Voxa ("Voxa", "we", "us", "our") is an AI agent platform that lets you delegate tasks — research, drafting, outreach, scheduling — to AI agents that act on your behalf. Our service is available at getvoxa.co.
For privacy questions, reach us at mana@getvoxa.co.
Account data — your email address, name, and authentication tokens when you sign up.
Integration data — when you connect third-party services (Google, Microsoft, Slack, GitHub, Notion, Linear), we receive OAuth access tokens and the data those tokens permit us to read or write on your behalf. This includes email content, calendar events, messages, files, and contacts — only accessed when an agent task requires it.
Conversation and task data — messages you send to Voxa (via web or SMS/WhatsApp), tasks you dispatch, and the outputs agents produce.
Memories — facts Voxa learns about you and your work over time (e.g. your name, company, preferences, contacts) so future tasks are more accurate. You can view and delete all memories at any time from Settings.
Phone number — if you connect SMS or WhatsApp, we store your verified phone number to route inbound messages to your account.
Usage and billing data — subscription plan, usage counts, and billing information (processed by our payment provider; we do not store card numbers).
Technical data — IP address, browser type, and standard server logs for security and debugging.
| Purpose | Data used | Legal basis |
|---|---|---|
| Executing agent tasks (research, email, scheduling, drafting) | Integration data, conversation data | Contract performance |
| Personalising agent responses using your profile and memories | Memories, profile | Contract performance / Legitimate interests |
| Routing SMS and WhatsApp messages | Phone number, message content | Contract performance |
| Account management and authentication | Email, auth tokens | Contract performance |
| Billing and subscription management | Usage data, billing info | Contract performance |
| Security, fraud prevention, abuse detection | Technical data, usage data | Legitimate interests |
| Product improvement and debugging | Anonymised usage data, error logs | Legitimate interests |
We do not use your data to train AI models, sell to third parties, or serve advertising.
Voxa uses AI models from Anthropic (Claude) and Google (Gemini) to process your requests and generate agent outputs. Your data — including email content and messages — may be sent to these providers to fulfil tasks.
AI outputs are generated predictions, not facts. You are responsible for reviewing agent-drafted content before it is sent or published.
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Database and authentication | All stored data (hosted in your chosen region) |
| Anthropic (Claude) | AI model inference | Task content, messages |
| Google (Gemini + Search) | AI model inference, web research | Task content, search queries |
| Twilio | SMS and WhatsApp delivery | Phone number, message content |
| Google Cloud (Cloud Run) | Application hosting | Request data, server logs |
| Stripe | Payment processing | Billing details (Stripe stores card data, not us) |
We retain your data for as long as your account is active. When you delete your account:
Depending on where you live, you may have the following rights:
You can exercise most of these rights directly in the app (Settings → Account). For everything else, email mana@getvoxa.co and we will respond within 30 days.
If you are in the EU/EEA, you have the right to lodge a complaint with your local data protection authority.
We do not sell personal information as defined by the CCPA. California residents have the right to know what personal information we collect, request deletion, and opt out of sale (which we do not engage in). To exercise your rights, contact mana@getvoxa.co.
We use industry-standard protections including:
No system is perfectly secure. If we become aware of a breach that affects your data, we will notify you by email within 72 hours.
Voxa is operated from Canada. If you access the service from the EU or other regions with different data protection laws, your data may be transferred to and processed in countries that may not have equivalent protections. By using Voxa, you consent to these transfers. We use Standard Contractual Clauses where required.
Voxa is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it promptly.
We may update this policy as the service evolves. If we make material changes, we will notify you by email or a notice in the app at least 14 days before the change takes effect. Continued use after that date constitutes acceptance.
Privacy questions: mana@getvoxa.co
General: mana@getvoxa.co