Privacy Policy

1. Information We Collect

When you use tovli.ai, we collect:

• Account information (email, name) when you sign in with Google
• Portfolio data (NGOs you support, donation preferences)
• Donation history and preferences

We do NOT collect:

• Your location or GPS data
• Your browsing history outside of tovli.ai
• Your raw card number in our app or analytics — it's held only in our isolated, PCI Level 1 vault

2. How We Use Your Information

We use your information to:

• Provide personalized cause recommendations
• Manage your charitable giving portfolio
• Improve our AI-powered discovery service
• Communicate about your account and donations

3. Data Sharing

We do NOT sell, rent, or share your personal information with third parties for marketing or advertising purposes.

The only exception is sharing the minimal information required with the payment networks and charities needed to complete your donations. This is necessary for the service to function.

4. Data Security

We implement industry-standard security measures to protect your data. Your information is encrypted in transit and at rest.

5. Third-Party Services

We use:

• Google OAuth for authentication
• Large language models (LLMs) for cause discovery and recommendations
• Payment networks and card processors to complete donations

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time.

7. Your Rights

You have the right to access, correct, or delete your personal data. Contact us to exercise these rights.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

9. Contact Us

For privacy concerns, contact us at: rubin.idan@gmail.com