Privacy Policy

Effective June 17, 2026

This Privacy Policy explains how Favist ("we", "us") collects, uses, and shares information when you use favist.ai and related services (the "Service"). By using the Service you agree to this Policy and our Terms of Service.

1. Information we collect

• •Account & profile: name, email, handle, avatar, bio, and settings you provide.
• •Sign-in provider data: when you sign in with Google, Apple, or Discord, we receive basic profile info (name, email, profile picture) from that provider.
• •Your content: the lists, items, notes, photos, and favorites you add.
• •Usage & device: log data, pages viewed, actions taken, approximate location from IP, browser/device info, and cookies.
• •Communications: messages you send us and to the AI assistant.
• •Referral/affiliate: an affiliate code (the “r” parameter) captured when you arrive via an affiliate link, stored in a cookie to attribute sign-ups.
• •Payments: handled by our processors (Stripe, PayPal). We receive limited transaction/status data but do not collect or store full card numbers.

2. Google user data & Limited Use

If you connect Google, we request only the scopes needed for the feature you use — typically your basic profile and email for sign-in, and, where you enable a feature that requires it, read-only access to the specific Google Drive files you choose. Favist's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we use Google user data only to provide and improve the user-facing features you request, do not use it for advertising, do not sell it, and do not share it except as needed to provide the Service, with your consent, or as required by law. You can review and revoke Favist's access anytime in your Google Account's security settings.

3. How we use information

• •Provide, operate, secure, and improve the Service;
• •Authenticate you and manage your account;
• •Resolve and display catalog data, artwork, links, and playback;
• •Power the AI assistant and your requested actions;
• •Process payments, subscriptions, and affiliate/ambassador payouts;
• •Communicate with you (transactional emails, support, and — where permitted — updates);
• •Detect, prevent, and address fraud, abuse, and policy violations;
• •Comply with legal obligations.

4. How we share information

We do not sell your personal information. We share it with:

• •Service providers / subprocessors that run the Service — e.g. Supabase (database & auth), Vercel (hosting), Resend (email), Anthropic (AI assistant), Stripe & PayPal (payments), and the Sperse affiliate platform (referral tracking & payouts);
• •Other users, when you make lists public or share them, or connect with people;
• •Catalog/link providers when resolving items (e.g. Apple/iTunes, TMDB, YouTube), per their terms;
• •Authorities or others when required by law, to enforce our Terms, or to protect rights and safety;
• •A successor in a merger, acquisition, or asset sale, subject to this Policy.

5. Cookies

We use essential cookies for sign-in/session, a short-lived volume/preferences store, and an affiliate-attribution cookie (favist_ref). You can control cookies in your browser; disabling essential cookies may break the Service.

6. Retention & deletion

We keep information for as long as your account is active or as needed to provide the Service and meet legal, accounting, or fraud-prevention obligations. You can delete your account, which removes your profile and content from active systems; residual copies may persist in backups for a limited period.

7. Your rights

Depending on where you live (e.g. GDPR/UK GDPR, CCPA/CPRA), you may have rights to access, correct, delete, port, or restrict your personal data, and to object to certain processing. To exercise these, contact us at privacy@favist.ai. We will not discriminate against you for exercising your rights.

8. Security

We use reasonable technical and organizational measures (including row-level access controls and encrypted transport) to protect your information. No method is perfectly secure; we cannot guarantee absolute security.

9. Children

The Service is not directed to children under 18, and we do not knowingly collect their data. If you believe a minor has provided us information, contact us and we will delete it.

10. International transfers

We and our providers may process information in countries other than yours. Where required, we use appropriate safeguards for cross-border transfers.

11. Changes

We may update this Policy. Material changes will be posted here with a new effective date.

12. Contact

Questions or requests: privacy@favist.ai.