legal
Effective date: July 12, 2026 · Last updated: July 12, 2026
Voxa ("Voxa", "we", "us", "our") is an AI agent platform that lets you delegate tasks — research, drafting, outreach, scheduling — to AI agents that act on your behalf. Our service is available at getvoxa.co.
For privacy questions, reach us at privacy@getvoxa.co.
| Purpose | Data used | Legal basis |
|---|---|---|
| Executing agent tasks (research, email, scheduling, drafting) | Integration data, conversation data | Contract performance |
| Personalising agent responses using your profile and memories | Memories, profile | Contract performance / Legitimate interests |
| Routing SMS and WhatsApp messages | Phone number, message content | Contract performance |
| Account management and authentication | Email, auth tokens | Contract performance |
| Billing and subscription management | Usage data, billing info | Contract performance |
| Security, fraud prevention, abuse detection | Technical data, usage data | Legitimate interests |
| Product improvement and debugging | Anonymised usage data, error logs | Legitimate interests |
We do not use your data to train AI models, sell to third parties, or serve advertising.
Voxa uses AI models from Anthropic (Claude) and Google (Gemini) to process your requests and generate agent outputs. Your data — including email content and messages — may be sent to these providers to fulfil tasks.
AI outputs are generated predictions, not facts. You are responsible for reviewing agent-drafted content before it is sent or published.
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Database and authentication | All stored data (hosted in your chosen region) |
| Anthropic (Claude) | AI model inference | Task content, messages |
| Google (Gemini + Search) | AI model inference, web research | Task content, search queries |
| Twilio | SMS and WhatsApp delivery | Phone number, message content |
| Google Cloud (Cloud Run) | Application hosting | Request data, server logs |
| Stripe | Payment processing | Billing details (Stripe stores card data, not us) |
We retain your data for as long as your account is active. When you delete your account:
Depending on where you live, you may have the following rights:
You can exercise most of these rights directly in the app (Settings → Account). For everything else, email privacy@getvoxa.co and we will respond within 30 days.
If you are in the EU/EEA, you have the right to lodge a complaint with your local data protection authority.
We do not sell personal information as defined by the CCPA. California residents have the right to know what personal information we collect, request deletion, and opt out of sale (which we do not engage in). To exercise your rights, contact privacy@getvoxa.co.
We use industry-standard protections including:
No system is perfectly secure. If we become aware of a breach that affects your data, we will notify you by email within 72 hours.
Voxa is operated from Canada. If you access the service from the EU or other regions with different data protection laws, your data may be transferred to and processed in countries that may not have equivalent protections. By using Voxa, you consent to these transfers. We use Standard Contractual Clauses where required.
Voxa is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it promptly.
We may update this policy as the service evolves. If we make material changes, we will notify you by email or a notice in the app at least 14 days before the change takes effect. Continued use after that date constitutes acceptance.