Privacy Policy

This policy explains how Tonpit collects, uses and protects personal information when you use our website, app, browser extension and agent connector. Tonpit is operated by Itay Rose Ari, Yehuda HaNasi 13, Tel Aviv 6920013, Israel (“we,” “us”), who is the controller of the information described here. Read it together with our Terms of Service.

When a business uses Tonpit to handle other people’s personal data, we process that data for the business under our Data Processing Addendum, and the business decides how it is used.

Your account details are needed to provide the Service. Everything else you give us is voluntary; without it, only the features that need it are unavailable.

Information you give us

• Account: email, name and profile photo (from Google sign-in or your signup). Passwords are handled by Google Firebase; we never see them
• Payments: Lemon Squeezy, our Merchant of Record, processes payments. We never receive your card number; Lemon Squeezy shares your name, email, order and subscription status with us
• Your content: prompts, uploads (images, video, audio, fonts), generated media, scripts, timelines, motion code, UI captures and brand kits
• AI assistant conversations: your messages with Tonpit’s assistants, their replies, and the notes assistants keep for your account. Who may look at them, and why, is in section 5
• Agent connections: the agents you connect, their permissions and spend ceilings. Access tokens are stored only in hashed form
• Forms and messages: onboarding answers, program applications, feedback, support messages and your email preferences

Information collected automatically

• Usage and billing records: features used, generations, exports, and per-request AI usage (model, amount used, cost) that power your credit balance
• Agent activity: a record of each action a connected agent takes (which tool, when, and the outcome)
• Error reports from the app
• Device and location: browser, operating system, IP address, and your approximate country, which decides which AI providers and prices apply to you. The country your browser was last seen from is kept on your account, with when it was seen, so that agents you connect are served as being where you are rather than where their servers are
• Cookies and local storage: see section 6

People in your content

Your content may show or name other people, such as a face in a reference image or a name in a script. We process it only to provide the Service to you. We do not use face recognition or any other biometric identification. Some video model providers automatically check reference images for photorealistic faces and may refuse them; neither they nor we identify who is shown. You must have the right to use other people’s images, voices and details.

• Provide the Service: store and sync your projects, generate, render and export (contract)
• Run your plan, credits and payments (contract)
• Send service messages about your account and billing (contract)
• Send tips and product updates, only if you opt in (consent; withdraw it by emailing us)
• Keep the Service secure, prevent fraud and abuse, and enforce our Terms (legitimate interests)
• Improve the Service from usage patterns (legitimate interests)
• Measure and improve our ads on Meta, including showing Tonpit ads to people who visited our site (consent in Europe; elsewhere, legitimate interests, until you turn advertising off)
• Meet legal obligations

The words in parentheses are the legal bases we rely on under the GDPR and similar laws. We do not sell your personal information, and we do not use your content to train AI models. We make no automated decisions with legal effects about you.

Generating with Tonpit means sending your inputs to AI providers. What is sent depends on the feature:

• Built-in assistants (Studio, media and script): your messages, project context and attachments go to Anthropic. Long conversations are summarized by Anthropic as well
• Motion assistant, captions, and some design and text features: your prompts, project context and audio go to Google (Gemini)
• Audio transcription and static ad planning: your audio, prompts and briefs go to OpenAI
• Image and video generation: your prompts and reference images or video go to fal.ai, which runs the model you choose or passes the request to its developer (listed below), or, for select models and users outside the United States, to BytePlus
• Voiceover: your script text and voice settings go to ElevenLabs
• Brand kits: the website content and images we collect for you go to Anthropic to choose logos and brand assets
• UI captures are turned into editable code by our own software. Their content, including a marked-up copy of the capture’s screenshot, reaches an AI provider only when you ask an assistant to work with the capture

The developers behind the image and video models fal.ai serves:

These providers process your content under their API terms. When you connect your own AI agent, what it reads from Tonpit goes to that agent’s provider under your agreement with them.

Service providers

Other sharing

• Legal requirements: when the law requires it, or to protect rights and safety
• Business transfers: in a merger, acquisition or sale of assets, and we will tell you
• With your consent

Access by Tonpit: only Tonpit’s operator and people working for Tonpit under confidentiality may look at accounts, projects, assistant conversations and agent activity, and only to give support you ask for, to monitor the Service’s quality and cost, for security and abuse prevention, to meet legal obligations, and, when you ask, to copy a project into another account.

• Essential: browser storage that keeps you signed in (set by Google Firebase) and a cookie marking that you are; a country cookie (30 days) so the app shows the prices and models that apply where you are; a cookie (1 day) that tells the app which video provider is active; your cookie choice; and local storage for preferences. These are needed for the Service
• Analytics (Google Analytics), to see how Tonpit is used, runs only while analytics is on
• Advertising (Meta Pixel and Conversions API) runs only while advertising is on, to measure our ads and show Tonpit ads to people who visited. For collecting and sending this data, we and Meta are joint controllers; what Meta does with it afterwards is governed by Meta’s privacy policy
• Vercel Analytics and Speed Insights measure performance without cookies and without tracking you across sites
• Google sign-in loads from Google on our pages, and fonts used in your designs load from Google Fonts; Google receives your IP address
• Mapbox loads map tiles, and collects its own usage data, when you work with a map template
• YouTube serves the tutorial videos and their thumbnails on our Resources page, from its privacy-enhanced domain

Analytics and advertising are separate choices. In the EU, the rest of the European Economic Area, the UK and Switzerland, both stay off until you turn them on. Elsewhere, both start on and you can turn either off. Turning them off changes nothing in how Tonpit works, and you can change your choices at any time: Cookie settings.

Your account and projects are stored with Google Firebase. Exported videos are rendered on Amazon Web Services and deleted there after one day; your download link comes from there. Uploaded and generated media is served through direct links: anyone with a file’s exact link can open it. The links are long and random, so they cannot be guessed or listed, but do not upload content you need to keep strictly confidential.

• While your account is active, we keep your account, projects, conversations and usage records
• Agent activity records are deleted after 90 days, and agent job records after 7 days
• Deleting a project removes it with its timeline, script and code. Its media files stay, because other projects may use them, until you delete them or your account
• Deleting your account removes your account, projects, files, conversations, agent connections and usage records from our systems right away. Cached copies of public media files expire from our content delivery network within 30 days
• AI providers delete what we sent them under their own retention terms, typically within 30 days
• Payment records are kept by Lemon Squeezy as the law requires
• Aggregated, anonymous statistics may be kept indefinitely

Everyone

Wherever you are, you can:

• Access and correct your personal data
• Delete your account and its data in Settings, or by contacting us
• Get a copy of your personal data and projects by contacting us
• Withdraw consent to analytics or advertising in Cookie settings, or to marketing email by emailing us, at any time

EU and UK (GDPR)

You also have the right to object to processing based on legitimate interests, to restrict processing, to data portability, and to complain to your local data protection authority.

California

You have the right to know what we collect, to delete and correct it, and not to be discriminated against for using your rights. We do not sell personal information. We share it with Meta for advertising while advertising cookies are on; turning them off in Cookie settings opts you out.

Israel

You have rights of access, correction and deletion under the Israeli Privacy Protection Law.

How to use your rights

Email hello@tonpit.com. We answer within 30 days, and may ask you to confirm your identity first.

• Encryption in transit (HTTPS) and at rest with our storage providers
• Per-user authorization on every data request
• A fresh sign-in before sensitive actions, such as deleting your account or creating an agent token
• Agent tokens stored only in hashed form, with permissions and spend ceilings
• In your browser, code written for your animations runs in an isolated sandbox
• Signature checks on payment notifications, and regular security reviews

No system is perfectly secure, and we cannot guarantee absolute security.

Tonpit is operated from Israel, which the European Commission recognizes as protecting personal data adequately. Our providers process data in the United States and other countries, including, for some image and video models, their developers in China (see section 4). For select AI models, requests from users outside the United States are processed by BytePlus Pte. Ltd. in Singapore, which does not use your inputs or outputs to train its models without consent. For users in the EU, the UK and other regions with transfer rules, these transfers rely on our providers’ standard contractual clauses and data processing agreements.

Tonpit is only for people 18 and older. We do not knowingly collect personal information from anyone younger. If you believe someone under 18 has given us personal data, email hello@tonpit.com and we will delete it.

Tonpit may link to other websites and services. Their privacy practices are their own; please read their policies.

Tonpit UI Capture is an optional Chrome extension that captures a website’s visual layout into your Tonpit workspace. This is exactly how it handles data.

What the extension captures

Nothing is captured until you start a capture. Then the extension collects, from the page or element you selected:

• The HTML structure, layout and styles
• The visible text
• Font names used on the page
• Images (small ones embedded; larger ones fetched from their web addresses)
• The page address (URL) and window size
• A screenshot of the visible tab, used to check the capture’s visual accuracy and to show assistants what the capture looks like

If you choose to record interactions or entrance animations, it also records your clicks, hovers, scrolls, the text you type and element animations, during that recording only, so they can be replayed in your design.

What it does not collect

• Your browsing history
• What is in password, payment and hidden fields: a capture keeps only dots in their place
• Your saved passwords, cookies or sign-in tokens
• Anything from pages or moments you do not capture or record

Important: a capture includes whatever is visible in what you select. Avoid capturing pages that show private or sensitive information, or select only the element you need.

Where captured data goes

• On your device first: captures stay in Chrome’s local storage. The extension never sends them on its own and never contacts AI providers
• When you import: the capture is uploaded to Tonpit, turned into editable code by our own software, and stored with your project. The screenshot is stored privately; when you ask an assistant to work with the capture, a marked-up copy is shared with that assistant through a direct link
• When you copy: you can copy a capture to your clipboard and paste it yourself

Permissions

Tonpit UI Capture’s use of information received from Chrome follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

Uninstalling

Removing the extension deletes the captures stored on your device. Captures you imported stay in your account until you delete them or your account.

We may update this policy and will change the date at the top when we do. We will tell you about material changes in the app or by email before they apply to you.

For privacy questions or to use your rights:
Itay Rose Ari, Yehuda HaNasi 13, Tel Aviv 6920013, Israel
Email: hello@tonpit.com