Privacy

The controller responsible for processing your personal data is Tevyon, Zurich, Switzerland. For any questions about data protection, you can reach us at support@tevyon.ai.

This policy follows the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies because we offer our services to people in the EU, it also meets the requirements of the GDPR.

When you open the website, our hosting provider processes technically necessary data: IP address, time, the address requested, browser and operating system, and the page you visited before. We need this data to deliver the site and to fend off attacks (legitimate interest, Art. 6(1)(f) GDPR). The logs are deleted after 30 days at the latest.

The website uses no analytics or advertising services. It sets a cookie only when you choose a language yourself: the cookie remembers your choice (German or English) for one year, so that the website greets you in that language on your next visit. It is technically necessary and contains nothing but the language. If you have not made a choice, the language follows your browser’s language settings, which it sends with every request; none of this is stored. Apart from that, the website stores nothing in your browser. We serve the fonts from our own server, so no data is transmitted to font providers. That is why we do not show you a cookie banner. If this changes, we will update this policy before we add anything, and ask for your consent where required.

The input in the “Be the first to hear about new models” section is currently not transmitted or stored. If we launch a newsletter, we will send it only after you confirm by email (double opt-in), and we will supplement this policy.

For the account, we process your email address, the time of registration and of your sign-ins, and technical session data. You sign in with a one-time code that we send you by email. We do not store a password. The legal basis is our contract with you (Art. 6(1)(b) GDPR).

For signing in, we set a cookie that keeps your session. It is technically necessary and is deleted when you sign out. If you choose a language in the app, the app remembers your choice in a further cookie for one year; if you are signed in, we also store the language in your account so that Tevyon addresses you in it on all devices. If you have not made a choice, the language follows your browser’s language settings, which it sends with every request; none of this is stored. In addition, the app remembers a few settings in your browser’s storage, for example whether the sidebar is open or which filter you have chosen, so that they stay the same on your next visit. This is necessary for these features; you can delete the entries in your browser at any time. We serve the app’s fonts from our own server, so no data goes to a font provider. The app does not use analytics or advertising services either.

So that no one obtains the free starter credits or the free messages to the Director more than once by using many accounts, we count, per network and day, how many new accounts receive free credits and how many free Director messages are sent, and, for addresses outside the large email providers, how many new accounts with the same email domain receive free credits. For this, instead of your IP address or the domain, we store only a pseudonymous value that we derive from it with a secret key, and a counter. Both are valid for 24 hours and are then deleted at the next daily cleanup. We do not count messages from accounts that have bought credits. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).

For each job, we process:

• your inputs: prompt, chosen model and settings, uploaded reference images, videos and audio tracks, and the text a character is to speak,
• the results,
• status, times and the credits charged.

We store this data so that you can find your results again, credits are charged correctly and we can help if there are problems (contract, Art. 6(1)(b) GDPR). To run a job, we transmit the inputs to the chosen model. More on this under “Who receives your data”.

Every job runs through the prompt skill of the chosen model: a language model rewrites your prompt so that the model can carry it out as well as possible. For this, it receives your prompt, the job’s settings and the images you give the job, scaled down and without metadata such as the location where they were taken, so that it understands what you mean. It does not name who appears in an image. We store the rewritten prompt with the job so that the result remains traceable. You can turn this preparation off when starting through the API (“exact”).

We do not train any AI models on your inputs or results, and we do not pass them on to anyone for that purpose. We do not analyze faces in uploaded images biometrically, which means we do not create facial features to recognize people.

For some video models, the maker stores your uploaded images, videos and audio tracks for the duration of a job in protected storage that only our account can access. As soon as the job is finished, we delete them there again. The maker processes them only on our behalf and does not train its models on them. If its content filter is triggered, it keeps the affected input and output for up to 180 days for safety reasons. Ready-made characters and voices that you select in Tevyon come from an approved library of the maker and do not show real people.

If you want to use your own face in videos, you confirm this with a liveness check on your phone directly with the model’s maker, under its own terms. Tevyon receives no facial features in the process, only a reference to the approved person.

If an input shows other people, you are responsible for making sure you are allowed to use it (see the Usage Policy). Inputs and results are checked automatically for prohibited content, by us and by the makers of the models. This check only decides whether a job is run or a result is shown. A human decides whether to block your account.

If an agent starts a Face or Character Swap via the API, MCP server or command line, you first confirm, signed in with us, that you hold the rights to the images and have the consent of the people depicted. We store this confirmation with your account, the two images, the time and the job it started, as proof (legitimate interest, Art. 6(1)(f) GDPR), for as long as the job exists.

For every reply from the Director and the Marketing Agent, we transmit the chat so far and an attached photo (scaled down and without metadata such as the location where it was taken) to the language model you chose, and for the Director also the notes and ratings from its memory. We do not store the chat itself: in the Studio it is kept only in your browser; if you use the Director through a connected application (MCP), it is kept by that application. The legal basis is our contract with you (Art. 6(1)(b) GDPR).

So that the Director makes suggestions that fit you better, it remembers what you say about your work (for example style, brand, target audience, platforms or what you do not want) and which results you chose or rated with “Like” or “Not for me”. We store these short notes with your account. The server discards notes in which it detects an email address, a phone number, a link or an account number; this detection is not complete. The Director is not meant to remember information about your health, religion, political views, sexuality or origin. That is why it shows you every note right away (in the Studio as “Remembered”; in a connected application, the application is meant to tell you), and in the Director under “Memory” you can delete any entry at any time, have it forget everything or turn the memory off. The legal basis is our legitimate interest in suggestions that suit you (Art. 6(1)(f) GDPR). You can object at any time: turning it off stops the Director from using the entries and adding new ones; with “Forget everything” you delete all entries. We do not train any AI models on this.

If you create a Community profile, we store the name, the handle, the description and, if you choose one, the profile picture, whether you want to show your prompts, and when you accepted the Community rules. If you share a result, it is public: everyone sees it with your profile, the model, the format and, unless you turn it off, your prompt, even without an account, and search engines can index the Community and your profile. We never show your email address, and of your uploaded files only the image you choose yourself as your profile picture. The legal basis is our contract with you (Art. 6(1)(b) GDPR), because you use the feature yourself. With one click, a result is private again; if you delete your profile, everything you shared is private again.

If you mark a creation with “Like” or follow a profile, we store this with your account and the time, so that you can find it again and the “Following” view works (contract, Art. 6(1)(b) GDPR). Only the numbers are public; we show no one who likes what or who follows whom.

If you report a creation or a profile, we store your account, the reason, your note and the time, in order to review the report and to prevent misuse of the reporting feature (legitimate interest, Art. 6(1)(f) GDPR). Our moderation team receives an email about it with the reason, note and link, but without any information about you. Whoever is reported does not learn who reported them.

Payments are handled by a specialized payment service provider. It receives the name, email address, payment method, amount and billing address and also processes them as a controller in its own right, for example to combat fraud. We receive only the information we need for invoicing and accounting, but no full card numbers. The legal bases are the contract and our statutory retention obligation (Art. 6(1)(b) and (c) GDPR).

If you write to us or report content, we process your details and the message in order to respond to your request. We document reports and our decisions so that we can prove abuse and review appeals (legitimate interest, legal obligations).

If you connect Tevyon to a third-party application, such as Claude by Anthropic, we receive from it the tasks you give the application and send the results back to it. The provider of the third-party application is responsible for the data in that application, under its own privacy policy. You can disconnect at any time in your account or in the application.

We do not sell personal data and do not pass it on for advertising purposes. The only recipients are:

You can see which model comes from which maker in the model overview. We disclose data to authorities only when the law obliges us to. All service providers process your data only on our instructions, except where they are controllers in their own right, like the payment service provider.

Some recipients are located in countries whose data protection the Swiss Federal Council or the European Commission has not recognized as adequate, in particular the USA, Singapore, Malaysia, Indonesia and China. We transfer data there only with appropriate safeguards: for recipients in the USA that are certified under the Swiss-U.S. or EU-U.S. Data Privacy Framework, their certification applies. With all others, we have agreed on the standard contractual clauses of the European Commission, supplemented for Switzerland. You can get a copy of the safeguards on request.

If you choose a model whose maker processes your inputs in such a country, this transfer takes place in order to carry out the job you requested (Art. 17(1)(b) FADP, Art. 49(1)(b) GDPR). If you want to avoid this, choose a different model.

If a free account remains unused for 24 months, we terminate it after a warning by email and delete it.

You have the right to

• request access to your data (Art. 25 FADP, Art. 15 GDPR),
• have incorrect data rectified,
• have data erased or restrict its processing,
• receive your data in a common format or have it transmitted (Art. 28 FADP, Art. 20 GDPR),
• object to processing based on legitimate interests,
• withdraw consent at any time with effect for the future.

To do so, write to support@tevyon.ai. We will reply within 30 days and may need to identify you. You can also download or delete much of your data directly in your account.

You can lodge a complaint with a supervisory authority: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EU with the authority of your country of residence.

We protect your data with technical and organizational measures: encrypted connections, encrypted storage, access only for people who need it, keys of the model providers only on the server, logging of access. Complete protection is not possible on the internet. If we learn of a breach that puts you at risk, we will inform you and the authority as required by law.

Tevyon is intended for people aged 18 and over. If we learn that an account belongs to a younger person, we delete it.

We update this policy when our processing changes. The version published here applies. We will inform you by email about material changes before they take effect.