Privacy Policy
Last updated: March 17, 2026
1. Data Controller
The data controller for the Tonvo application is:
Tonvo
42170 Chambles, France
SIREN 101 134 633
Contact: contact@tonvo.co
2. Data We Collect
We collect the following categories of data:
Account Data
Email address, display name, authentication provider (Google or email/password), account creation date.
Session Data
Conversation transcriptions, tone analysis results, AI-generated suggestions, conversation scores, insights, and classification.
Screen Capture Data
When you share your screen, Tonvo captures frames for visual analysis. Frames are processed in real-time and are NOT permanently stored on our servers. Only the analysis results (text-based context, mood, insights) are saved.
Audio Data
Audio chunks are transmitted to our servers for transcription, then immediately discarded after processing. Only the resulting text transcription is stored as part of session data.
Subscription & Payment Data
Subscription plan, payment status, and billing period. Payment processing is handled by Stripe — we do not store credit card numbers.
Technical Data
Browser type, device information, IP address (for security purposes), and anonymized usage analytics.
3. How We Use Your Data
- To provide conversation analysis and real-time intelligence features.
- To generate session summaries, scores, and actionable insights.
- To maintain and improve the quality of our AI models and services.
- To manage your account and subscription.
- To communicate important service updates.
- To ensure the security and integrity of our platform.
4. Legal Basis for Processing (GDPR)
- Consent — Screen capture and conversation analysis are performed only when you explicitly start a session.
- Contract — Processing necessary to provide the services you subscribed to.
- Legitimate Interest — Security monitoring, service improvement, and anonymized analytics.
5. Data Retention
| Data Type | Retention |
|---|---|
| Account data | Until account deletion |
| Session data (Free plan) | 7 days |
| Session data (Pro/Team) | Duration of subscription |
| Screen capture frames | Not stored — processed in real-time only |
| Audio recordings | Not stored — transcribed then deleted immediately |
| Transcriptions & analysis | Same as session data |
| Payment data | As required by law (managed by Stripe) |
6. Third-Party Services
We use the following third-party services to operate Tonvo:
- Firebase (Google) — Authentication. EU (europe-west1)
- Supabase — Database and session storage. EU (europe-west1)
- Anthropic — AI-powered conversation analysis. Data is sent for processing and not retained by Anthropic beyond the API request.
- Stripe — Payment processing. Stripe is PCI-DSS compliant.
- Vercel — Application hosting. EU (europe-west1)
7. International Data Transfers
Some of our third-party providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission. All third-party providers comply with EU-US Data Privacy Framework or have signed Standard Contractual Clauses (SCCs) approved by the European Commission.
8. Your Rights (GDPR)
Under the GDPR, you have the following rights:
Right of Access
Request a copy of all personal data we hold about you.
Right to Rectification
Request correction of inaccurate personal data.
Right to Erasure
Request deletion of your personal data.
Right to Portability
Request your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interest.
Right to Restrict
Request limitation of processing in certain circumstances.
To exercise any of these rights, contact us at: contact@tonvo.co
9. Data Security
We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL), encrypted database storage, secure authentication via Firebase, and regular security audits. However, no method of electronic transmission or storage is 100% secure.
10. Children's Privacy
Tonvo is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at contact@tonvo.co.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.
12. Contact
For any questions regarding this Privacy Policy or your personal data:
Tonvo
42170 Chambles, France
Email: contact@tonvo.co
You also have the right to lodge a complaint with your local data protection authority (e.g., CNIL in France).