Privacy Policy
Last updated: November 8, 2026
tovid.app ("tovid", "we", "us") reads a web page, an RSS feed or an idea you give it, makes a short video from it and can post that video to the social channels you connect. This policy explains what personal data we handle to do that, why, who helps us, how long we keep it and the choices you have.
Questions or requests about your data: [email protected].
1. Data we collect
- Account data: your name, email address, profile picture, language and time zone, and a hashed password if you sign up with one. If you sign in with Google we receive your name, email address and profile picture from Google.
- Content you give us: the links, RSS feeds, ideas, product facts and text you submit, the scripts, captions and videos we make from them, videos and images you upload, and your brand settings (logo, colors, intro clip).
- Connected channels: when you connect YouTube, TikTok, Facebook, Instagram, Threads, LinkedIn, Telegram or Discord, we store the access tokens the platform gives us (encrypted), the channel or Page name, its id and picture, and the posts we publish for you (status, link, time).
- Billing data: your plan, credit balance and credit history, invoices and payment status. Card payments are handled by Stripe; we never see or store full card numbers. For bank transfer, MoMo or USDT payments we keep the invoice code, the amount and, for USDT, the transaction hash you give us.
- Team and affiliate data: people you invite to your team (email, role, projects), and if you take part in the affiliate program, referral clicks, referred accounts and commissions.
- Support messages: what you write to us and the screenshots you attach.
- Usage and device data: pages visited, actions in the app, IP address, browser and device type, collected through our server logs and Google Analytics.
- How you found us: the campaign tags (UTM) and referring website of the link that first brought you to tovid, the page you landed on, the country you signed up from, and, if you answer it, where you heard about tovid.
2. How we use it
- To provide the service: read the pages you submit, write scripts, create voice-overs, render videos and publish them to the channels you choose, at the times you choose.
- To run your account: sign-in, security, team access, credits, billing and invoices.
- To support you and send service emails such as sign-in codes, invites, payment receipts and replies to your tickets.
- To send a few getting-started tips by email in your first weeks (for example if you have not made or posted a video yet). Each tip is sent at most once, and every one has a link to stop them; service emails still go out.
- To learn which channels and campaigns bring people who find tovid useful, so we know where to tell others about it.
- To keep tovid safe and working: preventing abuse and fraud, fixing errors and measuring how features are used so we can improve them.
- To meet legal obligations, such as keeping payment records.
We do not sell your personal data, and we do not use your content or your connected channels to train our own AI models.
3. Connected social platforms
We access a connected channel only to do what you ask: list the channels or Pages you can post to, upload your videos with their captions, post a first comment with a link when you enable it, and read back the status and link of those posts. We do not read your private messages or post anything you did not create or schedule in tovid.
YouTube: tovid uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service (www.youtube.com/t/terms) and acknowledge the Google Privacy Policy (policies.google.com/privacy). Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke tovid's access at any time at myaccount.google.com/permissions.
Meta (Facebook, Instagram, Threads), TikTok and LinkedIn: you can also remove tovid from the app settings of each platform. Disconnecting a channel on our Connections page deletes its stored tokens from tovid.
4. Service providers we share data with
We share data only with providers that help us run tovid, and only what they need for their part:
- AI model providers (such as OpenAI and providers reached through API aggregators): the text of the pages you submit and the instructions to write scripts, captions and research summaries.
- Text-to-speech: the narration text, to produce the voice-over.
- Cloud storage and delivery (S3-compatible object storage, Cloudflare): rendered videos, uploads and brand files.
- Payments: Stripe for card and subscription payments.
- Email: Amazon SES and Mailtrap to deliver service emails.
- Analytics: Google Analytics, for anonymous usage statistics on our pages.
- Content sources: when you ask, product data services for shop links, stock photo libraries (Pexels, Pixabay), web search to research an idea, and CoinGecko for crypto prices.
- The social platforms you connect, which receive the videos and captions you publish.
We may also disclose data if the law requires it, to protect the rights and safety of our users or of tovid, or as part of a merger or sale of the business, in which case this policy continues to apply to your data.
5. How long we keep data
- Rendered videos: available to download and post for 48 hours, then deleted from our storage automatically.
- Images you upload in the studio: deleted automatically after 30 days.
- Videos you upload to post: deleted automatically after 7 days.
- Brand files (logo, intro clip): kept while your account exists.
- Projects, scripts and post history: kept while your account exists so you can see and reuse them.
- Payment and invoice records: kept as long as tax and accounting rules require.
- Server logs: kept for a limited time for security and troubleshooting.
7. Your choices and rights
You can see and edit your profile, projects, brand and connected channels in the dashboard, export your credit history from the Usage page, and disconnect any channel at any time.
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict some uses, and to complain to your data protection authority. Write to [email protected] and we will answer within 30 days.
8. Deleting your account and data
You can delete your account in the dashboard under Profile. Sign-in stops at once, automatic posting stops, and we delete or anonymize your personal data and content within 30 days, except records we must keep by law (such as invoices).
You can also ask us to delete your data, or only the data we received from a connected platform (for example Facebook), by writing to [email protected] from the email address of your account. Removing tovid from a platform's app settings also stops our access to that platform.
9. Security
We use HTTPS, store platform access tokens encrypted, hash passwords and limit who can access production systems. No system is perfectly secure; if we learn of a breach that affects your data we will tell you and the authorities as the law requires.
10. International transfers
Our servers and providers are located in several countries, including Singapore and the United States. When your data moves across borders we rely on the safeguards our providers offer for such transfers.
11. Children
tovid is not meant for anyone under 16, and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
12. Changes to this policy
When we change this policy we update the date at the top of this page. If the change is significant we will also tell you by email or in the app before it takes effect.
13. Contact
For any question about privacy or this policy: [email protected].