Privacy Policy
This policy explains how Toolvai ("we", "us") handles personal data on toolvai.com and across our products, including CGPT Flow, CF Flow, Gemini Flow and the Toolvai desktop workspace. Each product has its own policy that lists the exact data that product handles. For that product's data, the product's policy applies alongside this one.
1. What we collect and why
| Where | What | Why |
|---|---|---|
| Reviews you submit | Your name, the tool, your rating and the review text | To show your review publicly, but only after we approve it |
| Messages to support | Your email address and whatever you write to us | To answer you and improve our products |
| Basic website logs | IP address, browser type and the pages requested, kept by our hosting provider | To serve the site, keep it secure and fix faults |
| Product accounts | Email address, plan, credit or upload balance, usage records and device information | To run your account, meter usage and give support. Each product's own policy lists the exact data |
| Payments | Plan and payment status and a reference from our payment processor. Never your full card number | To keep your subscription or purchase in step with what you bought |
You can browse toolvai.com without an account. We don't run advertising or analytics trackers on it, and we don't use advertising cookies.
2. Who we share data with
We use these providers to run Toolvai. They process data for us under their own terms and privacy policies:
- Vercel — hosts toolvai.com.
- Supabase — database and sign-in for our products and for reviews.
- Creem — takes payments. It handles card details directly; we receive only confirmation and a reference.
- Brevo — sends service emails such as receipts and renewal reminders.
- Google (Gmail) — receives the messages you send to our support address.
We don't sell your personal data or share it for advertising. We also share data when the law requires it, to respond to valid legal requests, to protect people from harm, to enforce our Terms (including the Prohibited Content rules, and including reports to the relevant authorities where required or needed to protect a child), or if Toolvai is merged with or acquired by another company.
3. Why we may use your data
- To provide the service you asked for — running accounts, plans, payments and support.
- Our legitimate interests — keeping the Services secure, preventing abuse and fraud, enforcing our Terms, and improving our products.
- Legal obligations — for example tax and accounting records, and responding to lawful requests.
- Your consent — where we ask for it, such as publishing a review. You can withdraw it at any time.
4. Where your data goes
Our providers may process data in countries other than your own, including the United States. Where the law requires it, we rely on appropriate safeguards for those transfers.
5. How long we keep it
- Account data: while your account is active, and for a limited time after you close it.
- Billing and tax records: as long as the law requires.
- Support messages: as long as needed to help you and keep a record of what we did.
- Reviews: until you ask us to remove yours.
- Records connected to a breach of our Terms: as long as needed to deal with it and prevent it happening again.
6. Your choices and rights
Depending on where you live, you may have the right to see the data we hold about you, correct it, delete it, receive a copy of it, object to or restrict how we use it, and complain to your local data protection authority. To use any of these rights, or to have a review removed, email us. We may need to confirm it is you first. We'll answer within the time the law requires, and we won't treat you worse for using your rights. We keep what we must for legal, tax or fraud prevention reasons.
7. Security
We encrypt data in transit (HTTPS/TLS), limit access to account data to the staff who need it for support and abuse prevention, and use access controls in our database. No system is perfectly secure, so please use a strong, unique password and tell us straight away if you suspect your account has been accessed without permission.
8. Children
Toolvai is for people aged 18 or over, or the age of majority where they live. We don't knowingly collect data from children. If you think a child has given us data, contact us and we'll delete it.
9. Changes to this policy
We may update this policy as our products change. We'll change the "Last updated" date above and, for significant changes, tell you on the website or inside the product.
10. Product policies
Policies for our other products will be published here when they launch. See also our Terms of Service.
11. Contact
Privacy questions, requests, or review removals: toolvaisupport@gmail.com