, please contact us using the information in Section 14. We will respond within 45 days of receiving a verifiable request. We may need to verify your identity before processing your request.

12. Links to Third-Party Sites

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before submitting any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending an email notification. Your continued use of the Services after the effective date of any update constitutes your acceptance of the revised policy.