Privacy Policy

Voxefy ("we", "us", or "our") helps you draft, review, and publish content in your own voice. This policy explains what information we collect when you use Voxefy, why we collect it, how we store and protect it, and the choices you have. By using Voxefy, you agree to the practices described here.

Voxefy processes information related to your writing identity, including drafts, writing samples, Voice Profiles, Authority Profiles, content rules, proof points, scoring results, and connected-platform data. We use this information to provide the Service, protect your voice and credibility, support publishing workflows, and give you control over your content.

We collect only what we need to provide the service:

• Account information — your name and email address, used to create and secure your account.
• Content and identity data — drafts, posts, writing samples, uploaded materials, Voice Profiles, Authority Profiles, proof points, domain boundaries, forbidden phrases, custom content rules, scoring results, quality audits, rewrite history, comments, workspace settings, and related metadata.
• Connected-platform data — if you connect a publishing platform (starting with LinkedIn), the account identifier, display name, and email it returns, plus the access token that lets us publish on your behalf.
• Publishing metadata — when you publish through a connected platform, we may collect or store related metadata such as post IDs, timestamps, publish status, publishing errors, and platform response data.
• Team and workspace data — if you use team features, we may collect workspace names, user roles, permissions, comments, review activity, approvals, and related collaboration data.
• Usage data — basic product analytics about how features are used, so we can improve the app.
• Technical data — standard request information such as your browser type and approximate region, collected by our infrastructure for security and reliability.

We and our service providers may use cookies, local storage, pixels, and similar technologies to keep you signed in, secure the Service, remember preferences, understand product usage, improve performance, and measure marketing effectiveness. You can control cookies through your browser settings, but some features may not work properly if cookies are disabled.

• To provide the service — generating drafts, scoring voice and brand integrity, and saving your content.
• To personalize the Service based on your declared identity, including your Voice Profile, Authority Profile, proof points, content rules, domain boundaries, and audience settings.
• To authenticate you and keep your workspace secure.
• To publish content to the platforms you connect (starting with LinkedIn), only when you explicitly confirm a publish action.
• To improve and troubleshoot the product.
• To detect, prevent, and investigate abuse, security issues, unauthorized access, policy violations, platform misuse, fraud, or other harmful activity.
• To communicate with you about your account, security, and service updates.

We may use aggregated or de-identified usage data, such as feature usage, error patterns, and scoring trends, to improve Voxefy. We do not use aggregated or de-identified data to identify you or recreate your content.

We do not sell your personal information, and we do not use the content of your posts or your LinkedIn data for advertising.

We may use or disclose information when we believe it is necessary to comply with law, enforce our Terms, protect the security or integrity of the Service, prevent fraud or abuse, or protect the rights, safety, or property of Voxefy, users, or others.

We do not use your drafts, posts, writing samples, Voice Profile, Authority Profile, LinkedIn data, or connected-platform data to train third-party foundation models.

To generate and score content — across formats such as social posts, newsletters, blog articles, and video scripts — Voxefy sends the relevant text to third-party AI model providers acting as our processors. They process submitted text only to provide the requested feature, such as generation, rewriting, scoring, or review, and do not use it to train their models. We send only the information needed for that feature.

Voxefy lets you connect publishing platforms so you can post the content you approve. When you connect one, we request the minimum permissions required to identify your account and publish on your behalf — nothing more. You can disconnect a platform at any time from your account settings, which revokes our stored access, and you can also revoke access directly from the platform.

LinkedIn is our first integration. When you connect LinkedIn, we request only your basic profile and email (to identify your account) and permission to share posts on your behalf. We never request access to read your LinkedIn message history or connections.

Any data obtained through the LinkedIn API is used only to provide the features you authorize — identifying your account and publishing the posts you explicitly approve. We use LinkedIn data strictly in accordance with the LinkedIn API Terms of Use and LinkedIn's Platform guidelines. We do not sell it, share it with unrelated third parties, or use it for advertising.

When you publish through a connected platform, we may store related publishing metadata, such as post IDs, timestamps, publish status, and error messages, so we can show status, troubleshoot issues, and maintain your content history.

Disconnecting a platform revokes Voxefy's future access, but it does not delete content already published to that platform. To delete published content, you may need to do so directly through the connected platform.

Content you choose to publish to LinkedIn or another connected platform may become public or visible to others according to that platform's settings and policies. Voxefy does not control how others view, copy, share, store, or use content after it is published.

Connected platforms process your information under their own privacy policies and terms. We do not control how those platforms process data once content is published or once you interact with their services directly.

As we add more integrations (such as other social platforms and publishing destinations), we apply the same data-minimization principles and update this policy to reflect them.

If you use Voxefy as part of a workspace, organization, or team account, workspace owners or administrators may be able to access, manage, export, delete, or control content and settings associated with that workspace, including drafts, profiles, comments, analytics, and user activity.

• Your data is stored in a managed PostgreSQL database with row-level security that scopes records to your account and workspace.
• LinkedIn access tokens are encrypted at rest using authenticated AES-256-GCM encryption and are never exposed to the browser or written to logs.
• All data is transmitted over encrypted HTTPS connections.
• Access to production systems is limited to authorized personnel and protected by least-privilege controls.

We may update our security architecture over time, but we will continue to use commercially reasonable technical and organizational safeguards designed to protect your information.

No system is perfectly secure, but we work to protect your information using industry-standard safeguards.

If we become aware of a data incident involving your personal information, we will investigate and notify affected users or regulators where required by applicable law.

We share data only with the service providers (subprocessors) that help us operate the product, and only as needed to deliver the service:

• Cloud database, authentication, and hosting providers that run the application.
• AI model providers that process content to generate and score drafts.
• Product analytics providers that help us understand and improve usage.
• Publishing platforms you connect (starting with LinkedIn), when you choose to publish content.
• A payment processor, if you subscribe to a paid plan — we do not store full payment card details.

These are trusted subprocessors that provide services such as hosting, authentication, storage, analytics, AI processing, payments, and publishing integrations. We require them to process information only as needed to provide services to us and to protect information using appropriate safeguards.

We may also disclose information to professional advisors, security providers, fraud-prevention services, regulators, law enforcement, or other parties when necessary to comply with law, enforce our terms, protect rights and safety, or support a business transaction such as a merger, acquisition, financing, or sale of assets.

We retain your information for as long as your account is active or as needed to provide the service. When you delete content or your account, we delete the associated data within a reasonable period, except as described below.

Connected-platform access tokens are deleted or disabled when you disconnect the platform, subject to short backup and security-retention periods. Drafts, profiles, and workspace content are retained while your account is active unless you delete them. Security logs, billing records, and limited operational records may be retained longer where needed for legal, security, fraud-prevention, accounting, or dispute-resolution purposes.

Backup copies may persist for a limited period before being overwritten according to our backup schedule.

You have control over your information. Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Export your profile and content.
• Disconnect any connected platform at any time from your account settings.
• Request deletion of your account and associated personal data.

Depending on your location, you may also have the right to object to or restrict certain processing, withdraw consent where processing is based on consent, opt out of marketing communications, receive a portable copy of certain data, or appeal our decision regarding a privacy request.

We may need to verify your identity before fulfilling a request. If you submit a request through an authorized agent, we may require proof that the agent is authorized to act on your behalf.

To request deletion or exercise any of these rights, email us at privacy@eutell.com.

Voxefy is not directed to children or minors under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will take appropriate steps to delete it.

We and our service providers may process your information in countries other than where you live. Where required, we rely on safeguards such as standard contractual clauses, data processing agreements, or other legally recognized transfer mechanisms to protect your information when it is transferred internationally.

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you. Your continued use of the service after an update means you accept the revised policy.

If a change materially affects how we use your personal information, we will provide notice as required by law and obtain consent where required.

If you have questions about this policy or how we handle your data, email us at privacy@eutell.com.