Privacy Policy

1. Overview

Tally Software, Inc. dba Hudson ("Hudson," "we," "us," or "our") provides AI operations software for banks, credit unions, mortgage lenders, loan servicers, fintech companies, and other financial services organizations.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, request a demo, create or use an account, communicate with us, or use our products and services.

Hudson is currently intended for use in the United States. If you use Hudson on behalf of an organization, your organization may have a separate agreement with us that also governs our processing of data.

2. Our Role

Hudson may process personal information in different roles depending on the context.

• For website visitors, demo requesters, account users, customer administrators, and business contacts, Hudson generally acts as an independent business or controller.
• For data submitted by or on behalf of a customer into the Hudson product, Hudson generally acts as a service provider, processor, or vendor under the customer's agreement with Hudson.

If you are an individual whose information was submitted to Hudson by a financial institution or other Hudson customer, please contact that organization directly for requests about your information. We will support our customer as required by our agreement and applicable law.

3. Personal Information We Collect

Information you provide

• Business contact information, such as name, work email, company, role, phone number, and messages you send us.
• Account information, such as name, email, organization, authentication details, role, permissions, and workspace settings.
• Communications, such as support requests, sales conversations, feedback, and meeting information.

Information from use of the website and product

• Device, browser, IP address, pages viewed, referring pages, timestamps, and similar log information.
• Product usage information, such as workflow activity, configuration events, audit logs, system events, and diagnostic information.
• Security and operational logs used to monitor, protect, debug, and improve Hudson.

Customer Data

Customers and their users may submit data into Hudson for workflow automation and operational use. Depending on the customer's configuration, Customer Data may include documents, loan files, borrower or customer records, emails, messages, workflow inputs, workflow outputs, servicing data, KYC information, financial records, account information, and other sensitive or regulated information.

4. How We Use Personal Information

We use personal information to:

• provide, operate, secure, and support Hudson;
• create and manage accounts, permissions, authentication, and customer workspaces;
• process demo requests, respond to inquiries, and communicate with prospects and customers;
• configure, run, monitor, and improve agent workflows and product features;
• debug, analyze, and improve performance, reliability, security, and usability;
• send administrative, security, product, support, and billing communications;
• send marketing communications where permitted, with unsubscribe options;
• comply with law, enforce agreements, prevent fraud, and protect rights and safety; and
• perform other purposes described at the time of collection or authorized by you or your organization.

5. AI Processing and Model Training

Hudson uses AI vendors and infrastructure providers to deliver AI-enabled workflow features. We design our production configurations and vendor agreements to protect Customer Data and to prevent Customer Data from being used to train third-party foundation models unless a customer expressly agrees otherwise in writing.

Where supported by a provider and applicable to the feature, Hudson uses zero data retention, no-training, isolation, contractual, and technical controls intended to protect Customer Data. Exact controls may depend on the provider, feature, customer agreement, and deployment configuration.

Users should review AI outputs before taking action, communicating externally, making regulated decisions, or relying on outputs in financial services workflows.

6. How We Disclose Personal Information

We may disclose personal information to:

• the customer organization that provides or controls your account;
• service providers and subprocessors that help us provide Hudson;
• AI, cloud, infrastructure, database, workflow, hosting, analytics, security, communications, and support vendors;
• professional advisors, such as lawyers, auditors, banks, and insurers;
• government authorities, regulators, law enforcement, courts, or third parties when required by law or necessary to protect rights and safety;
• parties to a business transaction, such as a merger, financing, acquisition, reorganization, or sale of assets; and
• others with your consent, your organization's direction, or as described in a customer agreement.

Hudson does not sell personal information for money. Hudson does not share personal information for cross-context behavioral advertising as those terms are commonly used under California privacy law.

7. Vendors and Subprocessors

Hudson may use vendors and subprocessors including AWS, Azure, OpenAI, Anthropic, Convex, Modal, Temporal, Render, and other providers that support hosting, AI processing, workflow execution, databases, infrastructure, security, support, analytics, and communications.

We require service providers that process Customer Data to use appropriate safeguards and process data for authorized purposes. Customer agreements may provide additional subprocessor notice, objection, audit, or data protection rights.

8. Cookies and Similar Technologies

We may use cookies, pixels, local storage, log data, and similar technologies to operate the website, keep sessions secure, remember preferences, understand site interactions, measure demo interest, and improve our services. You can control cookies through your browser settings, but some features may not work correctly if cookies are disabled.

We may use business analytics or website tracking tools to understand how companies interact with our website and to support sales and marketing outreach. Where required by law, we will provide applicable choices.

9. Security

Hudson uses safeguards designed to protect personal information and Customer Data, including encryption in transit and at rest, access controls, logging, monitoring, and vendor security controls. More information is available on our Security page.

No security program can guarantee absolute security. Customers and users are responsible for protecting credentials, configuring access appropriately, and using Hudson consistent with their security policies.

10. Retention

We retain personal information for as long as reasonably necessary to provide Hudson, maintain accounts, comply with agreements, meet legal obligations, resolve disputes, enforce rights, maintain security, and operate our business.

Retention of Customer Data is governed by customer agreements, product settings, legal requirements, and operational needs. We may retain backups, logs, and records for a limited period after deletion where necessary for security, continuity, legal, or compliance purposes.

11. Marketing Communications

We may send product, event, educational, or marketing communications to business contacts and demo requesters where permitted by law. You can unsubscribe from marketing emails by using the unsubscribe link or contacting us. We may still send transactional, security, legal, or service-related messages.

12. California and Other U.S. Privacy Rights

Depending on where you live and how you interact with Hudson, you may have rights to request access, correction, deletion, portability, restriction, or information about certain disclosures of your personal information. You may also have the right not to be discriminated against for exercising privacy rights.

California residents may have rights under the California Consumer Privacy Act, as amended, if the law applies to Hudson and the relevant information. Hudson does not sell personal information or share personal information for cross-context behavioral advertising. We will honor applicable opt-out preference signals where required.

To submit a privacy request, contact privacy@hudsonhq.com. We may need to verify your identity and authority before completing a request. If your information is controlled by a Hudson customer, we may direct your request to that customer or support the customer in responding.

13. Children's Privacy

Hudson is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Hudson, contact us at privacy@hudsonhq.com.

14. U.S. Use Only

Hudson is intended for use in the United States. If you access Hudson from outside the United States, you understand that personal information may be processed in the United States and other locations where our service providers operate.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice by posting the updated policy, emailing account contacts, or using another reasonable method. The "Last updated" date indicates when this policy was last revised.

16. Contact

Tally Software, Inc. dba Hudson
2261 Market St Ste 22950
San Francisco, CA 94114
privacy@hudsonhq.com