Privacy Policy
Last updated: May 2026
This Privacy Policy explains what data Voxiru collects, how we use it, and your rights.
1. What We Collect
Account data
Email address, password (hashed, never stored in plain text), subscription plan and billing history.
Usage data
Number of images processed, features used, browser type and IP address (for fraud prevention), date and time of activity.
Payment data
Payments are processed by Dodo Payments (web app) or Shopify Billing (Shopify app). We do not store your credit card number. We receive only payment status and transaction ID.
Images
Uploaded and processed images are stored temporarily on AWS S3. Retention: 48 hours for free users (web app), 30 days for paid users (web app), 7 days for Shopify app users. Images are automatically deleted after their retention period. We do not analyze, share, or use your images for any purpose other than processing them.
2. How We Use Your Data
| Data | Purpose |
|---|---|
| Account login, billing receipts, product updates | |
| IP address | Fraud prevention (1 free trial per IP) |
| Usage data | Improving the service, billing accuracy |
| Images | Processing only — deleted after retention period (48h/30d/7d depending on plan) |
We do not sell your data to third parties. Ever.
3. Who Has Access
AWS — hosts our servers and stores images (encrypted at rest)
Dodo Payments / Shopify Billing — processes payments (PCI-DSS compliant)
Shopify — hosts the embedded Shopify app, handles OAuth and billing for Shopify merchants
Resend — sends transactional emails (verification, password reset)
MailerLite — sends marketing emails (you can unsubscribe anytime)
4. Data Retention
| Data type | Retention |
|---|---|
| Account data | Until account deletion + 30 days |
| Images — free users (web) | 48 hours after processing |
| Images — paid users (web) | 30 days from processing |
| Images — Shopify app | 7 days from processing |
| Payment records | 7 years (legal requirement) |
| Usage logs | 12 months |
5. Your Rights
Access — request a copy of your data
Correction — update incorrect data in your account settings
Deletion — delete your account and all associated data
Unsubscribe — opt out of marketing emails at any time
To exercise any right, email: team@voxiru.com
6. Cookies
Session cookie — keeps you logged in
CSRF token — protects against form attacks
Analytics cookies — Google Analytics is used to understand site usage. No advertising cookies are currently active.
7. Security
All data transmitted over HTTPS (SSL/TLS encrypted)
Passwords hashed with bcrypt
Images stored in private S3 buckets (not publicly accessible)
8. Children
Voxiru is not intended for users under 18. We do not knowingly collect data from minors.
9. Contact
Privacy questions: team@voxiru.com