Tova APIs

Privacy Policy

Effective Date: March 18, 2026

Tova APIs ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and share information when you use our APIs, website, and related services (collectively, the "Service").

1. Information We Collect

Account Information

When you register for an account, we collect your first name, last name, email address, and password. Your password is stored in a hashed format and is never stored in plain text.

Payment Information

If you subscribe to a paid plan, payment is processed by Stripe. We do not store your credit card number or full payment details on our servers. Stripe handles all payment data in accordance with PCI-DSS standards. We may receive and store limited transaction details such as the last four digits of your card, billing status, and subscription identifiers.

API Usage Data

We collect data about your API usage, including the number of requests made, endpoints accessed, timestamps, and API keys used. This data is used to enforce plan limits, monitor service health, and improve the Service.

Log Data

Our servers automatically record information when you access the Service, including your IP address, browser type, referring URL, and the date and time of your requests.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service.
  • Process payments and manage your subscription.
  • Authenticate your identity and secure your account.
  • Monitor and enforce API usage limits.
  • Send you account-related communications (e.g., email validation, password resets, billing notifications).
  • Respond to support inquiries.
  • Improve the Service and develop new features.

3. Information Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: We share payment information with Stripe to process transactions. We may use other service providers to assist with email delivery and infrastructure operations. These providers are contractually obligated to use your data only as necessary to provide their services.
  • Legal Requirements: We may disclose your information if required to do so by law, or if we believe in good faith that such action is necessary to comply with legal obligations, protect our rights, or ensure the safety of our users.

4. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. API usage data is retained to support billing, analytics, and service improvement. If you request account deletion, we will remove your personal information within a reasonable timeframe, except where retention is required by law.

5. Data Security

We take reasonable measures to protect your information, including encryption of passwords, use of HTTPS for all communications, and secure server infrastructure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

6. Cookies

We use cookies to manage authentication sessions (keeping you signed in). We do not use third-party advertising or tracking cookies.

7. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

8. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete it.

9. Your Rights

You may:

  • Access and update your account information by signing in to your dashboard.
  • Request deletion of your account and personal data by contacting us.
  • Request a copy of the personal data we hold about you.

To exercise any of these rights, contact us at [email protected].

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on our website. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact

If you have questions about this Privacy Policy, contact us at [email protected].