Privacy Policy

This Privacy Policy explains what data Tavara ("we," "us," "our") collects, how we use it, and your choices, when you use the Tavara website and application (the "Service"), operated by Tavara.

1. What We Collect

Account information: email address and any profile info you provide at signup.
Payment information: handled directly by Stripe, our payment processor. We do not store your full card number; Stripe processes and stores that on our behalf.
Session data: audio recordings and/or transcripts of your practice sessions and micro-sessions, session duration, and timestamps.
Usage data: which features you use, session counts, streaks, and similar activity needed to enforce plan limits and improve the Service.

2. How We Use It

To operate the Service: run practice sessions, generate AI personas, and enforce your plan's usage limits.
To generate feedback: your session transcripts are sent to third-party AI providers (OpenAI) to produce scores and written feedback (filler words, pacing, structure, and similar metrics).
To process payments and manage subscriptions, via Stripe.
To communicate with you about your account, billing, or changes to the Service.
To maintain, secure, and improve Tavara.

We do not sell your personal data.

OpenAI processes session transcripts to generate AI personas and feedback/scoring.
Stripe processes payments and stores billing/payment information.
Supabase hosts our database (account info, session records).
Vercel hosts the application itself.

Each of these providers has its own privacy practices governing how they handle data passed to them.

4. Data Retention

We retain your account and session data for as long as your account is active, or as needed to provide the Service (e.g. keeping past session history and feedback reports visible to you). You can request deletion at any time (see Section 6).

5. Data Security

We take reasonable measures to protect your data, but no system is perfectly secure. If we become aware of a data breach affecting your personal information, we will notify affected users as required by applicable law.

6. Your Rights & Choices

Access: you can view your session history and account info within the app.
Deletion: you can delete your account and associated data yourself by going into "Settings", "Security & Login", then "Delete my account", or by contacting support@tavara.co. Deletion is permanent: it removes your profile, session history, transcripts, feedback reports and micro-session records, cancels any active subscription immediately (without a refund of the current billing period), and deletes your billing profile at Stripe. Stripe may retain anonymized transaction records where required by tax and financial regulations, and deleted data may persist in our hosting provider's backups for a limited time until they are overwritten.
Export: you can download a copy of your data at any time by going into "Settings", "Security & Login", then "Download my data", or by contacting support@tavara.co.

If you are in the EU/UK or California, you may have additional rights under GDPR or CCPA respectively (including the right to object to or restrict certain processing). Contact us to exercise these rights.

7. Children's Privacy

Tavara is not intended for children under 13. Users between 13 and 18 should have a parent or guardian's permission to use the Service. We do not knowingly collect data from children under 13; if we learn we have, we will delete it.

8. Cookies & Tracking

We use Vercel Analytics to understand overall site traffic and usage patterns. Vercel Analytics is privacy-friendly by design: it does not use cookies and does not collect personally identifiable information. We do not currently use advertising or cross-site tracking cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above and make reasonable efforts to notify users of material changes.

10. Contact

Questions about this policy or your data? Contact us at support@tavara.co.