Privacy Policy

1. Who we are

Voxly (“Voxly”, “we”, “us”, or “our”) is an AI-assisted writing and publishing tool for X (formerly Twitter), available at voxly.ink. Voxly is operated by Mykyta Verba, an individual entrepreneur (FOP) registered in Ukraine, Odesa region, city of Odesa. For the purposes of applicable data protection law, we are the controller of your personal data.

If you have any questions about this policy or your data, contact us at nikita@voxly.ink.

2. Information we collect

Account information

When you sign in with Google or X, we receive basic profile information from that provider — your name, email address, profile image, and (for X) your X username and account identifier. We use this to create and identify your account.

X authorization tokens

If you connect your X account, X provides us with OAuth access and refresh tokens. We store these so Voxly can read and publish to X on your behalf and at your direction. You can revoke this access at any time from your X account settings or by disconnecting X in Voxly’s settings.

Content you provide

We store the content you create and submit in Voxly, including post drafts, the ideas and references you enter (such as links, quoted posts, and snippets), images you upload, and the messages you send to the in-app AI assistant.

Your X posts and voice profile

To help the writer agent match your voice, we retrieve a sample of your recent posts from X via the X API and use them to generate a “voice profile” — a derived description of your writing style. We store both the retrieved posts and the resulting voice profile in association with your account.

Usage and billing data

We record how you use billable features (for example, the number and cost of AI generations and publishes) to enforce plan limits and operate billing. If you subscribe to a paid plan, payments are processed by our payment provider, Creem — we do not receive or store your full payment card details.

Waitlist

If you join our waitlist, we store the email address you provide so we can contact you about access and product updates.

Technical data

Like most online services, our hosting and infrastructure providers automatically process technical data such as your IP address, device and browser type, and log information, for security, debugging, and reliability.

3. How we use your data

• To provide, operate, and maintain Voxly and its features.
• To generate drafts, match your voice, and publish posts to X at your direction.
• To authenticate you and keep your account secure.
• To enforce plan limits, process payments, and prevent abuse.
• To communicate with you about your account, support requests, and important service or policy changes.
• To comply with our legal obligations.

Legal bases

Where data protection law requires a legal basis, we rely on: performance of our contract with you (to provide the service you sign up for), your consent (for example, when you connect your X account or join the waitlist), our legitimate interests (to secure, improve, and operate Voxly), and legal obligations (such as tax and accounting).

4. AI processing

Voxly’s core feature is generating and refining posts with AI. To do this, the content you submit — your ideas, references, drafts, voice profile, and chat messages — is sent to third-party AI model providers through the Vercel AI Gateway, and (when you use web search) to a search provider. These providers process your content only to return a result to us. We work with providers that, to our knowledge, do not use content submitted through the gateway to train their models. AI output can be inaccurate and you remain responsible for reviewing anything before you publish it.

5. How we share your data

We do not sell your personal data. We share it only with the service providers (sub-processors) that help us run Voxly, and only as needed:

• Supabase — database, authentication, and file storage hosting.
• Vercel — application hosting and the AI Gateway that routes requests to AI providers.
• AI model providers (e.g. Anthropic) and a web-search provider (e.g. Perplexity) — accessed via the AI Gateway to generate and refine content.
• X (Twitter) — to read your posts and publish on your behalf via the X API.
• Google — when you choose to sign in with Google.
• Resend — to send transactional email (for example, waitlist confirmations).
• Creem — our payment provider and merchant of record, to process subscriptions and payments.

We may also disclose data where required by law, to enforce our terms, or to protect the rights, safety, and security of Voxly and its users. If Voxly is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction.

6. Share-by-link

Voxly lets you create a public read-only link to an individual post. When you enable a share link for a post, anyone who has that link can view that post without signing in. The post stays private until you turn sharing on, and you can disable the link at any time.

7. Data retention

We keep your personal data for as long as your account is active or as needed to provide the service. If you delete your account or ask us to delete your data, we will delete or anonymize it within a reasonable period, except where we must retain certain records to comply with legal obligations or resolve disputes. You can disconnect your X account at any time, which removes your stored X tokens.

8. International transfers

Voxly is operated from Ukraine, and our service providers may process data in the European Union, the United States, and other countries. Where data is transferred internationally, we rely on the safeguards offered by these providers (such as standard contractual clauses) to protect it.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent at any time. To exercise any of these rights, email us at nikita@voxly.ink. You also have the right to lodge a complaint with your local data protection authority.

10. Security

We use reasonable technical and organizational measures to protect your data, and rely on reputable infrastructure providers. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.

11. Children

Voxly is not intended for anyone under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so we can remove it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you. Your continued use of Voxly after a change means you accept the updated policy.

13. Contact

Questions, requests, or concerns about your privacy? Email us at nikita@voxly.ink.