Privacy Policy

Last updated: January 2026

1. Introduction

Welcome to Tooveo ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at tooveo.app (the "Service"). Please read this policy carefully. By using the Service, you agree to the practices described here.

If you have questions about this policy, contact us at privacy@tooveo.app.

2. Information We Collect

We collect the following categories of information:

Account information: When you create an account, we collect your name, email address, and (if applicable) Google account profile information.
Usage data: We collect information about how you use the Service, including video generation counts, feature usage, and session activity.
Documents and content: When you upload documents for processing, those files are transmitted to our backend for AI analysis. We do not permanently store your uploaded documents — they are processed in memory and discarded after the session.
Payment information: Payments are processed by Paddle. We do not store your credit card details. We only receive confirmation tokens and subscription status from Paddle.
Technical data: We may collect browser type, device type, IP address, and referral URLs for security and analytics purposes.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and improve the Service
Manage your account and subscription
Process AI video generation requests
Track usage limits and enforce plan restrictions
Send transactional emails (account creation, billing receipts, password resets)
Respond to support requests and communications
Monitor for security threats and abuse
Comply with legal obligations

We do not sell your data to third parties. We do not use your uploaded documents to train AI models.

4. Data Retention

We retain account data (name, email, usage counts, subscription status) for as long as your account is active or as needed to provide you the Service. Uploaded documents are not retained after processing. Generated video data is stored in your account history until you delete it.

If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (for example, billing records).

5. Third-Party Services

We use the following third-party services to operate Tooveo:

Firebase (Google): Authentication, database (Firestore), and cloud functions. Subject to Google's privacy policy.
Paddle: Payment processing and subscription management. Subject to Paddle's privacy policy.
Google Cloud / AI APIs: Document vision, AI reasoning, and text-to-speech processing. Data is processed per Google's data processing terms.

We do not share your personal data with third parties for marketing purposes.

6. Cookies and Local Storage

We use browser local storage to store your theme preference (light/dark) and, for unauthenticated users, a usage counter. We do not use third-party advertising cookies. Firebase may set session cookies for authentication.

7. Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. All data transmission between your browser and our servers is encrypted using TLS. Firebase security rules restrict database access to authenticated users.

No system is 100% secure. If you discover a security issue, please report it to security@tooveo.app.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Object to or restrict certain processing
Data portability (receive your data in a structured format)

To exercise any of these rights, contact us at privacy@tooveo.app. We will respond within 30 days.

9. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn we have done so, we will delete that information promptly. If you believe we may have collected information from a child, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us: