privacy.

1. who

toaver is provided by Chartbuddy B.V. in the Netherlands, the controller of the data below. Contact: info@chartbuddy.io.

2. what we collect

• Account: your name, email address and organisation.
• Credit purchases: what you bought, when, and invoice details. Mollie handles payments. We never see or store card details.
• Usage records: per AI request, the model, usage and cost.
• Usage analytics: how you use the app and which version.

3. what we don't collect

Your files and chats. They stay on your device. Our servers don't keep your prompts, files or AI replies.

Google Slides, Docs and Sheets, and data from connectors such as Hex or Stripe, go straight between your device and that service, under your account there. They don't pass through our servers.

4. toaver ai

Your prompt and the content it needs go to our AI providers: Orq, which routes it, and OpenAI or Google Cloud, which run the model. EU by default, US if your organisation chooses. They may not train on it and keep it no longer than needed to answer and prevent abuse. Orq keeps no content.

If you connect your own AI client, such as Claude or ChatGPT, what you share with it falls under its vendor's terms.

5. this website

This site uses a first-party cookie to count visits (24 hours) and loads its font and demo from Google Fonts and jsDelivr.

6. why

• To run your account and toaver, and answer your AI requests (our contract with you).
• To bill credit and keep invoices (our contract, and Dutch tax law).
• To fix, improve and secure toaver and this site (our legitimate interest).

7. who receives it

Only the services we need: hosting, payments (Mollie), AI (Orq, OpenAI, Google Cloud) and this site's font and demo (Google Fonts, jsDelivr). We never sell your data.

8. how long

• Account: as long as it exists.
• Invoices: as long as Dutch tax law requires, now seven years.
• Usage records and analytics: as long as needed for billing and to improve toaver.

9. your rights

You can ask to see, correct, delete or export your data, or object to how we use it. Email info@chartbuddy.io. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

10. security and changes

Chartbuddy B.V. is SOC 2 Type II audited. Data is encrypted in transit. When this policy changes, we publish the new version here with a new date.