Tovi Privacy Policy

1. Who we are

Tovi is made by Viacheslav Yakobchuk, a self-employed person (autónomo) registered in Spain, who is the controller of the personal data described here. Questions and requests: support@tovi.work. The full legal details are in the Legal notice.

2. What stays on your computer

Tovi stores information on your computer. Everything you make in Tovi lives in a folder on your computer that you choose: projects, imported video and sound, transcripts, voice-overs, subtitles, edits and exported files, project documents and the data Tovi reads from your channels. We have no copy of it.

The keys you give Tovi — the key for an AI model, keys for other services you add to a project, and the access your channels granted — are stored on your computer apart from your projects, in Tovi's own folder, encrypted by your operating system for your user account. They are never shown in full, written to a log, or sent to us.

Tovi's window does not use cookies, except for YouTube's player described in section 4.

3. Your Tovi account

To use Tovi you create an account, with an email and password or with Google. When you create it, you accept our Terms of Service and this policy.

• Email and password. We keep your email, when you confirmed it, when the account was made and the language of our letters. Your password is kept only as a one-way hash (scrypt): we cannot read it.
• Codes by email. Confirmation and password codes are sent through Brevo, which receives your email address and the letter and uses them only to deliver it. A code lives 15 minutes; we keep only its hash.
• Google sign-in. We receive your Google account's identifier and email address, and nothing else.
• Signed-in computers. For each computer where you are signed in we keep the name your system gives it, whether it is Windows or Mac, when it signed in, when it was last used and when the sign-in ends — so you can see them in Tovi's settings and sign them out. The sign-in itself is kept only as a hash.
• Attempts. To stop password guessing, failed attempts are counted in the server's memory for up to an hour, by a scrambled form of the email or of your IP address, and never written down.

The server is in France (OVH, Gravelines), inside the European Union. It keeps no log of who visited: its own records say which request was made and how it ended, without your address, email or anything you sent.

Your account is kept until you delete it, in Tovi's settings (Settings → Account → Delete account) or by writing to us. It is then removed at once; the nightly copies of the server's data expire 30 days later. The projects on your computer are not affected.

4. YouTube

Tovi uses YouTube API Services. By using Tovi you agree to the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy.

What you allow. When you connect a channel, Google asks you to allow Tovi to:

• view your YouTube account (youtube.readonly) — the channel, its videos including unlisted and private ones, their titles, thumbnails and counts;
• view YouTube Analytics reports for your channel (yt-analytics.readonly) — views, watch time, audience retention, traffic sources and other reports;
• see your Google account's email address (openid, email), so Tovi can show which Google account a channel was connected with.

Tovi never asks for permission to change, upload or delete anything on YouTube.

How it is used. Tovi uses this data only to show you your channel, your videos and their figures, and to let you study them in your projects. It is not used for advertising and not combined with data about other people.

Where it goes. What Tovi reads is stored on your computer and shown to you. It is not sent to us. It is sent to an AI model only as described in section 6.

How long it is kept. Tovi follows YouTube's rules. A title, a thumbnail and the other descriptive values are refreshed or deleted within 30 days of being read. When 30 days have passed since Tovi last confirmed your channel's access, everything it holds from that channel is deleted — while Tovi is running, or the next time it starts, before anything is shown. When you remove a channel or a project in Tovi, its YouTube data is deleted at once and the access is revoked at Google.

Comments. Tovi can read the public comments under your newest videos, as any viewer sees them, using Tovi's own key rather than your account. It keeps a comment's text, date, likes and number of replies — nothing about who wrote it — on your computer, for at most 30 days.

The player. When you press a video to play it, YouTube's own player (youtube-nocookie.com) is loaded. That request goes to Google, may store information on your computer, and is covered by Google's policy. Nothing else in Tovi's window loads from Google.

Revoking access. Remove the channel in Tovi, or revoke Tovi's access at any time on Google's security settings page. After a revocation on Google's page, Tovi notices it at its next check and deletes the channel's data as described above.

Tovi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. TikTok

When you connect a TikTok account, TikTok asks you to allow Tovi to read your profile (user.info.basic, user.info.profile), your account's counts (user.info.stats) and the list of your public videos (video.list): each video's description, cover, and its views, likes, comments and shares.

Tovi uses this data only to show it to you in your projects. What Tovi reads is stored on your computer. When you remove the account or its project, the data is deleted at once and the access is revoked at TikTok. If TikTok stops accepting the connection, the data is deleted 30 days after Tovi notices. A connection ends one year after you allowed it, and you can connect again. You can also remove Tovi's access in the TikTok app.

Connecting, renewing and ending a TikTok connection passes through our server, because TikTok requires a secret only we may hold. The server adds the secret, forwards the request to TikTok and returns the answer to your computer, for a signed-in Tovi account only. It writes down nothing of what passes — not your TikTok access, your profile or your videos — only that the request was made and whether it worked.

6. AI models

Tovi's own features. Some features, such as a diagnosis of a video's retention or a reading of a channel's summary, are done by an AI model. You choose the provider — today the available provider is Anthropic — and use your own key; the provider's terms apply to what it receives. Before anything is sent, Tovi shows you exactly what will be sent, and nothing leaves until you press to send it. Tovi cannot delete what the provider has received.

Your agent. Tovi works with an AI agent you run yourself, such as Claude Code or Codex on your own subscription. The agent can read a project's channel figures and comments through Tovi only if you turn this on for that project in its settings. What the agent reads goes to its model's provider, under your agreement with that provider. Tovi cannot delete it from there.

7. Other services you connect

You can add keys for other services to a project (for example a voice service). Tovi hands a key only to the tool you run for that project, through Tovi. What the tool sends goes to that service under its terms.

8. Downloads

The first time a feature needs a component, Tovi downloads it from its publisher: FFmpeg for video, Python packages from the Python Package Index, speech and voice models from Hugging Face. Like any download, these requests show your IP address to the publisher. Tovi turns off the usage statistics Hugging Face's tools would otherwise send.

Each time Tovi starts, and once a day while it stays open, it asks GitHub, where its installers are published, for the number of the newest version, so it can offer you an update. That request, too, shows your IP address to GitHub; nothing else is sent.

9. This website

tovi.work is hosted by Vercel. It sets no cookies and shows no advertising.

We count visits with Vercel Web Analytics, which uses no cookies. A visit is recognised by a value computed from the request, which is discarded after 24 hours. What is kept is anonymous: the page, the time, the site you came from, your country, browser, operating system and type of device. It tells us how many people visit and how many download Tovi, and nothing about who they are. Like any host, Vercel receives your IP address to deliver the pages.

10. Who receives data

We share personal data only with the service providers we need to run Tovi, each acting on our instructions: OVH (France), which hosts our server; Brevo, which delivers account emails; Amazon Web Services (Stockholm, Sweden), which keeps the nightly copies of the server's data for 30 days; and Vercel (United States), which hosts this website and counts its visits, under the European Commission's Standard Contractual Clauses for transfers outside the EU. YouTube, TikTok, the AI provider you choose and the services you connect receive data from your computer, as described above, because you asked Tovi to talk to them. We disclose data to authorities only when the law requires it.

11. What we do not do

We do not sell or rent data, use it for advertising, or give it to data brokers. The Tovi program does not send us statistics about how you use it. People at Tovi do not read your channel data — it is not on our servers.

12. Legal basis

We process your account data because it is needed to provide the account you asked for (Article 6(1)(b) of the GDPR). The website's visit counts serve our legitimate interest in knowing how the site is used (Article 6(1)(f)); they identify no one. Your channels are read because you connected them (Article 6(1)(a)); you can withdraw that at any time by removing them or revoking access, without affecting what was done before.

13. Your rights

You may ask for a copy of your account data, correct it, delete it, receive it in a portable form, restrict its use or object to it. Write to support@tovi.work; we answer within one month. You may also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es), or to the authority of the country where you live.

14. Children

Tovi is not intended for people under 16, and we do not knowingly hold accounts of people under 16.

15. Changes

If this policy changes, we will say so on this page and in Tovi before the change applies, and ask for your agreement where the law or the platforms require it. The date at the top shows the current version.

16. Contact

Viacheslav Yakobchuk — support@tovi.work. The full legal details are in the Legal notice.