Privacy Policy

This Privacy Policy explains how Voxabase (“Voxabase,” “we,” “us”) collects, uses, and shares information when you use our client deliverables portal at voxabase.com and app.voxabase.com (the “Service”). By using the Service, you agree to this policy.

Who we are

Voxabase is a software service that lets freelancers and studios create branded portals to deliver files to their clients and collect invoice payments. For the personal information of account holders, Voxabase acts as the data controller. For files and client details that account holders upload about their own customers, the account holder is the controller and Voxabase is a processor acting on their behalf.

Information we collect

We collect the following, depending on how you use the Service:

• Account information — your name, business name, email address, and password (passwords are stored hashed, never in plain text).
• Content you upload — files, project names, descriptions, invoice amounts, and any branding (logo, colors) you add to your portals.
• Payment information — when you subscribe or your clients pay an invoice, payment is processed by Stripe. We do not store card numbers. Stripe provides us limited details such as subscription status and the last four digits of a card.
• Usage information — basic technical data such as portal views, IP address, browser type, and timestamps, used to operate and secure the Service.
• Team information — if you use teams, the email addresses of people you invite, their names, and when they were last active in the app (to show who is online to the rest of the team).
• Client responses — when clients approve a delivery or request changes, the note and the optional name they enter.
• Custom domains — the domain you connect, which we share with Vercel so it can route traffic and issue a security certificate.
• Communications — if you email us, we keep the message and your contact details to respond.

How we use your information

• To provide, maintain, and improve the Service.
• To process subscriptions and enable your clients to pay invoices.
• To authenticate you and keep your account secure.
• To respond to your support requests.
• To send essential service messages (for example, billing or security notices).
• To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not show third-party ads in the Service.

Service providers (subprocessors)

We rely on a small number of trusted providers to run the Service. Each processes data on our behalf under a data processing agreement and only as needed to provide their service:

• Stripe — payment processing and subscription billing. See Stripe’s privacy policy.
• Supabase — database, authentication, and storage for logos. See Supabase’s privacy policy.
• Backblaze — storage for delivered files. See Backblaze’s privacy policy.
• Vercel — application hosting and content delivery. See Vercel’s privacy policy.

If we add or change providers, we will update this list. Some of these providers are based in the United States, so your information may be transferred to and processed there.

Who can see what

Your portals are private to your account. A portal’s link shows its files and invoice to anyone who has the link, unless you protect it with a password, in which case nothing inside it is shown until the password is entered. If you are on a team, the team owner and teammates can see the portals shared with that team, and each other’s names, emails and online status. Personal portals are never visible to a team.

How long we keep information

We keep your information for as long as your account is active. If you delete your account or specific content, we remove the associated data within a reasonable period, except where we must retain it to meet legal, tax, or accounting obligations (for example, payment records).

Your rights

Depending on where you live (for example, under the GDPR or CCPA), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update most details directly in your account settings, or contact us at support@voxabase.com and we will respond. We will not discriminate against you for exercising these rights.

Security

We use industry-standard measures to protect your information, including encryption in transit and at rest, hashed passwords, optional two-step verification, private file storage with short-lived download links, and access rules enforced by our database. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to notify you of significant incidents where required by law.

Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “last updated” date above and, for significant changes, notify you through the Service or by email.

Contact us

If you have questions about this policy or your data, email us at support@voxabase.com.