This Privacy Policy explains how Voxtis (“we”, “us”, or “our”) collects, uses, and protects your personal information when you use our website at voxtis.comand related services (the “Service”). By using the Service you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Information you provide

Account information: email address and any profile details you choose to add.
Audio recordings: short voice recordings made during mock exams and practice sessions. These are used solely to transcribe and evaluate your speaking, then deleted from our processing pipeline.
Session transcripts: text transcriptions of your spoken answers, generated automatically by our AI pipeline.
Payment information: international card billing is handled by Lemon Squeezy (operated by Link, LLC, formerly Lemon Squeezy LLC), our Merchant of Record. Local Uzbekistan payments may be handled by Click.uz. We do not store your card details. Payment providers share with us only the data needed to fulfil your subscription (for example status, plan, and receipt identifiers).

1.2 Information collected automatically

Usage data: pages visited, features used, session frequency, and error logs — used to improve the Service.
Device and browser data: browser type, operating system, and approximate geolocation (country level) derived from your IP address.
Cookies and local storage: used for authentication and session management. We do not use third-party advertising cookies.

2. How We Use Your Information

To provide, operate, and improve the Service.
To transcribe and evaluate your spoken answers and generate feedback.
To manage your account, subscription, and usage limits.
To send transactional emails (e.g. account confirmation, subscription notices).
To detect and prevent fraud, abuse, and security incidents.
To comply with legal obligations (e.g. tax records via Lemon Squeezy as Merchant of Record).

We do not sell your personal data to third parties. We do not use your audio or transcripts to train AI models without explicit opt-in consent.

3. Third-Party Services

We use the following third-party services to operate the platform:

Supabase — database and authentication (data stored in the EU).
OpenAI — AI language model and speech transcription. Audio clips are sent to OpenAI solely for transcription and are subject to OpenAI’s Privacy Policy.
Deepgram — real-time speech-to-text during live mock sessions. Audio is streamed to Deepgram and subject to Deepgram’s Privacy Policy.
Lemon Squeezy — international payment processing, tax collection, and subscription billing as Merchant of Record. Subject to Lemon Squeezy’s Privacy Policy.
Click.uz— local payment processing in Uzbekistan. Subject to Click’s privacy terms.
Vercel — hosting and CDN. Subject to Vercel’s Privacy Policy.

4. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. Session transcripts and feedback reports are retained so you can access your history. You may delete individual sessions or your entire account at any time from your account settings.

Audio recordings sent for transcription are not stored by us after the transcription is complete. Third-party processors (OpenAI, Deepgram) may retain data per their own policies.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: request a copy of the data we hold about you.
Rectification: ask us to correct inaccurate data.
Erasure: request deletion of your account and associated data.
Portability: receive your data in a structured, machine-readable format.
Objection / restriction: object to or restrict certain types of processing.

To exercise any of these rights, email us at privacy@voxtis.com. We will respond within 30 days.

6. Cookies

We use strictly necessary cookies for authentication and session management. We do not use tracking or advertising cookies. If we add analytics cookies in future we will update this policy and provide a consent mechanism.

7. Children’s Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at privacy@voxtis.com and we will delete it.

8. Security

We implement industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last Updated” date. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.

10. Contact

For privacy-related questions or requests, contact us at privacy@voxtis.com.