Legal

Privacy Policy

This Privacy Policy describes how Voxet collects, uses, and shares information when providing a voice‑first service that turns natural language into actions across user‑connected platforms. It explains the categories of data processed, the purposes and legal bases for processing, how long data is retained, users' privacy rights in different regions, and how to contact Voxet to exercise those rights.

What Voxet does

Voxet enables users to issue voice commands that are transcribed, interpreted by an LLM, and executed via user‑authorized integrations with third‑party services. Voxet uses third‑party providers for real‑time voice connectivity and processing, and hosting/analytics necessary to operate and improve the service.

Data collected

  • Account and authentication data: identifiers and credentials required to create and secure an account and manage access.
  • Voice audio and transcripts: real‑time capture and transcription to enable conversation and command execution; synthesized responses may be generated for playback.
  • Commands, results, and logs: prompts, requested actions, outcomes, and error traces to execute tasks, support troubleshooting, and improve reliability.
  • Integration credentials: OAuth tokens and user‑provided API keys necessary to connect and act within user‑authorized third‑party accounts.
  • Device, session, and connectivity metadata: information needed to establish and maintain real‑time sessions and secure access.

Sources of data

Voxet collects information directly from users, from devices used to access the service, and from third‑party services connected by users where needed to perform requested actions. Voxet also receives operational and diagnostic information from infrastructure and analytics providers for security, performance, and support.

How data is used

  • Provide and operate the service: authenticate users, process voice interactions, interpret commands with an LLM, and execute actions via connected integrations.
  • Security and integrity: detect, prevent, and investigate abuse or outages; protect accounts and systems.
  • Product improvement: monitor performance, enhance accuracy and reliability, and develop new features consistent with applicable privacy principles.
  • Legal compliance: fulfill legal obligations and respond to lawful requests consistent with applicable laws.

Legal bases (GDPR/UK GDPR)

Where required, Voxet relies on one or more of the following lawful bases under GDPR: consent, performance of a contract, compliance with legal obligations, protection of vital interests (rare), public interest (rare), and legitimate interests balanced against user rights. Voxet provides transparent privacy notices and facilitates the exercise of data subject rights in a clear and accessible manner.

Retention

Voxet retains personal data only for as long as necessary for the purposes described above, and then deletes or anonymizes it consistent with the storage limitation principle. Retention periods may vary by data category, legal requirements, and the needs of security, dispute resolution, and service continuity.

Sharing and disclosures

  • Service providers: Voxet shares information with vetted providers for hosting, real‑time voice processing, analytics, and customer support under confidentiality and data protection obligations.
  • User‑authorized integrations: Voxet shares only the data necessary to perform user‑requested actions with connected third‑party services via OAuth tokens or user‑provided API keys.
  • Legal and safety: Voxet may disclose information to comply with laws, enforce terms, or protect users and the service from harm.

International transfers

Where personal data is transferred across borders, Voxet implements appropriate safeguards consistent with applicable data protection laws and privacy principles. Such safeguards are designed to ensure a level of protection appropriate to the risk and the nature of the processing.

Your privacy rights

  • EEA/UK: rights of access, rectification, erasure, restriction, portability, and objection; right to withdraw consent; and the right to lodge a complaint with a supervisory authority.
  • California (CCPA/CPRA): rights to know/access, delete, correct, opt‑out of sale/sharing, limit use of sensitive personal information, and non‑discrimination.
  • New Zealand: rights and principles under the Privacy Act 2020 governing collection, use, disclosure, access, and correction.

Exercising rights and contact

Users can submit privacy requests through in‑product mechanisms or via Voxet's Help or Contact pages, subject to identity verification and applicable law. Voxet responds without undue delay and within the timeframes required by law, with extensions where legally permitted for complex requests.

Children's privacy

Voxet is not intended for children under 13 and does not knowingly collect personal information from children under 13 without verifiable parental consent as required by law. If Voxet learns it has collected such information without consent, it will delete it and take steps to close the account or otherwise comply with applicable children's privacy rules.

Changes to this Policy

Voxet may update this Policy to reflect changes in practices or law, and will provide notice consistent with applicable transparency requirements. Continued use of the service after the effective date of changes indicates acceptance of the updated Policy.

How to contact Voxet

For privacy questions or requests, contact Voxet via the Help & FAQs or Contact pages. Users also have the right to contact their regional data protection authority about concerns regarding Voxet's data practices.