Telltale
Open console

Consent layer for personal agents

Your agent fills in forms for you. Telltale decides what it gives away.

Telltale sits between a personal AI agent and every website it touches. Each recipient is checked against its own legal filing, every field you share is marked, and if your data turns up where it shouldn't, you have the evidence.

Take the tourOpen the console

The tour is open to everyone. The console runs a live agent and asks for the team password.

Intercepted · awaiting your consent

Your agent wants to give personal data to

www.bestautoinsurance.com

InspectRegistered data broker

In its filing with the State of California, Apollo Interactive, LLC reported denying 13,539 of 15,040 deletion requests in 2024.

  • Full nameSendTagWithhold
  • EmailSendTagWithhold
  • PhoneSendTagWithhold
  • Street addressSendTagWithhold
  • ZIP codeSendTagWithhold
signed receipt on release1 sent · 2 tagged · 2 withheld
603
registered data brokers checked

California Privacy Protection Agency, 2026 filings

32
say they sold or shared consumer data with an AI developer

Self-reported in the same filings

55
privacy-rights pages hidden from search engines

Daylight sweep, Oct 22, 2026

18
brokers hide their own opt-out page

Verbatim tag or header recorded for each

The problem

Agents now hand out personal data at machine speed. The other side is rarely who it appears to be.

Agents fill forms without reading them

Personal agents now book appointments, request quotes and open accounts. They type your name, email and address into whatever form is in front of them, and nobody checks who is on the other side.

Helpful-looking sites are often data brokers

Quote comparison and people-search sites collect contact details to resell them. Many are registered as data brokers in California, but nothing on the page tells you, and nothing tells your agent.

Once your data is out, you can't prove who sold it

Every company that holds your email looks equally guilty. Opt-out and deletion rights exist, but without evidence a person has no way to show a broker ignored them.

www.bestautoinsurance.com compares car insurance quotes. Its operator, Apollo Interactive, LLC, is a registered data broker that reported denying 13,539 of 15,040 deletion requests in 2024.

How it works

Every disclosure passes through four steps.

The agent does the browsing. Telltale owns the moment your data leaves.

See it step by step
  1. 01Intercept

    When the agent reaches a form, it asks Telltale for field types, never values. The model provider never sees your details.

  2. 02Inspect

    Telltale identifies the recipient and checks it against the State of California's data broker registry and a live audit of each broker's opt-out page.

  3. 03Sanitize

    Ordinary sites pass without a prompt. For a registered broker you decide each field: send it, give a tagged value, or leave it out.

  4. 04Release

    Only what you approved is typed, under a tag unique to that site, with a signed consent receipt. Brokers receive an opt-out with a legal deadline.

Product

Built to produce proof, not just aliases.

Email aliases tell you which site leaked an address. Telltale decides before anything is shared, marks every field, and turns a leak into a dated violation of a request the broker was legally required to honour.

Recipient intelligence

Each site is matched to its legal filing, including whether the company sold data to AI developers, shared it with law enforcement or collects precise location.

Field-level consent

Decisions are made per field, not per site. Identifiers the law expects to be accurate, such as SSN or date of birth, are never altered.

Tagged identities

Every disclosure gets a working inbox and a tag code. Mail still reaches you; every copy of your data now says where it came from.

Signed consent receipts

Each release is recorded in an Ed25519-signed receipt aligned with ISO/IEC TS 27560, so you can show what you agreed to and when.

Deadlines and evidence

Telltale sends the opt-out, tracks the 15-business-day deadline, and when a tag turns up somewhere else it assembles a dated complaint for the regulator.

Daylight

A continuous audit of all registered brokers' opt-out pages. It records the exact tag, header or robots.txt rule that hides a page from search engines.

For people

A consent layer for the agent you already use, with tagged identities, receipts and enforcement handled for you.

For teams building agents

The same gate inside your agent: a registry check before any disclosure, tagged fields and signed receipts, so it never hands a user's details to a broker without asking. Daylight stays public.

Public record

Grounded in filings companies make under oath, with their limits stated.

Since 2026, California requires data brokers to disclose whether they sold data to AI developers, law enforcement, the federal government or foreign actors. Telltale reads those answers directly from the state registry.

  • Registry answers are self-reported by each broker and not audited by the State.
  • Only brokers registered in California are listed; an unlisted company is not proof of safety.
  • Request counts cover 2024; a denied request may be one the broker could not verify.
  • Daylight sees what an honest crawler sees. A blocked page may be bot protection, not hiding.
  • A tag being contacted proves the data moved, not on its own who sold it. The strong case is contact after the opt-out deadline.
  • Source: California Privacy Protection Agency · Data Broker Registry

Follow one disclosure from request to evidence.

Seven steps, about two minutes, using the real filing for a real quote site.

Take the tourOpen the console