Interim privacy notice — for testing, under legal review

Telli 5: testers and pilot users Aventelli Group · 6 Nov 2026 (updated) · Questions: privacy@aventelli.com

This temporary notice says what Telli 5 does today.

Made-up details only. Not for emergencies.

Use only made-up details: no real names, addresses, health or money details, or anyone else's information. Telli is not a doctor, counsellor, lawyer or emergency service. It now recognises more crisis and emergency wording and shows a help card, but it can still miss some. If anyone is in danger, call your local emergency number (in the US, 911, or call or text 988).

On your device

Your key, settings and up to 150 chats (pinned and foldered ones first, then the newest) stay in this browser. Sign out asks whether to remove your chats, Personalize text, saved prompts and companion from this device (ticked unless you untick it); chats already synced stay on our server for your key. While you type in a pop-up form (Report a problem, prompts, feedback, test notes), this browser tab keeps what you typed for up to 30 minutes so nothing is lost if it closes; it never keeps keys or codes, is cleared when you save, discard or sign out, and is not sent to us.

On our server (Amazon Web Services, Ohio, US)

• Synced chats. Sync is on from your first message unless you turn it off in Settings. We keep your messages, Telli's answers, titles, folders, search words and Personalize settings, up to 300 chats. Photos, document text and help cards stay on your device; only document names, page numbers and photo counts sync. Temporary chats, and chats with an ID number such as a patient number or date of birth, do not sync. Health details in ordinary words do.
• Memory: off unless you turn it on (tester keys need us to allow it); kept until you delete it.
• Feedback (thumbs, reason, comment) with your key name: 400 days.
• Usage records (time, key name, feature, model, tokens, cost): 400 days. Safety records (key name and category when a help card shows or a request is refused): 90 days. No message text in either; server logs of both: 30 days.
• Your key's settings, such as when you accepted the tester notice: no end date yet.
• Backups: continuous for 35 days, so deleted items can last that long there. A few one-off backups made before upgrades stay until we delete them.
• Who sees it: our admins see usage and feedback by key name, never chats, in an admin report. People who run our AWS account could reach stored data directly.

Outside services

• OpenAI writes answers (GPT-6.1 Sol and GPT-6 Luna), receiving your recent conversation, Personalize settings, memories if on, attachments and web sources. OpenAI's moderation model checks every message, photo and answer. OpenAI also suggests follow-ups and memories, and reads answers aloud in HD voices.
• Claude Haiku 4.5 and Claude Opus 4.5 (Anthropic), on Amazon Bedrock, check Evidence answers, receiving answer sentences and source passages, not your conversation.
• Brave Search gets search words made from your messages (up to 380 characters); in Evidence mode, OpenAlex and, for health questions, Europe PMC (UK) get them too. OpenAlex now also gets our own API key (kept in AWS Secrets Manager), so it knows the searches come from Telli; it still gets only the search words. Open-Meteo (Europe) gets a place name for weather.
• Dictation uses your browser's speech service, which may send your voice to the browser's maker. We don't send them your key name. Each follows its own terms; we are reviewing them.

Test runs

While a test-run banner shows, each request adds figures to that run: time, cost, tokens, errors and build, with your key name. No message text, answers or titles. Kept 400 days; avenTelli Testing keeps a copy with the run. Steps panel (on for admin keys only today; testers and family keys are off). It shows the case's steps from avenTelli Testing. Your Pass, Fail or Blocked, notes (masked as below), the final result and the run's conditions (the "weak signal" tick, phone or computer, screen size, and the connection type where the browser says it) go from your browser straight to avenTelli Testing, never through Telli's server.

Report a problem

This may be switched off for you. Conversation text goes only if you tick "Share this conversation", and you can preview it. Telli hides emails, phone numbers, card-like numbers, numbers of six or more digits, street addresses, and names after "my name is", "I am", a title, or a greeting or sign-off ("Thanks, Sam", "Hi Ana"), keeping the last 4,000 characters. Telli keeps reports, with your key name, for 400 days; copies can become tickets in avenTelli Testing, which only admins and support read, with no end date yet. Known gaps: names with no lead-in ("Sam said"), lower-case names after a greeting ("hi sam"), short numbers like PINs or ZIP codes, dates such as birthdays, and health details are not hidden.

Capture & report (tester screenshots)

On for admin keys only today. In a test run it attaches a picture of the Telli tab, not masked, only if you tick "Send this screenshot". The picture is made smaller (at most 1600 pixels); you can send pictures only on Wi-Fi, or later. It goes from your browser straight to avenTelli Testing, never through Telli's server, with your browser name, screen size, theme, language and country setting (avenTelli Testing keeps only the browser family and drops the country). Your text and shared conversation are masked in your browser and again by avenTelli Testing. Notice B says how long pictures are kept.

Waiting on your device (test runs only)

With no signal, step results, notes, the final result and reports (with pictures) wait in this browser until avenTelli Testing gets them: at most 7 days, 200 items or 40 MB, then they are deleted. The run's upload link stays only in this tab. Signing out deletes them, and the run, from this device.

Deleting

Delete a chat, or use "Delete all chats" (it asks first, and you can undo it for 10 seconds; with sync on, the server copy is deleted after those 10 seconds). "Stop syncing and delete from server" removes everything synced. Delete memories under "What Telli knows about me". Signing out with the box ticked removes your chats and personal settings from this device; clearing browser storage removes everything. You can't yet delete feedback, usage or safety records, reports or key settings yourself. They end as above, or write to privacy@aventelli.com; some removals are done by hand. We are reviewing this.