Tovela
Privacy Policy
Effective August 21, 2026
Who we are
Tovela is a personal assistant for busy people. It reads communications you explicitly connect (currently Gmail, with your permission) and turns the important parts into "Cues" — reminders, deadlines, events and actions — so nothing gets missed.
Information we collect
- Account information: your email address and authentication details, handled by our authentication provider. If you sign in with Google, we receive your basic profile and email address.
- Team information you enter: team name, team members’ first names, and related details you choose to add.
- Connected mailbox content: when you connect Gmail with read-only permission, we import message metadata (sender, subject, date) and plain-text message content so it can be analyzed into Cues.
- Mobile phone number: only if you previously provided one. Text alerts are coming soon, so no number is required today and none is used to send messages.
- Operational records: notification preferences, scheduled and delivered notifications, delivery status, and diagnostic logs about syncing and message processing.
How we use information
We use your information to operate Tovela: importing communications you connected, analyzing them into Cues, scheduling notifications according to your preferences, delivering those notifications, and keeping the service working and secure.
Message content is sent to an AI model provider for analysis so Cues can be extracted. That processing happens only for communications imported from accounts you connected.
We do not sell your personal information, and we do not use it for advertising.
SMS / text message information
Text alerts are coming soon. Tovela does not currently enroll anyone in text delivery and does not send text messages. The description below explains what would be collected and how it would be used if text alerts launch.
- What would be collected: your mobile phone number, the fact that you consented, the date and time of consent, where the consent was given, the exact consent wording and version, your verification status, and any opt-out and its timestamp.
- Why: so we could send the account notifications you asked for and evidence the consent record mobile carriers require.
- How it would be used: only for a verification code, a one-time confirmation message, and the Tovela notifications your settings allow. We would not send marketing texts.
- Opting out: if you previously provided a number, replying STOP is still recorded immediately and honored. Because texting is coming soon, replying START cannot reactivate texting.
- Getting help: email support@tovela.ai.
Mobile opt-in information and SMS consent will not be sold or shared with third parties or affiliates for their marketing or promotional purposes.
Email summaries
Outbound email summaries are coming soon. Tovela does not send summary emails today. Connecting Gmail is a separate, read-only inbound connection: it lets Tovela read your messages into the app and never sends anything on your behalf.
Service providers we share data with
We share only what is needed for the service to function: our cloud database and authentication provider (which stores your account and app data), Google (for the read-only Gmail connection you authorize), and our AI model provider (for analyzing imported message content). These providers process data on our behalf. No text-message or email-delivery provider receives your data while those features are coming soon.
Security and access
Data is stored in a managed Postgres database with row-level security so records are scoped to your account and team. Credentials for connected mailboxes are stored encrypted, and verification codes are stored only as hashes. Any delivery-provider credentials are held server-side and are never exposed to the browser.
Retention and deletion
We keep your data while your account is active. You can disconnect Gmail at any time from Settings. To request deletion of your account and its data, email support@tovela.ai. If a mobile number and consent record were previously stored, they are retained after an opt-out because carrier rules require us to be able to evidence consent and opt-out history.
Children
Accounts are for adults. If you add a child as a team member, their first name and related details may appear in the team information you enter; children do not use the service directly.
Contact
Questions about this policy: support@tovela.ai