Privacy Policy

Overview

Tovan ("we", "our", or "us") operates the Tovan circuit design platform at tovan.ai. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

We are committed to keeping your data safe and being transparent about what we collect. We only collect information that is necessary to provide and improve our service.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Display name (if provided via OAuth)
• Authentication provider information (GitHub or Google profile data shared during sign-in)

Using Tovan requires an account. If you used Tovan before accounts were required, you may still have an anonymous session. Anonymous sessions are not linked to your name or email. Their projects and chats move to your account when you sign up, and are otherwise deleted after about 30 days of inactivity.

Payment Information

If you subscribe to Tovan Pro, payment processing is handled entirely by Stripe. We do not store your credit card number, bank account details, or other payment credentials on our servers. Stripe may collect information necessary to process your payment in accordance with their Privacy Policy. We receive and store your subscription status, plan type, and billing period from Stripe.

Order & Shipping Information

When you place an order for a physical product, we collect your name, shipping address, and phone number so we can produce and deliver it. To produce and ship your order, we share your name, address and phone number with manufacturing partners, including partners located in China. We share this information only to fulfill your order.

Circuit Projects & Designs

Your circuit designs, project files, and associated metadata are stored on our servers so you can access them across devices and sessions. Projects are private to your account and are not shared with other users unless you explicitly choose to share them. When you order a board, an engineer on our team reviews your design before it is produced and may keep a working copy of it to prepare a correction for you; that copy is deleted once your order ships.

AI Chat & Interactions

When you use the AI chat feature, your messages, project files, and design previews are processed to generate circuit designs on your behalf. This processing is performed by our AI model provider under a data processing agreement that prohibits training AI models on your data. We do not use your chat messages to train AI models. Our AI model provider retains conversation data for a limited period (normally up to 30 days, longer only if flagged by their automated safety systems) and then deletes it on their own schedule. We may review chat interactions to understand how the product is being used and to improve its features and quality.

Improving Our Products

We keep records of how our design tools handle your boards and use them to find and fix problems and to test improvements. If you delete a project or your account, its records are deleted with it.

We may also use the designs of boards you create on or after September 26, 2026 to develop and improve our products and services, including by training machine learning models. This never includes your chat messages, and boards you created before that date are not used this way. You can turn off the use of your boards for training at any time in the account menu under Data sharing. Turning it off stops any further use of your boards for training, but a model that has already learned from a board cannot unlearn it. We never sell or publish your boards.

Usage Data

We collect usage data including token consumption, feature usage, session information, and messages sent to the AI assistant. This helps us maintain service quality, enforce usage limits, and improve the product. We also count visits to our website and blog: the page viewed, the site or campaign that referred you, and your approximate country. Visits are counted without cookies, and we do not store your IP address for this.

How We Use Your Information

We use the information we collect to:

• Provide and maintain the Tovan service
• Authenticate your identity and manage your account
• Process payments and manage subscriptions
• Save and sync your circuit projects across sessions
• Process AI chat requests to generate circuit designs
• Produce and ship physical products you order
• Track usage to enforce plan limits (e.g., free tier token limits)
• Send transactional emails (password resets, magic links)
• Email you about your projects, such as when a build you started finishes
• Send product updates and occasional marketing emails. Every one includes an unsubscribe link, and you can opt out at any time
• Improve and develop new features
• Train machine learning models on board designs, unless you turn this off

Data Storage & Security

Your data is stored using Supabase, which provides infrastructure hosted on Amazon Web Services (AWS). Data is encrypted in transit (TLS) and at rest. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, or destruction.

Cookies & Sessions

We use essential cookies and local storage to maintain your authentication session and remember your preferences (such as theme settings). Local storage also remembers which site first referred you to us, so we can tell which of our posts and campaigns bring people in. We do not use third-party tracking cookies or advertising cookies.

Third-Party Services

We work with the following categories of service providers, which may process your data on our behalf:

• Cloud hosting, database, and storage providers (your account, projects, and files)
• Payment processors (subscriptions and orders; card details never touch our servers)
• AI model providers (chat messages and design context, to generate circuit designs)
• Sign-in providers (GitHub or Google, if you choose to sign in with them)
• Transactional email providers (password resets, order and quote emails)
• Security and bot-protection services (sign-up and abuse protection)
• Error monitoring and analytics services (crash reports and aggregate usage; our analytics are cookieless)
• Manufacturing partners (name, shipping address, and phone number, to produce and deliver your orders)

Each provider processes data only as needed to provide its service and is governed by its own privacy policy and our agreements with it. If you would like to know which specific providers process your data, contact us and we will tell you.

International Data Transfers

We are a US company and most of our service providers process data in the United States. To produce and ship physical orders, we share your name, address, and phone number with manufacturing partners, including partners located in China. This information is shared only to fulfill your order. If you are in the European Economic Area or the United Kingdom, we make this transfer because it is necessary to perform our contract with you.

Data Retention

We retain your account information and project data for as long as your account is active. If you request deletion of your account, we will delete your personal data within 30 days, with two exceptions. First, we keep records of orders and payments for as long as tax and accounting rules require, with personal details removed where possible. Second, copies of data already shared with service providers to operate the service or fulfill your orders may remain on their systems for a limited period and are deleted under their own retention schedules. Anonymous session data is deleted after about 30 days of inactivity.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your circuit project data

To exercise any of these rights, contact us at the email address below.

Children's Privacy

Tovan is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: austin@tovan.ai