Privacy Policy

1. Who we are

Zova is an AI-assisted social content creation and publishing service operated by ZOVA SOCIAL LIMITED. Questions or requests about this policy can be sent to zova.social@gmail.com.

2. Information we collect

We collect account information such as your name, email address and password hash; content you provide, including ideas, drafts, instructions and uploaded media; account preferences; subscription status and payment-provider references; and technical information such as request logs, device or browser information, IP address and security events.

When you connect a social platform, including TikTok, Instagram, Facebook or X, we may receive the account identifier, profile information, authorization tokens, connected account details, recent posts and engagement or account analytics made available through that platform's API and the permissions you grant.

3. How we use information

We use information to authenticate you, connect your selected social accounts, learn your content style, generate and refine platform-specific content, upload or publish content at your direction, schedule posts, display analytics, provide support, protect the service, prevent misuse and improve reliability.

Zova does not publish to a social account unless you choose the destination and initiate or schedule the publishing action.

4. AI processing

Your prompts, drafts, preferences and relevant content context may be sent securely to our configured AI service provider to generate or refine content. Social access tokens are not intentionally included in AI prompts. AI output may be inaccurate, so you should review content before publishing.

Media inspection

When you send a Studio message with attachments, Zova sends resized images or sampled video frames to OpenAI to describe their visible content. Video audio is not analysed. Observations are saved with the uploaded file so later edits can reuse them, and are included in account export and assisted account deletion. We set AI requests not to store response objects; this does not eliminate any provider security or abuse-monitoring retention. Avoid uploading material you do not have permission to share. AI observations may be wrong; check them before publishing.

5. How we share information

We share information only as needed with service providers that support hosting, storage, AI processing, authentication, analytics, payments and security; with the social platforms you direct Zova to connect to or publish through; when required by law; or as part of a business transfer. We do not sell your personal information.

6. TikTok and other platform data

Information received from TikTok is used to provide the features you request, such as identifying the connected account, preparing platform-appropriate content, publishing authorized posts and presenting available performance information. Use of information received from platform APIs is also subject to the applicable platform developer terms and policies.

You can revoke Zova's access through the connected platform or unlink the account within Zova. Revocation stops new access but does not automatically remove information already required for legitimate security, transaction or legal records.

7. Storage, security and retention

Social authorization tokens are stored server-side and encrypted at rest. Passwords are stored as salted hashes. We use reasonable technical and organisational safeguards, although no internet service can guarantee absolute security.

We retain account and content information while your account is active and for as long as reasonably necessary to provide the service, resolve disputes, maintain security records and meet legal obligations. We delete or anonymise information when it is no longer required, subject to backups and lawful retention requirements.

8. Your choices and rights

You can update your account details and unlink connected accounts from Account settings. Depending on where you live, you may have rights to access, correct, delete, restrict or receive a copy of your personal information, or object to certain processing. Contact zova.social@gmail.com to make a request. We may need to verify your identity.

9. Children

Zova is not directed to children under 13, or the higher minimum age required to use social platforms in their country. We do not knowingly collect personal information from children below the applicable minimum age.

10. International processing

Our service providers may process information in countries other than your own. Where required, we use appropriate safeguards for international transfers.

11. Changes to this policy

We may update this policy as Zova develops. We will post the revised version here and update the date above. Material changes may also be communicated through the service or by email where appropriate.

Product measurement

When enabled for a beta, Zova records account-linked creation, review, confirmed publishing and return milestones, plus optional useful-draft feedback. These records do not contain draft text, social credentials or card details. AI operations record available token counts and cost estimates for service operation. Contact us to request access or deletion of these records.

Complaints

You can contact us or raise a concern with the UK Information Commissioner’s Office at ico.org.uk, or your relevant supervisory authority.

12. Contact

For privacy questions, data requests or complaints, email zova.social@gmail.com.