Privacy Policy

Our privacy policy and how we use your data

Last updated: October 1, 2025

Voxifly ("we", "us", "our", or "Voxifly") operates the Voxifly service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, in compliance with Peru's Personal Data Protection Law No. 29733 and its regulations, as well as applicable international standards.

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect several types of information, including:

a) Information You Provide

  • Email address (for authentication and communication)
  • Name (from email or provided during registration)
  • Company / Organization name (as part of team accounts)
  • Authentication data (hashed passwords, session tokens)
  • Profile data (e.g. profile picture URL)
  • Billing / payment data (e.g. subscription info, purchase records)

b) Activity & Usage Information

  • Issues you create, vote, comment
  • Changelog / activity logs
  • Feature usage, plan quotas, and limits
  • Team membership, roles

c) Cookies and Tracking Data

  • Session / CSRF cookies, for security
  • Preference cookies (e.g. lang, theme, layout-style)
  • Analytics / performance cookies (e.g. Google Analytics)

We do not knowingly collect precise geolocation, device-specific identifiers (beyond standard browser data), or sensitive personal data (e.g. health, beliefs) unless explicitly provided under consent.

2. Purposes of Processing

We use your information for the following purposes:

  1. To provide, maintain, and improve the Service
  2. To authenticate users, manage accounts, and enable OAuth login (e.g. Google)
  3. To manage teams, roles, and collaborative features
  4. To manage billing, subscriptions, and payments
  5. To analyze usage, monitor performance, and detect abuse
  6. To communicate with you (support, updates, marketing, if consented)
  7. To comply with legal and regulatory obligations
  8. To ensure security, audit, and fraud prevention

3. Legal Basis for Processing

Depending on the nature of the data and processing, we rely on:

  • Explicit consent from you (especially for analytics, marketing)
  • Performance of contract / service execution (for registration, core features)
  • Legitimate interests (e.g. improving our Service, fraud prevention)
  • Legal obligations (e.g. fiscal, audits, compliance)

4. Sharing and International Transfers

We may share or transfer your data with:

  • Service providers (hosting, email, payments, analytics, monitoring)
  • Infrastructure providers (Vercel, Cloudflare)
  • Authorities, if required by law or court order
  • Corporate transactions (mergers, acquisitions) under confidentiality

Because we operate internationally, some of these transfers cross national borders. We take steps (such as contracts and safeguards) so that your data enjoys protection consistent with Peru's law. Note: transfers to jurisdictions without adequate protection require special safeguards.

5. Data Retention

We store personal data only as long as necessary for the purposes described. After that, we will delete or anonymize it.

  • Billing / financial records: retained per Peru's legal and tax requirements
  • Usage / logs: retained for a limited period (for analytics, abuse detection)
  • Inactive accounts may be purged after extended inactivity (subject to notice)

6. Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, alteration, or destruction. These include encryption (TLS/HTTPS), secure access controls, monitoring, and audits.

7. Your Rights

You have the following rights (where applicable under Peru's law and other relevant jurisdictions):

  • Right of access to your personal data
  • Right to rectify / update data
  • Right to deletion / erasure
  • Right to object / restrict processing
  • Right to revoke consent
  • Right to data portability (for certain data)
  • Right against automated decision-making, where applicable

To exercise your rights, contact us at julio@voxifly.com with appropriate identification and specify which right you want to exercise.

If we do not fulfill your request, you may file a complaint with the Peruvian supervisory authority for data protection (ANPD).

8. Breach Notification

Under emerging regulations (e.g. Peru's updates effective 2025), we commit to notifying affected users and the ANPD within 48 hours of becoming aware of data breaches that impact personal data security.

9. Cookies & Tracking

This Privacy Policy is complemented by our Cookie Policy, which describes in detail the cookies and technologies we use.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be posted with a new "Last updated" date. If material changes are made, we may notify you by email or on the Service.

11. Contact Info

If you have any questions or requests, please reach out to us at julio@voxifly.com.