1. Who is responsible
Tessuvi Innovations, established in the United Kingdom, is responsible for personal information processed to operate Tessuvi. Contact legal@tessuvi.app about privacy, data rights or this policy. We have not appointed a public data protection officer or representative through this policy.
Where a business customer provides personal information about others, that customer is responsible for having an appropriate lawful basis and providing required notices. Contact us before using Tessuvi for regulated or sensitive organisational processing that requires a separate data processing agreement.
2. Information we use
Account information includes your name, email address, password hash, verification status, acceptance records and session identifiers. We store password hashes rather than plaintext passwords. Security and service records include timestamps, rate-limit counters, errors, technical request information and provider delivery or processing identifiers.
Creative information includes projects, text, prompts, selected source documents and images, uploaded media and fonts, brand preferences, AI plans and outputs, project history, collaboration invitations and permissions, publications and live presentation state. CVs or documents may contain information about you or other people. Upload only material you are entitled to provide.
Support information includes your ticket subject, category, messages, status and correspondence. Billing information, when paid services are available, includes customer and subscription identifiers, purchase and renewal records, usage and credit balances. Payment card details are handled by Stripe’s hosted checkout rather than stored as raw card details in Tessuvi’s database.
Camera, microphone and screen permissions are optional and controlled by your browser. Presentation recording is performed in the browser for download where supported; it is not automatically uploaded to Tessuvi. When you use recorded voice transcription, the audio is sent through Tessuvi to OpenAI to return text; Tessuvi does not save that recording as a project asset. Browser or operating-system speech services may also apply their own processing rules where used. Review the feature and browser permissions before using them.
3. Why we use information
We use account and creative information to perform our agreement with you: authenticate access, save and render projects, carry out requested AI work, collaborate, publish, export, provide support and manage plans or payments. Information needed for these features must be supplied if you want to use them.
We rely on legitimate interests to secure the service, prevent abuse, diagnose faults, enforce reasonable usage limits and improve reliability, taking account of your rights and reasonable expectations. We rely on legal obligations for records and disclosures required by law. Where an optional activity requires consent, we will request it separately and explain how to withdraw it.
We do not use this account-verification process to subscribe you to marketing emails. Operational messages such as verification, password reset, billing and support replies are used to deliver or secure the service. We do not sell your personal information.
4. AI processing
When you request AI assistance, Tessuvi sends relevant prompts, project content, selected source materials, brand context and conversation history to OpenAI to generate a plan, editable content or images. Image edits send the selected reference image. Visual review sends rendered composition proofs and the approved brief to the configured AI reviewer.
These providers process information under their applicable service terms and data-handling policies. Avoid providing unnecessary personal information, secrets or sensitive material. AI results can contain errors and should be reviewed before use. Tessuvi does not use its AI to make legal or similarly significant decisions about you; creative suggestions do not replace your own judgement.
5. Who receives information
Service providers receive information necessary for their roles. These currently include Vercel for hosting and infrastructure, Neon for database services, OpenAI for requested AI processing, Resend for transactional email delivery, and Stripe for payment and subscription services when enabled. We use access controls and contractual arrangements appropriate to those services. Providers may use authorised subprocessors.
Your chosen collaborators and people with your sharing links receive the content and access you make available. Published links may be forwarded, copied or indexed outside our control. Verified, authorised support administrators can access support tickets; support messages are not public.
We may disclose information when reasonably necessary to comply with a legal obligation, protect rights and safety, investigate fraud, or transfer the service as part of a business reorganisation, subject to applicable protections and notice requirements. We do not give unrelated third parties general access to private projects.
6. International processing
Our providers may process information outside the United Kingdom, including in the United States and other locations where they operate. Where UK data protection law requires safeguards, we use an applicable adequacy decision or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum to approved standard contractual clauses, as appropriate to the provider arrangement.
Contact legal@tessuvi.app for information about relevant transfer arrangements or a copy of applicable safeguards, subject to necessary redactions. Do not assume that all project data stays in the UK.
7. How long we keep it
We retain account and project data while needed to provide your account and requested features. Retention also depends on your deletion requests, collaboration choices, active disputes, fraud prevention and legal obligations. Project version history and media can remain associated with an account even after a project is moved out of the main workspace; hiding or unpublishing a project is not the same as permanent deletion.
Verification links expire after 24 hours and reset links after 30 minutes; expiry prevents use even where a token record has not yet been removed. Sessions normally expire after seven days. Password reset revokes existing sessions. Support and transaction records are retained for as long as reasonably needed to resolve enquiries, maintain records and comply with applicable requirements.
After a valid deletion request, we remove or de-identify information that is no longer needed. Limited information may remain in backups until normal rotation or where legally required. Provider retention periods and copies held by collaborators or recipients may differ. Contact us for the retention criteria relevant to your circumstances; we do not promise immediate erasure from all backups.
8. Security and cookies
We use measures including password hashing, restricted sessions, verified administrative access, project access controls, single-use account tokens and protected service credentials. No system can guarantee absolute security. Use a unique password and avoid sharing confidential data through public links. Report suspected security issues to legal@tessuvi.app.
Tessuvi uses an essential session cookie to keep you signed in and local browser storage where needed for workspace functionality. These are used to provide requested features. We do not currently operate advertising cookies on the core Tessuvi interface. Embedded third-party media or services may set their own cookies or collect technical information when you load or interact with them. Non-essential tracking, if added, will require the appropriate notice and choice.
We use Vercel Web Analytics for aggregate visits to public product and template pages. It does not use analytics cookies. Measurements can include the page path, referring site, device/browser type and approximate country. We remove query strings and fragments before reporting page URLs, exclude private workspace, account and share routes, and honour Global Privacy Control and Do Not Track signals. We use these statistics to understand and improve the public website; they are not linked to your Tessuvi account.
9. Your rights and choices
Depending on the circumstances, you can request access to your personal information, correction, erasure, restriction, portability, and object to processing based on legitimate interests. You can withdraw consent where processing relies on it, without affecting the lawfulness of earlier processing. These rights are subject to legal conditions and exemptions.
Email legal@tessuvi.app with your request. We may ask for proportionate information to verify your identity, and will respond within the applicable statutory time limit, normally one month, explaining any lawful extension. You do not normally have to pay a fee. Account deletion is currently handled by request rather than an automatic button.
You can also change sharing permissions, disable publications, choose whether to use AI features and control camera or microphone permissions in your browser. Export tools help you retain copies of your creative work, but a project export may not contain all account or support information covered by a data access request.
You have the right to complain to the UK Information Commissioner’s Office at ico.org.uk, or the relevant supervisory authority where you live. We would appreciate the opportunity to address a concern first, but that is not a condition of your right to complain.
10. Children and sensitive information
Tessuvi accounts are intended for people aged 18 or over. We do not knowingly offer accounts to children. If you believe a child has provided account information, contact legal@tessuvi.app.
Do not upload unnecessary special-category information, financial credentials, identity documents or confidential third-party records. A face photograph, CV or document may identify someone; obtain appropriate permissions before uploading or sharing it. Tessuvi is not a service for biometric identification.
11. Policy updates
We may update this policy as the service or legal requirements change. The effective date appears above. We will communicate material changes where appropriate, including before using personal information for a materially different purpose that requires a new notice or consent. Contact legal@tessuvi.app if anything is unclear.