Privacy Policy

1. Introduction

Welcome to Voxoap ("we," "our," or "us"). We are committed to protecting your privacy and explaining how we collect, use, and protect personal information when you use our websites, applications, and related services (collectively, the "Service"). Voxoap provides administrative session documentation tools: for example, turning voice into structured notes that you review, edit, and approve.

By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

2. Data Controller

Contact email: contact@voxoap.com
Website: voxoap.com

For purposes of the General Data Protection Regulation (GDPR) and similar laws where applicable, the operator identified above is the data controller for personal information processed through the Service, unless we state otherwise for a specific processing activity.

3. Information We Collect

We collect information needed to run the Service and communicate with you:

3.1. Account information

• Email address: for account access, authentication, and service communications
• Name or display name: if you provide it during registration or profile setup
• Authentication credentials: managed using industry-standard practices (we do not store plaintext passwords if password login is offered)

3.2. Content you provide (including session documentation)

• Voice audio: when you record or upload audio for transcription or note generation
• Transcripts and notes: text generated or edited in the Service, including structured notes and related metadata you choose to save
• Client or session records: information you enter about people you work with (for example names or labels you add), solely as you provide it

3.3. Technical and usage information

• Device and app data: device type, operating system, app or browser version where relevant
• Usage data: features used, approximate timestamps, and diagnostic events to operate and improve the Service
• IP address and logs: for security, abuse prevention, and troubleshooting

3.4. Waitlist and marketing site

If you join a waitlist or submit a form on our marketing site, we collect the information you submit (for example email address) to contact you about the Service.

4. How We Use Your Information

We use personal information to:

• Provide, maintain, and secure the Service
• Process audio and text to produce drafts you can review and approve
• Sync and store your content across devices when that feature is enabled
• Communicate with you about the Service, including support responses
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with law and enforce our terms
• Improve the Service in line with this policy

5. Legal Basis for Processing (GDPR)

Where GDPR applies, we rely on:

• Contract (Article 6(1)(b)): processing needed to provide the Service you request
• Legitimate interests (Article 6(1)(f)): for example security, analytics at an aggregate level, and product improvement, balanced against your rights
• Consent (Article 6(1)(a)): where we ask for consent for optional communications or optional cookies, when applicable
• Legal obligation (Article 6(1)(c)): where the law requires processing

6. Third-Party Services and Processors

We use infrastructure and service providers to host and operate the Service. Examples may include:

• Supabase: database, authentication, and related infrastructure. See the Supabase privacy policy for details.
• Google AI services (such as Gemini): used server-side to process content you submit when AI features are invoked, subject to your workflow and product settings. See Google's privacy documentation for those services.
• Hosting and networking: cloud providers that store and transmit data.

We require subprocessors to protect personal data through appropriate agreements. The specific providers and purposes may evolve; we will update this policy for material changes where required.

7. International Transfers

Your information may be processed in the United States and other countries where we or our providers operate. Where GDPR applies, we use appropriate safeguards such as Standard Contractual Clauses or other mechanisms recognized by applicable law.

8. Retention

We retain personal information for as long as needed to provide the Service and fulfill the purposes in this policy, unless a longer period is required by law. When you delete your account or content where the product allows deletion, we delete or anonymize it within a reasonable period, subject to backup and legal retention needs.

9. Your Rights (including GDPR and similar laws)

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete certain information, subject to exceptions
• Restrict or object to certain processing
• Data portability, where applicable
• Withdraw consent where processing is consent-based
• Lodge a complaint with a supervisory authority

To exercise these rights, contact contact@voxoap.com. We will respond within the timeframe required by law.

10. Cookies and Similar Technologies

Our websites may use cookies or similar technologies for essential operation, preferences, and analytics. Where required, we obtain consent before non-essential cookies. You can control cookies through browser settings.

11. Security

We implement administrative, technical, and organizational measures designed to protect personal information, including encryption in transit where appropriate and access controls. No method of transmission or storage is 100% secure.

Important: Unless we explicitly offer and contract for a HIPAA business associate relationship for a specific product tier, the Service is not marketed as a HIPAA compliance solution. You are responsible for deciding whether the Service fits your regulatory obligations.

12. Data Breach Notification

If we become aware of a breach that requires notification under applicable law, we will notify regulators and affected individuals as required.

13. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. Contact us if you believe we have done so.

14. AI Processing

Parts of the Service use AI to help format or draft content from your inputs. You remain responsible for reviewing outputs before relying on them. We configure providers to limit misuse of data in line with our agreements; model training use varies by provider and product configuration, and we describe material choices in product documentation when they change.

15. Sharing and Disclosure

We do not sell your personal information. We share information with subprocessors who help us operate the Service, when required by law, or to protect rights, safety, and security.

16. Contact

Questions about this Privacy Policy: contact@voxoap.com. Subject line: Privacy inquiry.

17. Changes

We may update this Privacy Policy from time to time. We will post the updated version and adjust the "Last Updated" date. If changes are material, we will provide additional notice as appropriate (for example email or in-product notice).