Privacy Policy

1. Who we are

Toastivo is operated by Toastivo, Montreal, QC, Canada. For privacy questions, contact www.toastivo.com/contact.

Where the GDPR or UK GDPR applies, the operator is the data controller for the personal data described here, except where we act as a processor on your behalf for the content you submit.

2. Account and profile data

You can use most of Toastivo without an account. If you create one, we process your email address, an account identifier, and authentication timestamps.

If you sign in with Google, we receive from Google the basic profile information you approve — typically your email address, name and profile picture URL. We do not receive your Google password, and we do not access your Gmail, contacts or files.

3. Interview answers, speeches and coaching notes

The heart of the product is your material: the onboarding choices you make, the answers you give in the interview, transcripts of those answers, corrections you type, the story summary, generated drafts and versions, refinements, your final selected version, and rehearsal coaching notes.

Before you sign in, this content is stored only in your browser on the device you are using. If you sign in, it is uploaded to your private account in our cloud database, where per-row access rules restrict reading and writing to your account alone — this is enforced by the database itself, not only by the app.

4. Voice and audio

Interview recordings are captured in your browser and saved on your device (IndexedDB). To turn speech into text, the audio file is transmitted to our server and forwarded to a speech-to-text model provider. The transcript is returned to you for review and correction.

If you are signed in, interview recordings are additionally uploaded to a private storage bucket, scoped to your user folder and readable only via short-lived signed links. There are no public URLs. If you have never signed in, no recording leaves your device except transiently for transcription.

Rehearsal (practice) audio is kept on your device only. It is transmitted for transcription so that coaching can be generated, but the rehearsal audio file itself is not stored on our servers, and only your most recent rehearsal recording is retained locally.

We do not use your voice to train voice models, and we do not create voice prints or biometric identifiers.

5. AI processing

Transcription, interview follow-ups, the story summary, speech drafting and rehearsal coaching are produced by third-party AI model providers, accessed through an AI gateway. The audio and text needed for the task are sent to those providers.

Requests do not include your name as an account holder, your email address or your account identifier. They may of course include the names and stories you chose to talk about, because that is the material the speech is written from.

AI output is generated, not verified. Please read it before you use it.

6. Payments

The paid speech unlock is processed by Stripe using Stripe Checkout. Payment card details are entered in Stripe Checkout, hosted by Stripe or securely embedded on our site — Toastivo never sees or stores full card numbers, CVC codes or bank credentials.

We store a purchase record containing your account identifier, the project it applies to, the amount and currency, the status, and Stripe's session and payment identifiers, so that your unlock can be restored on any device.

7. Cookies, local storage and similar technologies

Strictly necessary storage: an authentication session (cookie and local storage) so you stay signed in; your project working copy in local storage; recorded audio in IndexedDB; your language preference; reading-mode text size; and your consent choices. These are required for the product to function and cannot be switched off.

Analytics: Toastivo currently records only functional diagnostic events — which step happened, whether it succeeded and how long it took — with no visitor identifier and no transcript text. These events are not shared with an advertising network. Where analytics is not strictly necessary, it runs only after you allow the Analytics category.

Marketing/advertising: we use a TikTok pixel and TikTok's server-side Events API to measure ad performance and improve our marketing. They run only after you allow the Marketing category; until then they are not active. A confirmed purchase is reported with an order reference, the amount and a hashed email address — never your speech content.

You can change your choices at any time via the Cookie settings link in the footer.

8. Purposes and legal bases

Delivering the service — running the interview, transcribing, drafting, storing your project and restoring it across devices: performance of our contract with you.

Payments and fraud prevention: performance of a contract and compliance with legal obligations.

Keeping the service secure, debugging failures and understanding whether steps succeed: our legitimate interests in a working, safe product.

Non-essential analytics or any future marketing technology: your consent, which you can withdraw at any time.

Responding to legal requests and keeping records: compliance with legal obligations.

9. Service providers

We use a small number of processors, by category: a cloud backend provider (database, authentication and file storage), Stripe (payments), Google (optional sign-in, only if you use it), AI model providers reached through an AI gateway (transcription and text generation), and a hosting/CDN provider for the website itself.

We name only providers we can confirm from our own configuration. We do not sell your data to any of them; they act on our instructions.

10. International transfers

Some of these providers operate in the United States and other countries outside the EEA and the UK. Where personal data is transferred out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant) or another lawful transfer mechanism offered by the provider.

11. Retention

Project content stays in your account until you delete the speech or your account. Deleting a speech deletes its stored content and its recordings.

Local-only content stays in your browser until you delete the speech, sign out of a cloud-backed project, or clear your browser storage. Only the most recent rehearsal recording is kept.

Purchase records are retained for as long as required for accounting and tax purposes.

Diagnostic events are ephemeral and are not retained as a long-term profile.

12. Your rights

If the GDPR or UK GDPR applies to you, you have the right to access your data, correct it, delete it, restrict or object to processing, obtain a portable copy, and withdraw consent where processing is based on consent. You can also complain to your local supervisory authority.

Much of this is self-service: you can read, edit, export and delete your speeches in the app. For anything else, write to www.toastivo.com/contact and we will respond within the time the law allows.

13. California privacy rights

If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what personal information we collect and why, to request deletion, to request correction, to opt out of the sale or sharing of personal information for cross-context behavioural advertising, to limit the use of sensitive personal information, and not to be discriminated against for exercising those rights.

Toastivo does not sell personal information and does not share it for cross-context behavioural advertising. We provide a "Do Not Sell or Share My Personal Information" control anyway, so your preference is recorded if that ever changes. Where your browser sends a Global Privacy Control signal, we treat it as an opt-out of the Marketing category.

To exercise any California right, contact www.toastivo.com/contact. We will not treat you differently for doing so.

14. Children

Toastivo is not intended for children. You must be at least 16 years old (or 13 where local law permits and a guardian agrees) to use it. We do not knowingly collect personal data from children; if you believe a child has used the service, contact us and we will delete the account and its content.

15. Security

Data is encrypted in transit. Access to your project rows and recordings is enforced per user at the database and storage layers, recordings are served only through short-lived signed links, and payment credentials never reach our servers.

No online service can promise perfect security, and we do not. If a breach affects your personal data, we will notify you and the relevant authority where the law requires it.

16. Changes to this policy

We will update this page when the product changes. The date at the top always reflects the current version, and material changes to how we use your data will be signalled in the app — including, where consent is involved, by asking again.

17. Contact

Privacy questions and rights requests: www.toastivo.com/contact. Operator: Toastivo, Montreal, QC, Canada.