Telmy.ai Privacy Policy

1. Core Privacy Commitment (Privacy-First)

Telmy.ai ("we", "our", or "the Service") is strictly committed to protecting the privacy of our users. Our core operational design is Privacy-by-Architecture: Telmy.ai only inspects public form schema metadata so the AI assistant can provide accurate, contextual field guidance. We never collect, sell, or monetize your personal information.

2. Information We Process

When you activate Telmy.ai on a web page, the extension only parses structural interface metadata of the form, which includes:

• Form labels and question titles (e.g., "Place of Birth", "Passport Number").
• Input element types (text, date picker, multiple-choice, select dropdown, checkbox).
• Default placeholder text and validation patterns (expected date format, numerical digits).

3. Zero-Knowledge Client-Side Encryption (CSE) & Cryptographic Guarantees

For features requiring profile data storage and 1-Click AutoFill, Telmy.ai employs an advanced Mathematically Zero-Knowledge Client-Side Encryption (CSE) architecture:

• Bank-Grade & Bitcoin-Standard Cryptography: All profile fields are encrypted on your own device using AES-GCM 256-bit with keys derived through PBKDF2 (100,000 iterations of SHA-256) from your personal 6-Digit Master PIN.
• Zero Server Access (Mathematically Zero-Knowledge): Neither Telmy administrators, cloud operators, nor database engineers hold your Master PIN or decryption keys. Cloud Firestore stores only unreadable ciphertext envelopes (ciphertext, iv, salt).
• Zero Physical Document Retention: When you ingest supporting identity documents (KTP, Passport, Academic Diploma), files are processed ephemerally in Cloud Run memory solely for entity extraction via Gemini Multimodal. The physical document file is permanently shredded from memory immediately upon extraction—zero storage on disk or Cloud Storage.
• Full User Sovereignty: You retain complete granular control with per-field edit, per-field delete, and a 1-click Master Vault Wipe that completely purges all data locally and in the cloud.

4. Push-to-Talk Microphone Privacy

Telmy.ai features an on-demand voice assistant designed strictly around the Push-to-Talk principle. The microphone is only enabled when you explicitly click the microphone button in the native side panel, and automatically shuts off when you finish speaking. We never use wake-words or continuous background listening. Audio stream data is only utilized for live speech-to-text question transcription.

5. Secure Cloud AI Processing

Contextual reasoning and voice synthesis requests are processed via secure, encrypted cloud APIs. Field metadata transmitted for guidance contains zero personally identifiable information (PII).

6. Chrome Web Store Policy Compliance

The Telmy.ai extension adheres strictly to the Chrome Web Store Developer Program Policies and the Limited Use requirements. Form metadata is never transferred to third-party data brokers, used for advertising targeting, or used for credit eligibility determinations.

7. Contact & Inquiries

If you have questions regarding this privacy policy or our data practices, please contact our team via: privacy@telmy.id or support@telmyai.com.