TAV GROUP LLC ("we", "us", "TAV") respects your privacy. This policy explains what data we collect, why we collect it, and how we protect it.
By using TAV, you agree to this Privacy Policy.
1. Data Controller
TAV GROUP LLC
Email: support@usetav.com
Website: usetav.com
2. What Data We Collect
2.1 Account Data
When you create an account:
- Email address
- Full name
- Phone number
- Date of birth
TAV uses passwordless authentication via magic links. We do not store passwords.
2.2 Business Data
For invoicing and contracts:
- Business name and type
- Business address
- Tax identification number (VAT/EIN)
- Bank details (IBAN or account/routing number)
- Country of registration
2.3 Client Data
Data you enter about your clients:
- Company name and contact person
- Email address
- Business address
- Tax identification number
You are the data controller for your client data. TAV processes this data on your behalf as described in our Data Processing Agreement.
2.4 Document Data
Content of invoices, offers, and contracts you create, including line items, amounts, dates, and terms.
2.5 Usage Data
We automatically collect:
- Device type and browser
- Pages visited and features used
- Timestamps of actions
We do not use third-party analytics trackers.
3. Why We Collect Data
We process your data for the following purposes:
- Service delivery: Creating and sending your documents, managing your clients
- Authentication: Verifying your identity via magic links
- Billing: Processing your subscription payment
- Legal compliance: Tax record retention, fraud prevention
- Communication: Service updates, support responses
Legal Basis (for EU users)
- Contract performance: Processing necessary to deliver the Service (Art. 6(1)(b) GDPR)
- Legal obligation: Tax record retention requirements (Art. 6(1)(c) GDPR)
- Legitimate interest: Service improvement, security, fraud prevention (Art. 6(1)(f) GDPR)
4. Who Has Access to Your Data
We share data only with the service providers necessary to operate TAV:
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| Supabase | Database and file storage | All application data | US (AWS) |
| Stripe | Subscription billing | Email, name, payment method | US |
| Resend | Transactional email | Email addresses, document metadata | US |
| SignatureAPI | Contract signing | Names, emails, contract PDFs | US |
| Vercel | Application hosting | Request logs | US |
We do not sell your data. We do not share data with advertisers.
5. International Data Transfers
TAV is operated from the United States. If you are located in the EU/EEA, your data is transferred to and processed in the United States.
For EU users, these transfers are protected by Standard Contractual Clauses (SCCs) maintained by our sub-processors and, where applicable, by adequacy decisions.
6. Data Retention
While your account is active:
We retain all your data for as long as your account exists.
After account closure:
- Invoices and contracts: 7 years (legal requirement for financial records)
- All other data: Deleted within 30 days
- You can export your data before closing your account
7. Your Rights
You have the right to:
- Access: Request a copy of your data
- Correction: Update inaccurate data (via your account settings)
- Deletion: Request deletion of your data and account
- Export: Download your data in standard formats (CSV, PDF)
- Restriction: Request limitation of processing
- Objection: Object to processing based on legitimate interest
EU users may also file a complaint with their local Data Protection Authority.
To exercise your rights, contact us at support@usetav.com.
8. Security
We protect your data through:
- Encryption in transit (TLS) and at rest
- Passwordless authentication (magic links — no passwords to breach)
- Row-level security on all database tables
- No third-party analytics or tracking scripts
- Regular security reviews
9. Cookies
TAV uses only essential cookies required for authentication and session management. We do not use marketing cookies, tracking cookies, or third-party cookies.
10. Children
TAV is not intended for anyone under 18. We do not knowingly collect data from minors.
11. Changes to This Policy
We may update this policy. Material changes are communicated via email at least 30 days in advance. The latest version is always available at usetav.com/privacy.
12. Contact
TAV GROUP LLC
Email: support@usetav.com
Website: usetav.com
Version: 2.0 | Last updated: February 18, 2026