Privacy Policy

1. Controller

The controller responsible for data processing on this website is Colin Schibli, Switzerland (full contact details).

2. What data we collect

• Account information: email address, display name, chosen password (stored as a bcrypt hash).
• Usage data: prompts sent, models used, monthly AI-budget usage and timestamps, used to provide the service and display analytics to you.
• API keys: encrypted at rest using AES-256. Never logged or exposed to the browser.
• Technical logs: IP address, browser type and pages visited, retained for 30 days for security purposes.
• Payment data: handled entirely by the payment processor shown during checkout. We do not store card numbers.
• Voice input: when you start push-to-talk, supported browsers may create a transcript on the device. If that is unavailable, the recorded passage is sent through Tavory to Cloudflare Workers AI for transcription. Tavory does not deliberately persist the raw recording.
• Camera and location: processed only after a separate permission and explicit action, when you choose to add that context to a Tay request.
• Google Drive metadata: if you connect Google Workspace and confirm a Tay search, Tavory may retrieve up to ten matching file names, MIME types, modification dates, sizes and Google Drive links. Tavory does not request Drive document contents for this tool.

3. Purpose and legal basis

We process your data to:

• Provide, maintain and improve the Tavory AI service (Art. 6 para. 1 lit. b GDPR, contractual necessity).
• Detect and prevent fraud or abuse (Art. 6 para. 1 lit. f GDPR, legitimate interests).
• Send transactional emails such as usage alerts (Art. 6 para. 1 lit. b GDPR).
• Comply with legal obligations (Art. 6 para. 1 lit. c GDPR).

4. Third-party processors

We work with the following sub-processors:

• Vercel - hosting and edge infrastructure (USA/EU).
• Neon - PostgreSQL database (EU).
• Stripe - payment processing (USA/EU).
• Trustpilot - review-invitation service and domain verification. Its registration script is loaded to verify Tavory's domain and enable review invitations.
• Requesty - AI model routing. Prompts may be forwarded to model providers per your selected model. See each provider's privacy policy.
• Cloudflare - edge services and speech-to-text processing for the push-to-talk fallback.
• Google - optional Google Workspace OAuth, Gmail actions and read-only Google Drive metadata search initiated by you.

5. Data retention

We retain account data for as long as your account is active. After account deletion, data is purged within 30 days except where required by law. Usage logs are retained for 12 months.

6. Your rights

Under the GDPR and Swiss revDSG you have the right to access, rectify, erase, restrict or port your data, and to object to processing. To exercise any right, email info@tavory.app. We respond within 30 days.

7. Cookies

We use essential cookies for session and security. Optional analytics are loaded only when you choose “Accept all” in the cookie banner. Trustpilot's domain-verification registration script is loaded to verify our site and enable review invitations; you can choose “Essential only” without losing access to the service.

8. Changes to this policy

We may update this policy. Material changes will be communicated by email or an in-app notice at least 14 days before taking effect.

9. Tay voice assistant

The microphone starts only when you activate voice input. The optional “Hey Tavory” or “Hey Tay” web wake phrase is user-enabled, works only while the Tavory page is visible and is used only when the browser reports that on-device speech recognition is available. On supported Android devices, a separately enabled wake mode may continue through a visible microphone foreground-service notification with an immediate Stop action. It starts only when Android guarantees on-device recognition, does not upload pre-wake audio and is not silently restarted after the process stops. Tavory does not use a cloud fallback for wake-word listening. Camera, current location and connected integrations require separate permission or confirmation. A confirmed Google Drive search uses read-only file metadata and does not read document contents. Operational voice telemetry contains timing, outcome and cost information, not recordings, transcripts, prompts, answers, files or email content.

10. Contact

Questions about privacy? Contact info@tavory.app or write to: Colin Schibli, Switzerland.