APP TYVER LTD (Anexartisias & Athinon, Nora court, floor 2, office 202-203, 3040 Limassol, Cyprus) — hereinafter “the Company”
Applies to: tyver.io and app.tyver.io (the “Service”)
Last updated: October 15, 2026
Privacy contact: ab@tyver.io
Summary
- The Company collects information you provide directly (email, password, payment details) and information collected automatically (IP address, cookies, behavioral analytics).
- Data is shared with a limited set of service providers (analytics, advertising, payments, technical support) — full list in Section 4.
- You may request access to, correction of, or deletion of your data at any time by emailing ab@tyver.io.
1. Information the Company Collects
1.1 Information You Provide Directly
- Email address
- Password — stored only as a hash; the Company cannot see your password
- Messenger and your username there — optional, as an additional channel to contact you (e.g., for support)
- Billing details: first and last name, country, city, postal code, address; for companies — company name, company address and VAT ID. Needed to issue invoices and calculate VAT
- Payment details — see 1.3 below: the Company does not store these; they are processed by payment providers
An email address and password are required to create an account; without them you cannot use the Service. Providing a messenger is optional.
1.2 AI Editor Data
If you use the AI editor, the Company processes your projects and their content, uploaded files, prompts, and your generation and Tyver Coins spending history.
1.3 Payment Data
When you make a payment, you may be redirected to one of the Company’s payment partners. The Company does not store your card number, CVC, or crypto wallet details — these are processed by the providers themselves; refunds use the transaction data in the payment provider’s dashboard:
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Card payments | stripe.com/privacy |
| Inxy (LITEST SOLUTION CORP., Canada) | Cryptocurrency payments | inxy.io/legal/privacy-policy |
| Heleket | Cryptocurrency payments | heleket.com/privacy |
Inxy and Heleket may keep the crypto wallet address and the payer’s email for their transaction records, under their own privacy policies.
1.4 Information Collected Automatically
When you visit the Service, technical data is collected automatically: IP address, browser, device, operating system, and language.
For details on the specific cookies and trackers responsible for this, see our separate Cookie Policy.
1.5 Information From Third Parties
The Company may receive confirmation of a successful or failed transaction from payment providers, without access to the underlying card or wallet details. The Company does not receive any other information about you from third parties.
2. How the Company Uses Information
- To create and administer your account, and for authentication
- To provide and improve the Service
- To run the AI editor — generating creatives at your request
- To communicate with you — service notices and, if you’re subscribed, marketing emails via Customer.io
- For analytics on product and site usage (Google Analytics, Yandex Metrica, Mixpanel)
- To serve relevant advertising and measure its effectiveness (Facebook Pixel, Google Ads)
- For security, fraud prevention, and error monitoring (Sentry)
- To comply with legal obligations
3. Legal Bases for Processing (GDPR)
The Company processes your data on the following legal bases (Art. 6 GDPR):
| Processing purpose | Legal basis |
|---|---|
| Account creation, providing the Service, processing payment | Performance of a contract |
| Running the AI editor | Performance of a contract |
| Contacting you via messenger (optional) | Legitimate interest |
| Web and product analytics, including page usability analysis (Webvisor) | Consent (may be withdrawn at any time) |
| Security, error monitoring (Sentry), fraud prevention | Legitimate interest |
| Marketing emails, advertising and remarketing | Consent (may be withdrawn at any time) |
| Retention of records for tax/accounting purposes | Legal obligation |
The Company acts as the data controller for the personal data described in this policy.
4. Who the Company Shares Data With
| Recipient | Role | Data shared |
|---|---|---|
| Google (Analytics, Ads, Tag Manager) | Analytics, advertising, remarketing | Site usage data, device identifiers |
| Yandex (Metrica + Webvisor) | Analytics, page usability analysis | Site usage data, on-page behavior |
| Meta (Facebook Pixel) | Advertising, remarketing | Site usage data, on-page actions |
| Mixpanel | Product analytics | Product usage data |
| Customer.io | Email/push messaging, segmentation | Email, behavioral data |
| Sentry | Error monitoring | Technical session data, IP, browser |
| Stripe | Card payment processing | Order data: amount, plan, email |
| Inxy (LITEST SOLUTION CORP., Canada) | Crypto payment processing | Order data: amount, plan, email |
| Heleket | Crypto payment processing | Order data: amount, plan, email |
| AI editor technology partner | Running the AI editor | User ID, language, projects and uploaded files, prompts, generation history, IP address and browser data |
| AI model providers | Generating creatives at the user’s request | Prompts and uploaded files |
| Hosting provider (EU) | Hosting the Service database | Account data and the data listed in Section 1 |
| External audit firm (Cyprus) | Accounting and tax reporting | Payment records, invoicing data |
| Email service and the messenger you chose for contact | Correspondence and support | Email, messenger username, content of correspondence |
The Company may disclose data where required by law, or to a new owner if the business is sold, under the terms of this policy.
5. International Data Transfers
Outside the EEA, data is processed by: Google, Meta, Mixpanel, Sentry, and Stripe — in the US; Yandex (Metrica and Webvisor) — a Yandex group company in the UAE (Air Smart Advertising Solutions FZ-LLC). Customer.io processes data in the EU. Inxy (LITEST SOLUTION CORP., Canada) stores data on servers in Europe (Amazon Web Services); Canada is covered by a European Commission adequacy decision. Heleket processes data in accordance with its own privacy policy. Transfers to the US rely on the European Commission’s adequacy decision under the EU-U.S. Data Privacy Framework (for certified companies) and, otherwise, on the EU standard contractual clauses. Transfers to the UAE rely on the EU standard contractual clauses. You can request a copy of the contractual clauses at ab@tyver.io. Yandex Metrica and Webvisor load only after you consent to analytics cookies.
When you use the AI editor, data is processed by our technology partner in Russia and transferred to AI model providers in the US and Singapore. Only the data needed for generation is shared with partners; your email is not shared. Transfers to the partner rely on the EU standard contractual clauses; the partner must pass data to AI model providers only on terms that ensure the same level of protection. You can request a copy of the standard contractual clauses at ab@tyver.io.
6. Cookies and Tracking Technologies
The Company uses cookies and similar technologies (pixels, browser local storage) for site functionality, analytics, and advertising. The full list of cookies used, their purpose, and retention periods is set out in a separate Cookie Policy, linked in the site footer and in your account (“Legal information”).
7. Data Retention
The Company retains personal data only as long as necessary for the purposes described in this policy, or longer where required by law (e.g., tax or accounting requirements). Once no longer necessary, data is deleted or anonymized.
| Data | Retention period |
|---|---|
| Account data (email, messenger, settings, favorites) | While the account is active; deleted within 30 days after account deletion |
| AI editor data (projects, files, generation history) | While your account is active; deleted within 30 days after account deletion |
| Backups | Overwritten within 90 days |
| Payment records and invoices | 10 years from the end of the year in which the payment was made, as required by EU and Cyprus VAT law |
| Error logs (Sentry) | 90 days |
| Analytics and advertising data | As set out in the Cookie Policy |
| Correspondence on personal data requests | 3 years after the request is closed |
To delete your account, email ab@tyver.io.
8. How the Company Protects Your Data
The Company applies reasonable technical and organizational measures to protect personal data. However, no method of transmission over the internet can be guaranteed 100% secure.
9. Children’s Data
The Company does not knowingly collect data from individuals under 18 and does not direct the Service at this audience. If you become aware that a minor’s data has been collected, please contact ab@tyver.io — the Company will deactivate the account and delete the relevant data.
10. Your Privacy Rights
Wherever you are located, you have the right to:
- request access to your data and obtain a copy;
- request correction or deletion of your data;
- restrict processing;
- request data portability, where applicable;
- object to processing;
- withdraw consent at any time where processing is based on consent;
- unsubscribe from marketing emails via the link in the email or by contacting ab@tyver.io;
- lodge a complaint with your data protection authority.
Right to object. You may object at any time, on grounds relating to your particular situation, to processing based on the Company’s legitimate interests (contact via messenger, error monitoring, fraud prevention); the Company will stop such processing unless it demonstrates compelling legitimate grounds that override your interests. You may object to the use of your data for marketing at any time and without giving reasons: unsubscribe via the link in the email or write to ab@tyver.io.
To exercise any of these rights, contact ab@tyver.io.
11. Updates to This Policy
The Company may update this policy as applicable law or the services it uses change. The date of the last update appears at the top of this document. Material changes will be communicated via the site or by email.
12. Contact
APP TYVER LTD Anexartisias & Athinon, Nora court, floor 2, office 202-203, 3040 Limassol, Cyprus Email: ab@tyver.io
13. How to Review, Update, or Delete Your Data
To request access to, correction of, or deletion of your personal data, email ab@tyver.io. The Company will respond within the timeframe required by applicable law (typically within 1 month).