Privacy policy

The short version

• You can try Tova without an account.
• With an account we store your email address and the work you save.
• We use no advertising and no third-party tracking. The only cookie is the sign-in session.
• Site analytics count events against a daily-salted hash. No raw IP addresses are stored, and the hash changes every day, so it cannot follow you.
• Payments go through Stripe. We never see your card number.
• Delete your account by emailing us from the account address. Everything you saved goes with it.

What we store, and why

• Email address, for sign-in links and to identify your account. If you sign in with GitHub we receive your GitHub email address, name, avatar and account identifier, nothing else.
• The work you save, visible only to you unless you share it, enforced in the database.
• Subscription state if you pay: your Stripe customer identifier, the plan, its status and the current period end.
• AI usage: a count of AI runs per day, kept against your account (or a daily hash of your IP address when you are signed out) to apply the free daily limit.
• Feedback you send: the message, any screenshot you attach, the page you sent it from and your plan. Screenshots are stored privately.
• Email preferences: whether you want tips and offers by email, and whether emails to you bounce.

Site analytics

We record product events such as a page view or a checkout started. Each event stores the event name, a few properties about the event itself, the page path, the referring site's hostname, the account identifier if you are signed in, and a visitor hash: a one-way hash of your IP address mixed with a salt that changes every day. We do not store the IP address. No cookie is set for analytics.

Who processes it

• Neon (database, hosted in the United States): accounts, sign-in sessions, saved work, subscription state, events and feedback.
• Stripe (payments): card details, billing address and invoices. Card numbers never reach our servers.
• Anthropic (AI features): the text you send to an AI feature is sent to Anthropic's API. Your email address and account identifier are not sent. Anthropic does not use API inputs to train its models.
• Resend (email): your email address and the content of the emails we send you.
• Cloudflare (hosting, network and file storage): serves the site, stores feedback screenshots privately, and keeps short-lived request logs for security, as any host does.
• GitHub, only if you choose to sign in with GitHub.

We do not sell personal data and we do not share it with advertisers. We disclose it only to these processors, or if the law requires us to.

Cookies

Signed-in users get a session cookie so the site knows who you are; it is essential to the service and is removed when you sign out. There are no analytics or advertising cookies.

Your rights, and how to delete your account

To delete your account, email hello@tovaedit.com from the address on the account. We delete the account, its saved work and its event history within 30 days and confirm by email. Payment records stay with Stripe for as long as tax law requires. If you are in the EEA, the UK or another jurisdiction with data-protection rights, you can also ask for a copy of your data, a correction or a restriction, and you can complain to your local supervisory authority.

Retention

• Accounts and saved work: until you delete them or the account.
• Site events: up to 24 months, then deleted or aggregated.
• AI inputs: not stored by us beyond the request.
• Payment records: as required by law, held by Stripe.

Children

Tova is not directed at children under 16 and we do not knowingly collect their data.

Changes

If this policy changes in a way that matters, the date at the top changes and account holders are told by email.

Contact

Tov Digital (Pty) Ltd, hello@tovaedit.com. See also the terms of service and the refunds and cancellation policy.