Privacy Notice

Who is responsible

Kostyantyn Savchenko, trading as VoxiGO in Germany, is the controller for account administration, website security, billing and customer communication. Email support@usevoxigo.com for privacy questions and requests. The provider address is in the Legal Notice linked below.

For personal information that a salon supplies about its clients or staff, the salon determines the purposes of its marketing. VoxiGO processes that material to perform the salon's instructions where it acts as processor. A data-processing agreement and the applicable safeguards must be in place before such processing, including in staging. While this review is incomplete, use synthetic test material instead of identifiable salon client or staff media. Contact your salon about its own marketing purposes; we will assist with requests concerning data we hold.

• Legal Notice and provider contact details

Information, purposes and legal bases

Account information includes your email, name, Google sign-in identifier, salon membership and security settings. We use it to provide requested access, manage the business relationship and prevent abuse. The legal bases are steps toward or performance of a contract (Article 6(1)(b) GDPR) where you are the contracting person, and legitimate interests (Article 6(1)(f)) in secure service delivery and communication with a business's representatives otherwise.

Salon profiles, links, instructions, uploaded images and videos, captions, plans, approvals and support messages are used to carry out the requested content workflow. Media may show identifiable staff or clients; provide it only where your business has an appropriate basis and permissions. Terms and business-purchase records identify the account, document version, acceptance time and Checkout session to evidence an order.

Billing information includes customer and subscription identifiers, package, payment status and the business details you provide. Stripe handles card entry and payment processing. VoxiGO does not receive your full card number. Contract performance and legal accounting obligations (Article 6(1)(c)) provide the bases for the applicable billing processing.

Technical information can include IP address, user agent, request timing, security events and operational logs. It supports delivery, troubleshooting and protection against unauthorised access; our interest is operating a reliable, secure service. Our own link-click measurement uses a short-lived pseudonymous value derived from network and browser information to suppress repeated counts. It is not anonymous merely because it is hashed, and it is not used to identify a visitor across sites.

Optional storage of download marks is used only if you enable it in Cookie settings. Its basis is your consent (Article 6(1)(a)); you can switch it off and remove stored marks there. Necessary sign-in storage is used to provide the session you request. Separate integration and publishing permissions are explained when you connect them. We do not treat agreement to Business Terms as marketing or optional-storage consent.

Starting a Guided Capture upload stores a temporary original and account/salon/request/upload identifiers in this browser for interrupted-upload recovery. The application attempts to remove it after verified receipt; failed transfers or cleanup can leave it until retry, explicit discard or browser site-data removal. Enabling device notifications separately creates a push subscription: we process its endpoint and keys to deliver the updates you request, using the contract or legitimate-interest service-delivery bases described above. The browser's notification permission is separate from optional workspace-storage consent. See Cookie Settings for controls and storage limits.

Optional public website analytics

If enabled and only after you choose Accept analytics, VoxiGO records public home, registration and sign-in page views, predefined button clicks and scroll milestones, the referring domain, non-personal UTM source/medium/campaign codes, a broad device category, server timestamps and random browser/visit identifiers. We use these pseudonymous records to understand acquisition and improve the website under your consent (Article 6(1)(a) GDPR). Unique browsers estimate browsers, not people; registration-page views are not confirmed accounts or purchases. No collection is inferred from continued browsing.

This analytics event store excludes IP addresses, full URLs or query strings, referrer paths, form contents, emails, account/salon IDs, advertising click IDs, precise location and session recordings. Campaign links must use non-personal codes. Hosting/security providers still process technical requests under the separate practices described above. Events are stored in Supabase and accessible only to authorised internal operators; this feature sends no events to advertising networks.

Event records are eligible for deletion after 90 days and removed by a daily retention job, allowing up to one additional day. Browser identifiers expire after 90 days; visits are fixed 30-minute windows; the necessary privacy-choice cookie lasts 180 days. You can accept or reject equally easily and withdraw through Privacy choices on the public website or Cookie Settings. Global Privacy Control and Do Not Track disable optional website analytics. Withdrawal stops future collection and clears optional identifiers. While the current identifier is available, Delete this browser’s analytics removes retained matching records and turns collection off. After identifiers are cleared or expire, locating earlier pseudonymous records may not be possible; they still expire through retention. Contact support@usevoxigo.com for other requests.

• Cookie Settings and privacy choices

Optional launch waitlist

We record your verified account email, the launch-email consent text and version, its date, withdrawal and notification status, and audit records. Joining requires a separate unchecked opt-in; account registration is not consent. We use this information to send one launch email on your request under Article 6(1)(a) GDPR. No general newsletter or subscription is created. You can withdraw in your workspace or through the email unsubscribe link without signing in; withdrawal stops future dispatch, but cannot recall an email already accepted by the delivery provider.

Brevo processes the launch-email delivery when enabled. Entries and consent records are reviewed for deletion when the launch notification purpose ends or on an applicable deletion request. We do not treat an old opt-in as permission for unrelated marketing. Invitations expire after six months unless you renew your choice.

Instagram and information from other sources

If you connect a professional Instagram account, the integration can process your account identifier, authorised access tokens, publication status and the analytics or message metadata permitted by the selected integration. We also use the public salon information and materials you provide or ask us to research to prepare your content. Account sign-in information comes from Google or Supabase, payment updates from Stripe and authorised Instagram information from Meta.

Instagram settings let the salon owner review permissions and disconnect or request deletion of Instagram data. Disconnecting stops future use of the integration but does not remove posts already published on Instagram. The separate deletion instructions describe what is removed and what remains.

• Instagram deletion instructions

Who receives information

Authorised VoxiGO operators access the information needed for support, content production and administration. Service providers handle information needed for their role: Vercel (hosting and request delivery), Supabase (database, authentication and private media), one.com (sign-in email delivery and the support mailbox), Cloudflare Turnstile (bot protection), and Google (optional sign-in). Stripe handles payments when commercial ordering is available, Meta/Instagram handles an integration you connect, and Brevo handles the separate launch email only when that delivery is enabled. Encrypted recovery snapshots may also be copied to the operator's Google Drive; encryption does not remove the need to review the relevant processor and transfer arrangements.

External creative or AI tools are not automatically authorised to receive all salon media by signing in or accepting these Terms. Before identifiable material is sent to another production provider, its purpose, data-processing arrangements, access and retention must be established. The provider review remains a launch requirement; this notice does not claim that every contract or transfer safeguard has already been verified.

We may disclose information where legally required or necessary to protect rights and investigate abuse. The current application does not implement sale of personal information or advertising-based sharing, advertising pixels or cross-site advertising profiles. External sites and platforms apply their own notices when you visit or use them.

Processing outside the European Economic Area

VoxiGO uses international providers. The public production Supabase database is hosted in the United States, in North Virginia (us-east-1); other providers may also process data outside the EEA. Account information is part of this processing. An applicable transfer mechanism, including any relevant adequacy decision or contractual safeguards and supplementary measures, is required for each relevant transfer, including during pre-launch. Do not infer an EU-only hosting promise from our German address. Contact us for the applicable safeguards and a copy or explanation of them; the provider and transfer review is being documented and this notice does not certify that it is complete.

How long information is kept

Account and salon workflow information is kept while needed for the requested service. After an account or service ends, retention depends on unresolved support or rights issues, legal claims and applicable accounting duties. Billing, contract and acceptance records may need to be retained separately for those duties; cancelling a subscription does not erase them automatically. We explain any applicable exception when handling an erasure request.

The application schedules removal of link-count deduplication records older than 24 hours, Instagram message metadata older than 30 days and client notifications older than 90 days. These are cleanup thresholds, not a guarantee that every copy or provider log disappears at that exact time. Operational failures can delay a cleanup and must be investigated.

Supabase provides scheduled database recovery copies; these do not include the media objects stored through its Storage API. Separate encrypted recovery copies may also exist. Production recovery automation, independent cloud-copy completion and the applicable retention controls are being verified; the staging rotation settings are not represented as a verified production guarantee. A recovery copy can contain information later removed from the active service until that copy expires or is replaced. If a backup is restored, applicable deletions need to be reapplied. Retention and erasure procedures must cover current account information as well as future media and commercial records; no immediate, universal deletion deadline is promised.

Your choices and rights

Depending on the applicable basis and law, you may request access and a copy, correction, erasure, restriction, portability or objection to processing, and withdraw consent for future optional processing. To object to processing based on legitimate interests, explain the situation relevant to your request. You can send requests to support@usevoxigo.com; use your account address where possible. We may request proportionate verification, but do not send identity documents unless a specific secure verification method is agreed.

We respond to GDPR rights requests within one month, or explain a lawful extension and its reasons within that period. You may complain to a supervisory authority, including the Bavarian State Office for Data Protection Supervision (BayLDA), or the authority where you live or work. Rights and exceptions vary by law; if US state privacy rights apply to your request, we will assess them without requiring you to buy a service or waive a GDPR right.

You do not have to accept optional browser storage to sign in or download content. You can refuse optional integrations. Account details needed for authentication and ordered services must be supplied for those functions to work. Content review involves the salon and VoxiGO operators. Subscription access follows payment-status updates from Stripe; contact support if an access or billing decision is wrong. We do not use customer profiling to decide eligibility for credit, employment or medical services. Payment providers may carry out their own checks under their notices.

• Cookie settings
• BayLDA

US privacy requests

US privacy laws differ by state, the type of relationship and the circumstances of processing. Some laws exclude certain business-context information or apply only above specified thresholds. This notice does not claim that every state consumer privacy law applies to VoxiGO, and being a business customer does not waive rights that do apply.

Where applicable, rights can include confirming processing, access, correction, deletion, a portable copy, and opting out of sale, targeted advertising or certain consequential profiling. The current application does not sell personal information or share it for cross-context behavioral advertising, and does not use such consequential profiling. We do not ask you to waive a privacy right for access or treat you unlawfully differently for exercising one.

Email support@usevoxigo.com with your request, account address and state of residence if relevant to the right requested. An authorized agent may contact us; we may verify the person's identity and the agent's authority using proportionate information. We assess exemptions, third-party rights and applicable deadlines and explain any denial. If a state law provides an appeal, reply to the decision with 'Privacy appeal'; we will review it under that law and explain the applicable regulator complaint route if the appeal is denied. The GDPR request process above also remains available where applicable.

Browser signals and third-party tracking

Global Privacy Control and legacy Do Not Track signals disable optional public website analytics. They do not change necessary sign-in, security, or requested workspace processing. VoxiGO does not currently sell information or run cross-site targeted advertising, whether or not a signal is present. Cookie Settings provides separate controls for workspace preferences and website analytics. These controls do not change processing on another provider's website.

Hosting, authentication and security providers receive the technical information needed for their functions. Google, Stripe and Meta may recognize a user across their own services under their notices when the user signs in, pays or connects an account. VoxiGO does not authorize those integrations for its own cross-site advertising profiles. Material changes involving sale, advertising or new tracking require updated disclosures and applicable choices before that processing starts.

• Cookie Settings

Children and sensitive information

VoxiGO accounts are for adults acting for businesses. The service is not directed to children under 13 and does not knowingly collect account information directly from them. Contact privacy support if you believe a child has supplied information directly, so we can investigate and remove it where required. A salon must separately establish the permissions needed for any material depicting a minor; a parent's upload permission does not authorize every subsequent use.

Do not upload medical or patient records, government identity documents, full card details, or material for biometric identification. A photograph is not treated as anonymous simply because it contains no written name. Pre-launch and staging media evaluation must use synthetic material without identifiable salon clients or staff while the data-processing review is incomplete.

Security and notice updates

The service uses access controls, private media delivery and other technical protections, but no online service can guarantee absolute security. Internal administrator access and audit records are handled for secure operations, not advertising. We update the effective date when this notice changes. For material changes affecting account holders, we provide a notice in the service or by account email before the changed processing where required; we request new consent when the law requires it. Revising a notice is not permission to use previously collected information for an incompatible new purpose. Previous commercial commitments are not replaced by changing this page.