Privacy Policy
Last updated
This Privacy Policy explains how [LEGAL ENTITY NAME] ("Govir", "we", "us") collects, uses and protects personal data when you use govir.app and the Govir application (the "Service").
If you have questions, contact us at support@govir.app.
Who is responsible for your data
The data controller is [LEGAL ENTITY NAME], [REGISTERED ADDRESS].
Data we collect
Account data. When you sign up, we collect your email address and, if you sign in with Google, your name and profile picture provided by Google. We do not use passwords.
Connected social accounts. When you connect a Threads account, we receive through the Threads API:
- your Threads user ID, username, display name and profile picture (we keep a copy of the picture so it shows reliably in the app and in emails, refresh it daily, and delete it when the account's data is deleted);
- an access token that lets Govir act on your behalf within the permissions you granted;
- the posts you publish through Govir and their identifiers;
- insights for your account and posts, such as views, likes, replies, reposts, quotes and follower counts.
We only request the permissions needed for the features you use, such as publishing posts, reading insights and reading replies. Access tokens are encrypted at rest and are never shown in the app or written to logs.
Content you create. Drafts, scheduled posts, media you upload, AI prompts and generated text, posting goals and reminder settings.
Waitlist. While Govir is in private beta, you can join the waitlist. We store your email address, when and where on the site you joined, and your consent to one email when Govir opens (its version and time). We use it only for that email. The address used for rate limiting is not stored.
Billing data. Payments are processed by our payment provider, Stripe. We receive your plan, subscription status and invoices, but never your full card details.
Usage and technical data. IP address, browser type, device information, pages visited and actions taken in the app, collected to keep the Service secure, fix errors and improve the product.
How we use your data
- To provide the Service: publishing and scheduling posts, showing analytics, generating content with AI and sending reminders you asked for.
- To keep your account secure: signing you in, preventing abuse and rate limiting.
- To communicate with you: sign-in emails, notifications about failed posts, and service announcements. You can turn off non-essential emails in Settings.
- To show the Leaderboard, if you take part (see below).
- To comply with legal obligations.
We never publish anything to your social accounts without your action, and we do not sell your personal data.
Leaderboard
The Leaderboard is opt-in, for each connected account separately. If you join with an account, other Govir users see its profile picture, @username, league and leaderboard values (posting and reply streaks, follower growth in %, views and replies). Your follower count, post texts, name and email are never shown. We keep a record of your consent (its text, version and time). You can leave at any time on the Leaderboard page or in Settings → Accounts; the account then disappears from the rankings at once.
AI features
AI features (AI Studio and the AI buttons in the editor) are available on paid plans. When you use them, we send the text needed for that request to Anthropic, PBC, which provides the Claude models through its API:
- what you type or paste: a topic, a draft to improve, a post you liked, or the text of an article (if you give us a link, we fetch the page and send its text);
- for a remix, the account's best-performing post you chose;
- the account's brand voice: its settings, the example posts you added and, if you turned learning on, a few of the account's best-performing posts, along with its @username.
We never send your email address, access tokens, payment details or other accounts' data. Generated text is shown only to you and is saved in your AI history (deleted after 90 days, or earlier when you clear it).
Anthropic processes this data on our behalf as a data processor. Under its commercial terms, Anthropic does not use data sent through its API to train its models. It deletes API inputs and outputs within 30 days, unless a request is flagged for violating its usage policy (then kept for up to 2 years) or the law requires otherwise.
AI-generated text can be inaccurate. Check facts before you publish.
Service providers
We share data only with providers that help us run the Service, under agreements that protect your data:
| Provider | Purpose |
|---|---|
| Hetzner Online GmbH | Hosting and databases (EU) |
| Cloudflare (R2) | Storing uploaded images and video, and backups |
| Resend | Sending emails |
| Anthropic | AI text generation |
| Sign in with Google | |
| Meta Platforms (Threads API) | Publishing posts and reading insights for accounts you connect |
| Stripe | Payments, invoices and tax |
| GIPHY | Finding GIFs to add to posts, replies and comments |
| Sentry | Error monitoring (EU) |
| PostHog | Product analytics (EU) |
| Google (Tag Manager, Analytics) | Analytics on the public pages, only with your consent |
When you search for a GIF, our servers send your search words to GIPHY, without your name, email or account. Your browser then loads the GIFs from GIPHY and tells GIPHY which ones were shown and picked, as GIPHY's terms require; GIPHY sees your IP address, and its own privacy policy applies to that.
Some providers are located outside the European Economic Area. Where this is the case, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Cookies
We use cookies that are necessary for the Service to work: a session cookie that keeps you signed in, a cookie with your timezone used at sign-up, and a referral cookie that lasts up to 60 days when you arrive through a referral link. Your light or dark theme preference is stored in your browser's local storage. Product analytics (PostHog) sets no cookies and stores nothing in your browser: it counts page views by path, without query strings or anything that identifies you.
On the public pages of govir.app (not in the app, the admin panel, sign-in, invitations or approval links), we use Google Tag Manager to load Google Analytics, with Google Consent Mode and a cookie banner. In the European Economic Area, the United Kingdom and Switzerland, analytics and advertising storage stay denied, and Google sets no cookies, until you allow them. Elsewhere, analytics storage is allowed until you reject it, and advertising storage stays denied unless you allow it. A Global Privacy Control signal from your browser counts as a rejection until you choose otherwise. Without analytics consent Google may receive anonymous, cookieless signals such as a page view. Google receives the page's address, your browser's details and your IP address; we never send it your name, email or anything from your Govir account. Your choice is kept in a necessary cookie for 180 days, and you can change it with Cookie settings in the footer, wherever you are. The Cookie Policy lists every cookie we use. Error reports (Sentry) leave out cookies, request details, email addresses, sign-in codes and tokens.
Inspiration shows posts from Threads that the Govir team picked. A post is loaded from Threads only when you click "Show post": Threads then shows it in a frame on the page and may set its own cookies under the Meta Privacy Policy. Until you click, nothing is loaded from Threads. When you search in Inspiration, we send your search to Threads on behalf of the account you connected and show you the public posts it returns. We keep the results for up to an hour so the same search loads faster, never save your searches, and never send the posts to AI. A reply you send from the results is published from your account, like any reply you send through Govir.
Data retention
We keep a waitlist entry until we have sent the launch email and for up to 12 months after, or until you ask us to remove it, whichever comes first. We keep your data while your account is active. When you disconnect a social account, we delete its access token immediately; you choose whether to keep its posts and metrics in Govir (hidden until you reconnect the account, and deletable at any time in Settings → Accounts) or to delete them. When you delete your Govir account (Settings → Profile → Danger zone), we delete your personal data right away, except where we must keep it longer by law (for example, billing records). Backups are encrypted and deleted within 30 days.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict its processing, and to withdraw consent. You can export or delete your data in Settings, or contact us at support@govir.app. You also have the right to lodge a complaint with your local data protection authority.
If you live in the United States, state privacy laws such as the California Consumer Privacy Act (CCPA, as amended by the CPRA) give you the right to know what personal information we collect and how we use it (this policy), to access, correct and delete it, and to opt out of its "sale" or "sharing" for cross-context behavioural advertising. We do not sell your personal information, and we do not share it for cross-context behavioural advertising: Google's advertising signals stay denied unless you allow them in Cookie settings. You can opt out of analytics as well at any time with Cookie settings in the footer, or by turning on Global Privacy Control in your browser, which we honour. We won't treat you differently for using these rights. Requests: support@govir.app.
See Data deletion for step-by-step instructions.
Children
The Service is not intended for anyone under 16, and we do not knowingly collect their data.
Changes to this policy
We may update this policy from time to time. If changes are significant, we will notify you by email or in the app before they take effect.