TovakEffective October 17, 2026.
Tovak is operated by Pavel Ananyev.
Privacy enquiries: [email protected].
This policy covers tovak.com and the Tovak services connected to it, including listing applications, service requests and the associated mobile applications.
Information and purposes
- Providers: name or business name, phone, email, service and vehicle details, base address and coordinates, website, supplied photos and videos, correspondence and application permissions. We use these to review, publish and update listings, arrange sticker approval and communicate with providers. Vehicle coordinates sent through the driver app are used to show location and help match requests.
- People seeking help: phone, pickup and destination, vehicle details, notes, photos, requests, quotes and related communications. We use these to arrange contact with providers and maintain request history. Location from your device is requested through its permission controls. A request can be sent to up to five providers; the providers receiving it can use the details to respond and perform the requested service.
- Technical data: IP address, browser and device information, cookies and similar identifiers, page visits, actions, times and security events. We use these to operate and protect the service, remember settings and understand use. Accounts and push notifications also involve login or device identifiers and notification tokens.
- Support and reviews: the information you send us, names and review content, and records needed to resolve requests, prevent abuse and address disputes. Approved reviews and their display names are public.
We receive information from you, your device, service providers responding to requests and the service’s operation. Provider details are supplied for listing. We do not use photos or voice to identify people biometrically. Do not include unnecessary sensitive information in notes or media.
Wordfence helps protect the website against attacks and unauthorized access. Security checks and logs can involve IP addresses, request details, browser information and security events. Technical cookies support security functions. Live Traffic entries are removed during scheduled cleanup after the configured two-day retention period. See Wordfence’s Privacy Policy.
Public listings and recipients
Provider names, business contact numbers, service details, locations and supplied media are public as described in the Listing Terms. The publication requested in a listing application covers the website, applications and open API, Tovak social and video channels, and app-store descriptions, screenshots and previews. We use these publications to help people find and contact providers. Independent services may display public listings to help people find and contact a provider. Application email addresses and private customer requests are not part of the public catalogue.
We use FastVPS for website hosting, email and backups in the United States. Google provides maps, geocoding, website analytics and Firebase notification services. Map and notification services receive the technical information needed for their features. Mobile applications use AppMetrica (Yandex) for usage and diagnostic statistics, including call events identifying the selected provider and phone number. Providers receive information needed to respond to service requests. We may disclose information when required by law or necessary to address fraud, security incidents or legal claims.
We do not sell personal information to data brokers or use it for targeted advertising or retargeting. Public business listings and API access are provided to connect customers with providers. Their public availability does not make private application or request data public.
Cookies and analytics
Necessary cookies support login, security and saved choices. We use Google Analytics to understand website use. For visitors identified as being in the United States, analytics is on by default without a cookie banner. Elsewhere, including the EEA and the United Kingdom, or when the country cannot be determined, analytics starts only after you choose Accept all. Necessary only leaves analytics off. Country detection is approximate and uses country information from Cloudflare, which delivers and protects the website.
Use Cookie choices at any time to change your selection or withdraw analytics permission. The choice is saved in a necessary cookie for 180 days across tovak.com subdomains. Deleting it resets the choice. We also turn website analytics off when the browser sends Global Privacy Control or Do Not Track. Disabling analytics does not prevent use of the service or erase information already collected. Blocking all cookies in your browser may affect login and saved settings.
See Google’s Privacy Policy and Yandex’s Privacy Policy for information about their services.
Legal grounds
Where data protection law requires a legal basis, we process information needed to take steps you request and perform our agreement with you; use consent for optional analytics and other processing that requires permission; and rely on legitimate interests in operating and protecting the service, handling enquiries and defending legal claims, balanced against individuals’ rights. We also process information to meet applicable legal obligations. You may object to processing based on legitimate interests or withdraw consent without affecting earlier lawful processing.
Storage and international processing
The COM server, email and hosting backups are in the United States. Access to and processing of information may take place in other countries, where data protection laws may differ. Contact us for information about the recipients and arrangements relevant to your data.
We keep listings while they are maintained, request history while needed to provide it, and application, support and transaction records while needed to handle the matter, resolve disputes or meet legal obligations. We review deletion requests and remove information that is no longer needed. Backup copies may remain until replaced or deleted in the backup cycle; they are not used to republish removed listings.
Your choices and requests
Email [email protected] to request access, correction or deletion, to stop publication, or to raise a privacy concern. Give the relevant listing or request reference and a contact we can use to verify that the information is yours. We ask only for verification information proportionate to the request. Where applicable, you may also request a portable copy, object to or restrict processing, withdraw consent, use an authorized agent, appeal our response by replying to us, or complain to the competent privacy regulator. We do not penalize you for exercising applicable privacy rights. Necessary service data may still be needed to provide the requested feature or meet legal obligations.
Device settings control location and notification permissions. Disabling an optional feature does not prevent use of the remaining service.
Children, security and changes
The service is intended for adults and businesses, not children under 13. If you believe a child has provided personal information, contact us so we can address it. We restrict access to service information and take reasonable protective measures; no online system can guarantee absolute security.
We publish policy changes here with a new effective date and give additional notice or request permission for material changes when required by law.