Privacy Policy

1. Introduction

VoxBoard ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use our Service at voxboard-lemon.vercel.app.

2. Information We Collect

We collect the following types of information:

• Account information: name, email address, and password when you create an account
• Organization data: organization name, slug, and settings
• Feedback content: feedback posts, comments, votes, and categories submitted by you or your users
• Billing information: payment details processed and stored by Paddle (our payment processor) — we do not store credit card numbers
• Usage data: pages visited, features used, and general interaction patterns
• Device information: browser type, IP address, and operating system

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process subscriptions and billing
• Send transactional emails (account verification, password resets, notifications)
• Respond to support requests
• Detect and prevent fraud, abuse, or security incidents
• Analyze usage patterns to improve the product

4. Third-Party Services

We share data with the following third-party services, only as necessary to operate the Service:

• Supabase: database hosting and authentication (PostgreSQL). Your data is stored in Supabase-managed infrastructure.
• Paddle: payment processing and subscription management. Paddle acts as our Merchant of Record and handles billing data.
• Resend: transactional email delivery. We share your email address with Resend to send account-related emails.
• Vercel: application hosting and deployment.

We do not sell your personal information to third parties.

5. Cookies

We use essential cookies to maintain your session and authentication state. These cookies are strictly necessary for the Service to function. We do not use third-party advertising or tracking cookies.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal obligations. Feedback data submitted to public boards may be retained in anonymized form.

7. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

You have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your personal data
• Export: request a portable copy of your data
• Objection: object to certain processing of your data

To exercise any of these rights, contact us at voxboard@gmail.com. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Automated Decisions

VoxBoard uses AI-powered features to enhance your experience:

• AI Duplicate Detection: We use AI to automatically identify similar feedback submissions to keep your board clean. This process analyzes the text content of feedback posts — no personal data is used for this purpose.

You have the right to request an explanation of any automated decision, object to automated processing, and request human review. Contact us at voxboard.app@gmail.com to exercise these rights.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy, contact us at voxboard@gmail.com.