PRIVACY POLICY

Your information.
Our responsibilities.

Effective September 6, 2026

For new recordings, the connection IP address is retained with the recording and is visible to authorized workspace members in Visitor details. It follows the recording’s retention and deletion settings and is not included in public replay links. Visitor context may include an approximate country derived from the connection IP, operating system, browser version, and preferred browser language. Country lookup uses a local database; IP addresses are not sent to the geolocation database provider. IP Geolocation by DB-IP.

AI replay narration

When an authorized workspace member opens a recording, TMV Go may send a condensed activity timeline, page paths and captured page-section labels to OpenAI to generate timestamped narration. Identity profiles, form values, IP addresses and raw replay files are not included in this request. Captured labels may contain page content; masking settings limit the context available. Narration is stored with the recording and follows its deletion and retention settings. AI explanations can be inaccurate and should be checked against the replay.

Who operates TMV Go

TMV Go is operated by SSY Media, LLC. This policy explains information handled through our website, accounts, and website-recording service.

SSY Media, LLC
1415 Apple Blossom Dr., Cumming, GA 30041, USA
support@tmvgo.com

Account and service information

We process account email addresses, workspace and website information, password hashes, invitations, authentication sessions, subscription status, usage counts, and correspondence you send us. Our infrastructure also processes technical logs such as IP addresses, request details, browser information, and security events.

Payments

Stripe processes subscription payments and billing-portal activity. TMV Go stores Stripe customer and subscription identifiers and subscription status. Card details entered into Stripe Checkout are handled by Stripe rather than stored in TMV Go’s application database. Stripe’s own privacy notice explains its processing.

Recordings on customer websites

Customers configure TMV Go on their websites. Depending on the installation and settings, the recorder captures page structure and text, styles and available assets, clicks, pointer movements, scrolling, page visits, browser/device details, timing, referral and campaign information, and activity or conversion events. Customers may provide identity/profile information through their integration.

Ordinary field values and selections may be captured in replays. The recorder masks detected sensitive fields, including passwords, payment details and contact information, and explicitly excluded areas. This does not guarantee every sensitive item elsewhere on a page is excluded. Customers must review page content, masking, consent settings, and capture behavior before recording visitors. A browser identifier is not necessarily a unique person.

For customer recordings, the website owner determines the purpose of collection and the data sent to TMV Go. We handle that data to provide the service for the customer. The website owner’s privacy notice also applies to your visit.

Cookies and browser storage

TMV Go uses an authentication cookie to keep account users signed in and browser storage for interface preferences. On recorded websites, browser storage can retain a visitor identifier, session information, and pending recording events across page navigation. Customers are responsible for configuring consent where required. Clearing storage can reset identifiers and sign-in state.

Recording on our public website

We use TMV Go session replay on public marketing pages to understand browsing, clicks, and scrolling. Workspace, account, signup, recovery, and billing pages are excluded, and sign-in forms are blocked from replay. This public-site recorder respects Do Not Track and Global Privacy Control.

Why we use information

We use information to operate recordings and analytics, maintain accounts, process subscriptions, send requested account and support messages, enforce plan limits, diagnose failures, protect against abuse, and meet legal obligations. We do not sell recorded visitor data or use it for advertising targeting.

Who can receive information

Customer workspace users can access data according to their permissions. Customers can download recordings or create expiring sharing links; recipients may keep copies outside TMV Go. Our hosting provider, InMotion Hosting, supports the server and mail infrastructure. Stripe supports payment processing. Providers receive information needed to perform their services. We may disclose information where required by law or reasonably necessary to protect rights and service security.

Retention and deletion

Recording retention is 2 months (60 days) for Starter, 90 days for Growth, and 180 days for Business. Trial capture lasts fourteen days; trial recordings remain available for seven additional days after expiry. Retention cleanup runs in the background. Deleting a website or recording removes its associated application recording data through the deletion process. Downloaded or shared copies held by others are outside our control.

Account, billing, security, support, and backup information may be retained separately for operating, legal, and security needs. Ask us about account deletion or a particular record. We do not promise that deleting a recording immediately erases every backup or legally required billing record.

Your requests and choices

Contact support@tmvgo.com to request access, correction, deletion, or information about processing. We may need to verify your identity and authority over an account. Requests concerning another organization’s website recordings may need to be handled by that website owner; include the website address when contacting us. Applicable privacy rights depend on your location and the circumstances.

Security and international use

We use access controls, hashed passwords, encrypted network connections, and account-scoped application permissions. No internet service can guarantee absolute security. SSY Media, LLC operates in the United States; use of the service may involve processing outside your country.

Children

TMV Go accounts are intended for adults operating websites. Do not use the service to knowingly collect children’s personal information without the authorization and safeguards required by applicable law. Contact us if you believe inappropriate collection occurred.

Policy updates

We will post changes here with an updated effective date and provide additional notice when required. For privacy questions, contact the business listed above.

Optional Google measurement on our marketing site

When enabled and you permit it through Tracking preferences, we use Google Analytics to measure visits and verified signups or purchases, and Google Ads to measure advertising conversions. Events can include page paths, campaign and ad-click identifiers, a conversion identifier, and purchase amount and currency. We do not include your email, password, or recorded customer-site content in these events. Analytics and advertising choices are separate from session-recording consent. You can withdraw permission through Tracking preferences. Browser blocking or declining permission can prevent measurement.

Consent response reporting

To report consent outcomes, we count accepted and declined responses by day and approximate country. The country is derived from the connection IP using a local lookup; the report does not retain that IP, a visitor identifier, city, or an individual browsing history. These aggregate counts are retained for up to 90 days. Repeated choices can contribute multiple responses; people who make no choice are not counted as having declined.

Recording consent preferences

TMV Go’s included recording consent manager stores a choice, notice version, expiry and random consent receipt in browser storage. When a consent-required mode is selected, recording identifiers and capture begin only after approval. Customers can instead select automatic recording after acknowledging their responsibility to determine whether prior consent is required. Consent-action logs contain the notice copy, version, choice, source and timestamp, and are deleted after one year. They do not include a visitor ID or IP address. Declining or withdrawing clears pending browser recording data and blocks further uploads; previously received recordings follow their retention policy. Global Privacy Control keeps recording off.