Privacy Policy
Last updated: February 27, 2026
At ToRivers, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our AI automation marketplace platform.
1. Information We Collect
When you use ToRivers, we collect information to provide and improve our services:
Account Information: When you sign in via Google OAuth, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.
Payment Information: When you add credits to your wallet, payment processing is handled by Stripe. We do not store your full credit card number, CVV, or other sensitive payment details. We retain transaction records including amounts, dates, and Stripe transaction identifiers.
Usage Data: We collect information about how you interact with our platform, including automations you execute, execution logs, input/output data associated with your executions, and general usage patterns.
Technical Data: We automatically collect device information, browser type, IP address, and access timestamps when you use our services.
2. How We Use Your Information
We use the information we collect for the following purposes:
• To create and manage your account
• To process payments and manage your wallet balance
• To execute AI automations on your behalf and deliver results
• To provide customer support and respond to your inquiries
• To improve our platform, develop new features, and fix bugs
• To prevent fraud, abuse, and ensure security of our services
• To send important service-related communications (e.g., billing confirmations, security alerts)
3. Third-Party Services
ToRivers integrates with third-party services to operate. Each service has its own privacy policy governing the data they process:
Google OAuth: Used for authentication. Subject to Google's Privacy Policy.
Stripe: Used for payment processing. Subject to Stripe's Privacy Policy.
Supabase: Used for data storage and real-time features. Subject to Supabase's Privacy Policy.
AI Model Providers: When you execute automations, your input data may be processed by third-party AI model providers (e.g., OpenAI, Anthropic, Google) to generate results. We send only the data necessary for the specific automation you run.
4. Data Storage and Security
We take the security of your data seriously and implement industry-standard measures to protect it:
• All data is transmitted over encrypted connections (TLS/SSL)
• Sensitive credentials are encrypted at rest and access-controlled
• We use row-level security policies to ensure users can only access their own data
• Execution data is scoped to individual executions and isolated between users
We store your data on secure cloud infrastructure. While we implement robust safeguards, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.
5. Data Retention
We retain your account data for as long as your account is active. Execution logs and results are retained to allow you to review past executions.
If you delete your account, we will remove your personal data within 30 days. Some data may be retained in anonymized form for analytics purposes, or as required by law.
Payment transaction records are retained as required by financial regulations.
6. Cookies and Tracking
We use essential cookies to maintain your authentication session and remember your preferences. These cookies are necessary for the platform to function and cannot be disabled.
We do not use third-party advertising cookies or tracking pixels. We may use privacy-respecting analytics to understand general usage patterns.
7. Your Rights
You have the following rights regarding your personal data:
Access: You can view the personal data we hold about you through your account settings.
Correction: You can update your profile information at any time.
Deletion: You can request deletion of your account and associated data through your account settings or by contacting us.
Export: You can request a copy of your data by contacting us at the email below.
Objection: You can object to the processing of your data for specific purposes by contacting us.
8. Children's Privacy
ToRivers is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete that information.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our platform or sending an email to the address associated with your account.
Your continued use of ToRivers after changes are posted constitutes your acceptance of the updated policy.
10. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
Email: hi@torivers.com