Back

Privacy Policy

Last updated: June 10, 2026

1. Introduction

This Privacy Policy explains how Tonpit (“we,” “us,” or “our”) collects, uses, and protects your information when you use our AI-powered video creation platform, including AI typography and motion design, AI video generation, the Studio editor, voiceover generation, and the Tonpit UI Capture browser extension.

Tonpit serves users worldwide and is operated from Israel. By using Tonpit, you agree to the collection and use of information as described in this policy. This policy should be read together with our Terms of Service.

2. Information We Collect

Information You Provide

  • Account information: Email address, name, and profile photo (via Google sign-in or email signup)
  • Payment information: Payments are processed by Lemon Squeezy, our Merchant of Record. We never receive or store your card number. Lemon Squeezy shares your email, name, and subscription status with us
  • Content you create and upload: Text prompts, designs, projects, voiceover scripts, UI captures, and media files you upload (images, video, audio, fonts)
  • Onboarding answers: Optional answers about how you plan to use Tonpit
  • Email preferences: Your choices about receiving tips and product updates
  • Communications: Messages if you contact us for support

Information Collected Automatically

  • Usage data: Features used, generations created, export actions, error reports
  • Device information: Browser type, operating system, IP address
  • Cookies and local storage: A session cookie for authentication, and local storage for preferences such as your cookie consent choice

Information from Third Parties

  • Google: If you sign in with Google, we receive your name, email, and profile photo from your Google account

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Service (performance of our contract with you)
  • Process payments and manage your subscription and credits (contract)
  • Process your prompts and content through AI to generate designs, videos, and audio (contract)
  • Save and sync your projects across devices (contract)
  • Send service-related communications such as account and billing notices (contract)
  • Send tips and product updates, only if you opt in (consent, withdrawable at any time)
  • Improve the Service based on usage patterns (legitimate interests)
  • Prevent fraud, abuse, and violations of our Terms (legitimate interests)
  • Comply with legal obligations

The labels in parentheses are the legal bases we rely on under the GDPR and similar laws. We do not use your content to train our own AI models, and we do not use automated decision-making that produces legal effects about you.

4. AI Processing

Generating content with Tonpit requires sending your inputs to AI service providers. What is sent depends on the feature you use:

  • Design, typography, and animation: Your text prompts and design data are sent to Anthropic (Claude) or Google (Gemini)
  • AI video: Your prompts and the images or video you provide are sent to fal.ai and the model provider you select
  • Voiceover: Your script text and voice settings are sent to ElevenLabs
  • UI captures: When you import a capture, its content (layout, styles, and visible text) is sent to Anthropic or Google to convert it into editable code

These providers process your content under their own API data-processing terms. This processing is essential to provide the core functionality of Tonpit.

5. How We Share Your Information

Service Providers

ProviderPurposeData Shared
Anthropic (Claude)AI generationPrompts, design data, capture content
Google (Gemini)AI generationPrompts, design data, capture content
fal.aiAI video generationPrompts, images, and video you provide
ElevenLabsVoiceover generationScript text, voice settings
Google FirebaseAuthentication, database, file storageAccount info, projects, uploaded media
Lemon SqueezyPayment processing (Merchant of Record)Email, name, payment info
AWS (Remotion Lambda)Video rendering and output storageProject data, rendered videos
VercelHosting and performance measurementRequest data, aggregate usage metrics
Google AnalyticsProduct analytics (only with your consent)Usage events, device info
MapboxMap rendering in map-based templatesMap locations used in your project

Other Sharing

We may share your information:

  • Legal requirements: When required by law or to protect our rights
  • Business transfers: In connection with a merger, acquisition, or sale of assets (you will be notified)
  • With consent: When you explicitly authorize sharing

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

6. Cookies and Analytics

  • Session cookie: Required to keep you signed in. Essential for the Service
  • Google Analytics: Loads only after you accept analytics cookies in our consent banner. You can decline without losing any functionality
  • Vercel Analytics and Speed Insights: Cookieless, aggregate performance measurement that does not track you across sites and does not store identifiers on your device

7. Where Your Content Is Stored

Your projects and uploaded media are stored with Google Firebase, and rendered videos with AWS. Uploaded media files and rendered videos are served through direct links: anyone who has a file's exact link can view it, although the links are long and not guessable. Please do not upload content you need to keep strictly confidential.

8. Data Retention

  • Active accounts: We retain your data while your account is active
  • After deletion: When you delete your account, your account data, projects, usage records, and uploaded files are deleted within 30 days
  • Project data: Deleted when you delete projects or your account
  • Payment records: Retained as required by law (typically 7 years). Managed by Lemon Squeezy
  • Anonymized analytics: May be retained indefinitely

9. Your Rights

All Users

Wherever you are located, you can:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data from your account settings, or by contacting us
  • Receive a copy of your personal data and project data by contacting us

EU and UK Users (GDPR)

If you are in the European Union or United Kingdom, you also have the right to:

  • Object to processing based on legitimate interests
  • Restrict processing
  • Data portability
  • Withdraw consent at any time (for example, for analytics cookies or marketing emails)
  • Lodge a complaint with your local supervisory authority

California Users (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information is collected and how it is used
  • Request deletion or correction of your data
  • Opt out of sale or sharing of personal information (we do not sell or share it)
  • Non-discrimination for exercising your rights

Israeli Users

If you are in Israel, you have rights of access, correction, and deletion under the Israeli Privacy Protection Law, and you may contact us to exercise them.

How to Exercise Your Rights

Email us at hello@tonpit.com with your request. We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.

10. Security

We implement appropriate security measures including:

  • Encryption in transit (HTTPS)
  • Secure authentication via Firebase
  • Access controls and per-user authorization on all data APIs
  • Payment-webhook signature verification
  • Regular security reviews

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

11. International Transfers

Tonpit is operated from Israel, which the European Commission recognizes as providing an adequate level of data protection. Your data is processed in the United States and other countries by the providers listed above (AWS, Anthropic, Google, fal.ai, ElevenLabs, Vercel, Lemon Squeezy).

For users in the EU, UK, and other regions with transfer restrictions, these transfers rely on safeguards such as the providers' standard contractual clauses and data-processing agreements.

12. Children's Privacy

Tonpit is not intended for children under 13 years of age (or the higher minimum age required for digital consent in your country). We do not knowingly collect personal information from children below these ages.

If you believe a child has provided us with personal data, please contact us at hello@tonpit.com and we will delete it promptly.

13. Third-Party Links

Tonpit may contain links to external websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

14. Chrome Extension (Tonpit UI Capture)

Tonpit UI Capture is an optional Chrome extension that lets you capture a website's visual layout and bring it into your Tonpit workspace. This section explains exactly how the extension handles data.

What the Extension Captures

Nothing is captured until you explicitly start a capture. When you do, the extension collects from the page or element you selected:

  • The HTML structure, layout, and styles of the selected content
  • The visible text of the selected content
  • Font names used on the page
  • Images in the selected content (small images are embedded; larger ones are fetched from their original web addresses)
  • Page address (URL) and viewport size
  • A screenshot of the visible tab, used only to verify the capture's visual accuracy

If you choose to record interactions or entrance animations, the extension additionally records your clicks, hovers, scrolls, text you type, and element animations during that recording only, so they can be replayed in your design.

What the Extension Does NOT Collect

  • Browsing history or navigation data
  • Passwords, cookies, or authentication tokens
  • Any data from pages or moments you don't explicitly capture or record

Important: a capture includes whatever is visible in the content you select. Avoid capturing pages that display private or sensitive information, or select only the specific element you need.

Where Captured Data Goes

  • Locally first: Captures are stored on your device in Chrome's local storage. The extension never transmits them automatically and never contacts AI providers directly
  • When you import: When you choose to import a capture into your Tonpit workspace, it is uploaded to Tonpit's servers, converted into editable code (this sends the capture's layout, styles, and visible text to our AI providers; the screenshot is not sent to AI providers), and stored with your project
  • When you copy: You can also copy a capture to your clipboard and paste it manually

Permissions

PermissionWhy It's Needed
Access to all websitesTo capture UI from any site you choose
Active tab & scriptingTo read the page you're viewing and run the capture tool on it
StorageTo save captures locally on your device
Clipboard writeTo copy captured HTML to your clipboard
DownloadsTo save captures as files when you ask

Uninstalling

Removing the extension deletes all captures stored locally on your device. Captures you previously imported into your Tonpit workspace remain in your account until you delete them or your account.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be indicated by updating the “Last updated” date at the top.

For material changes, we will notify you via email or in-app notification before the changes take effect.

16. Contact Us

For privacy questions or to exercise your data rights:

Email: hello@tonpit.com