Draft, pending legal review. This document may change before launch.
This policy explains what personal data the operator of this site ("we") collects when you use Voxit, why, and the choices you have. We are the data fiduciary (controller) for this data.
What we collect
- Account details: email address, password (stored only as a secure hash), date of birth (to confirm you are 18 or over), username, and, if you add them, your real name and bio. If you sign in with Google we receive your email address and a Google account identifier.
- About you (optional): your country, gender, interests and a photo, if you choose to give them at sign-up or in Settings. You can change or remove them at any time.
- What you post: posts, comments, images, votes, reports, community memberships and blocks.
- View counts: when a post shows on your screen, we add 1 to its public view total. We keep which posts you saw for at most an hour, only so the same view isn't counted twice; the totals don't say who saw a post.
- Technical data: IP address, browser type and the time of requests, kept in server logs for security.
- Visit statistics: which pages are opened, the referring site, country and device type, counted by Cloudflare Web Analytics without cookies or a profile of you, so we can see how much Voxit is used.
- Messages to us: what you send through the contact form.
We don't sell your data and we don't show ads.
Why we use it
- To run Voxit: create your account, show your posts, rank feeds and send account emails (verification and password reset). Legal basis: providing the service you asked for (contract).
- To personalise Voxit with the optional details you give us: your interests suggest communities, and your gender is checked only when you join a community limited to women or men. If you turn on "Show my posts in the country view", your posts appear when someone browses posts from your country. Legal basis: your consent, which you can withdraw by clearing them in Settings.
- To send the daily digest email, only if you turn it on in Settings. Every digest has a link to turn it off.
- To keep the community safe: moderation, spam prevention, handling reports and complying with the law. Legal basis: our legitimate interests and legal obligations.
- With your consent, which you give when you sign up and can withdraw by deleting your account.
AI processing
When a community moderator asks for a thread summary, the text of that public thread is sent to Anthropic, which provides the Claude AI model, to write the summary. Anthropic processes it on our behalf and does not use it to train its models. Summaries are labelled as AI output. We don't send your email, date of birth or other private account details to AI providers.
Who we share it with
- Service providers that run Voxit for us: hosting (Vultr, in India), image storage (Cloudflare R2), email delivery, error monitoring, visit statistics (Cloudflare Web Analytics) and AI (Anthropic). They may only use the data to provide their service to us.
- Authorities, when the law requires it or to protect someone from serious harm.
Some providers are outside your country. Where we transfer data internationally we use contracts and safeguards required by law.
What other people see
Your username, bio, posts, comments, karma and the date you joined are public. Your real name appears only on posts and comments where you chose to show it (or in communities that require it). Your photo, if you add one, appears only beside your real name on your comments in communities that require real names. Your email, date of birth, country, gender and interests are never shown to other people, except that if you turn on the country view, people browsing your country can tell your posts come from there.
How long we keep it
We keep your account data while your account exists. When you delete your account we delete your posts, comments, votes and profile straight away, and remove the rest from backups within 14 days. Server logs are kept for up to 30 days. Reports and moderation records may be kept longer where the law requires.
Your rights
You can see and correct most of your data in Settings, and delete your account there at any time. You can also ask us for a copy of your data, to correct or erase it, or to nominate someone to act for you, by writing to contact@voxitapp.com or using the Help page. These rights come from India's Digital Personal Data Protection Act 2023, the Australian Privacy Principles and, if you are in the EU or UK, the GDPR. You may also complain to your data protection regulator.
Children
Voxit is for adults. We don't knowingly collect data from anyone under 18; if we learn we have, we delete the account.
Cookies
We use only the cookies needed to keep you signed in and protect forms from forgery, and one that remembers for 24 hours that someone under 18 tried to sign up on this browser. We don't use advertising, analytics or tracking cookies.
Security
We use encryption in transit, hashed passwords, access controls and regular backups. No system is perfectly secure; we will tell you and the regulator about a breach where the law requires.
Grievance officer
Grievance Officer, contact@voxitapp.com. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.
Changes
We will update this policy when our practices change and tell you about significant changes before they apply.