VoxAI

Privacy Notice

Last updated: January 2026

The VoxAI service is operated by VixAi ("we", "us", "our"), based in Alexandria, Egypt. This notice explains how we collect, use, share, and protect your personal data.

1. Data Controller

VixAi is the data controller for personal data processed through this Service. For privacy questions, contact voxai@doojin.art.

2. Categories of Personal Data & Purposes

  • Account data (name, email, hashed password) — to create your account, authenticate, and provide access.
  • User content (text, images, audio for generation or conversion) — to deliver the features you request.
  • Usage & technical data (IP address, browser type, device info, logs, errors) — for security, fraud prevention, performance, and analytics.
  • Support data (messages you send us) — to respond to inquiries.
  • Basic billing data (email, plan, payment status) — to manage your subscription. We do not collect or store card details — those are processed directly by Paddle.

3. Legal Basis for Processing

  • Performance of contract — to provide the Service and manage your account.
  • Legitimate interests — security, fraud prevention, analytics, and product improvement.
  • Legal obligation — to comply with tax, accounting, and regulatory requirements.
  • Consent — for optional marketing communications (which you may withdraw anytime).

4. Data Sharing

We never sell your data. We share it only with the following categories of recipients:

  • Paddle.com Inc. — Merchant of Record: Paddle acts as the seller of our products. They handle subscription management, payment processing, sales tax/VAT calculation, invoicing, payment-related customer service, and refunds. Paddle is the entity that appears on your bank statement. See their privacy policy at paddle.com/legal/privacy.
  • AI service providers (e.g. Google Gemini, Groq, ElevenLabs, Pollinations, Lovable AI Gateway) — to fulfill the generation requests you make.
  • Infrastructure & hosting providers (e.g. Supabase / Lovable Cloud, Cloudflare) — to run the platform and databases.
  • Professional advisers (accountants, lawyers) when strictly necessary.
  • Government or judicial authorities when legally required.

5. Data Retention

  • Account data: for the lifetime of your active account + 12 months, then deleted or anonymised.
  • User-generated content (text/images/audio): until you delete it manually, or up to 12 months from last access.
  • Technical and security logs: up to 90 days.
  • Billing and transaction records: 7 years to comply with tax and accounting obligations.
  • Support messages: up to 24 months after the ticket is closed.

When the retention period ends or the purpose no longer applies, data is securely deleted or anonymised.

6. Security

We use TLS encryption for all data in transit, strong password hashing, restricted access controls, and continuous monitoring. However, no method is 100% secure — we recommend using a strong password and not sharing your credentials.

7. Your Rights

  • Access your data and request a copy.
  • Rectify or update inaccurate data.
  • Erasure ("right to be forgotten") where conditions are met.
  • Restrict or object to processing.
  • Data portability to another provider.
  • Withdraw consent anytime (without affecting prior processing).
  • Lodge a complaint with your local supervisory authority.

We respond within 30 days at the latest. To exercise these rights, contact us at the email above.

8. International Data Transfers

Your data may be processed outside your country (e.g. on servers in the EU or US) by our service providers. For transfers from the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions.

9. Cookies

  • Essential: required for login and session security (cannot be disabled).
  • Preferences: remember language and theme.
  • Basic analytics: aggregated usage to improve the Service.
  • We do not use third-party advertising cookies. You can manage cookies in your browser settings.

10. Children's Privacy

The Service is not directed to anyone under 13 (or the legal age in your country). If we learn we have collected data from a minor without parental consent, we delete it promptly.

11. Updates

We may update this notice from time to time. We will notify you of material changes by email or in-app notice.

12. Contact

VixAi — Alexandria, Egypt. Privacy inquiries: voxai@doojin.art.