Privacy Policy
Last updated: 2 November 2026
The short version
- We collect what we need to run Goviro: your account details, what you put on your boards, and billing records.
- We never sell your personal data and we don't use it for advertising.
- If you connect Instagram or TikTok, we only use that access to show your own posts and stats inside Goviro. You can disconnect at any time.
- You can delete your account and all of its data whenever you want.
1. Who we are
Goviro ("Goviro", "we", "us") provides the Goviro content strategy app at goviro.app. We are based in Nottingham, United Kingdom, and we are the data controller for the personal data described in this policy. This policy follows the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you are in the European Economic Area, the EU GDPR also applies.
Questions about privacy can go to support@goviro.app.
2. What we collect
| Type | Examples | Where it comes from |
|---|---|---|
| Waitlist details | Name, business or brand, social profile link, email, WhatsApp number, address (optional), the plan you're interested in, and whether you want a free audit | You, when you join the waitlist |
| Account details | Name, email address, password (stored hashed), sign-in records | You, when you sign up or log in |
| Board content | Boards, notes, links you import, chat messages, scripts the AI writes for you | You, while using Goviro |
| Connected account data | Your Instagram or TikTok username, profile picture, posts and post metrics, plus an access token | Instagram or TikTok, only if you choose to connect |
| Billing records | Plan, payment status, invoices, the last four digits and expiry of your card | Stripe, our payment provider. We never see or store your full card number. |
| Support and audit calls | Emails you send us, and notes from a 1-on-1 audit call if you book one | You |
| Technical data | IP address, browser and device type, pages visited, error logs | Your browser, collected by our hosting and security providers |
3. How we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Running the waitlist: contacting you when access opens and scheduling your free audit if you asked for one | Consent (you can withdraw it at any time by emailing us) |
| Creating your account and running the service, including AI breakdowns, chat and credits | Contract: we need it to provide what you signed up for |
| Taking payments, running the $1 trial and subscriptions, and keeping tax records | Contract and legal obligation |
| Sending service emails such as receipts, trial reminders, security alerts and audit call scheduling | Contract |
| Keeping Goviro secure, preventing abuse and fraud, and fixing bugs | Legitimate interests |
| Understanding how the product is used, in aggregate, so we can improve it | Legitimate interests |
| Product news and tips by email | Consent. You can unsubscribe at any time. |
We do not sell your personal data, and we do not use it for targeted advertising. We do not use your boards, chats or scripts to train AI models.
4. Connected Instagram and TikTok accounts
Connecting a social account is optional. When you connect one, you sign in on Instagram's or TikTok's own page and approve the permissions shown there. We never see your Instagram or TikTok password.
- What we receive: only the data covered by the permissions you approve, such as your username, profile picture, your posts and their metrics.
- How we use it: only to show your own content and performance inside Goviro and to give the AI context when you ask it to. We don't post, comment or message on your behalf.
- How we store it: access tokens are kept on our servers, are never sent to your browser, and are only used to fetch the data above.
- How to disconnect: you can disconnect in Goviro, or remove Goviro's access in your Instagram settings (Apps and websites) or TikTok settings (Security, then Manage app permissions). When you disconnect, we delete the token and the data we fetched with it within 30 days.
Our use of data received from these platforms also follows the Meta Platform Terms and the TikTok Developer Terms.
5. Public posts you import
When you paste a link to a public post or profile, Goviro fetches that public post (its caption, cover image, video, public metrics and creator handle) so it can be transcribed and broken down on your board. This content may contain personal data about the creator who posted it. We only process it to provide the breakdown you asked for, keep it within your private board, and delete it when you delete the board or your account. If you are a creator and want content about you removed from our systems, email us and we will act on it.
6. AI processing
To produce transcripts, breakdowns and scripts, we send the relevant content to our AI providers: Anthropic for language processing and Deepgram for transcription. They act as our processors and are contractually not allowed to use your data to train their models. AI output can be wrong, so please review it before you publish.
7. Who we share data with
We use trusted providers to run Goviro. They only process data on our instructions and under written data processing terms.
| Provider | What they do for us |
|---|---|
| Supabase | Database, sign-in and file storage |
| Vercel | Application hosting |
| Cloudflare | Website delivery, security and privacy-friendly analytics |
| Stripe | Payments and billing |
| Anthropic | AI breakdowns and chat |
| Deepgram | Video transcription |
| Apify | Fetching public posts from the links you import |
| FormSubmit | Delivering waitlist form submissions to our inbox |
| Google (Gmail, Workspace and Meet) | Email, receiving waitlist sign-ups, and 1-on-1 audit calls |
We may also share data if the law requires it, to protect our rights or users' safety, or with a buyer if Goviro is sold or merged. In that case this policy will continue to apply to your data.
8. International transfers
Some of our providers process data outside the UK, mainly in the United States and the European Union. Where that happens we rely on UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses to protect your data.
9. How long we keep data
- Waitlist details: until you get access or ask us to remove you, and no longer than 12 months after you join.
- Account and board content: for as long as your account is open. When you delete your account, we delete it within 30 days, and it leaves our backups within a further 35 days.
- Connected account tokens and data: until you disconnect or delete your account. Then we delete them within 30 days.
- Billing records: 6 years, as required by UK tax law.
- Support emails: up to 2 years after the conversation ends.
- Security logs: up to 90 days.
10. Your rights
Under UK GDPR you have the right to access your data, correct it, delete it, restrict or object to how we use it, and receive a copy of it in a portable format. Where we rely on consent, you can withdraw it at any time. To use any of these rights, email support@goviro.app. We will reply within one month.
If you're unhappy with how we handle your data, please tell us first. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk, or to your local data protection authority.
11. Deleting your data
You can delete your Goviro account and everything in it at any time:
- In Goviro, go to Account and choose Delete account, or
- Email support@goviro.app from the email address on your account with the subject "Delete my data".
We will confirm by email and delete your account, boards, connected Instagram and TikTok data, and access tokens within 30 days. We keep billing records only where the law requires it. If you removed Goviro from your Instagram or TikTok settings, you can still email us to have the data we already received deleted.
12. Cookies
Goviro only uses cookies and local storage that are strictly necessary, such as keeping you signed in and protecting the site from abuse. Our website analytics come from Cloudflare Web Analytics, which does not use cookies or track you across sites. If we ever add non-essential cookies, we will ask for your consent first.
13. Security
Data is encrypted in transit (HTTPS) and at rest. Access to production data is limited to the people who need it. Database access rules stop one account from seeing another account's data. No system is perfectly secure, so if you think your account has been compromised, contact us straight away.
14. Children
Goviro is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
15. Changes to this policy
We may update this policy as Goviro changes. We will change the date at the top, and if a change is significant we will email account holders before it takes effect.
16. Contact
Goviro, Nottingham, United Kingdom
Email: support@goviro.app