← Back to Voxo

Privacy Notice

Last updated: 2026

1. Who we are

Voxo is operated by David Runacres, an individual sole trader based in the United Kingdom. David Runacres acts as the data controller for personal data processed through Voxo.

2. Personal data we collect

  • Account data — email address, display name, and authentication identifiers (including identifiers from Google sign-in if you use it).
  • Branding data — your chosen join-page slug, brand name, logo image, and colors (Pro plan only).
  • Meeting metadata — meeting codes you create, host/guest names, scheduled times, audio-only flag, expiry timestamps. We do not record meeting audio or video.
  • Support and communications — messages you send us, including invite emails sent to your guests.
  • Usage and device data — IP address, browser type, device identifiers, timestamps, and basic telemetry needed to operate the service securely.
  • Subscription and entitlement data — your plan, billing period, and a Stripe customer reference returned by our payment provider.

Audio and video streams are transmitted peer-to-peer via WebRTC between participants and are not stored by Voxo.

3. Why we use it and legal basis

  • Process payments and manage subscriptions — performance of our contract and compliance with legal obligations (we share data with Stripe, see section 4).
  • Security, fraud and abuse prevention — our legitimate interests in keeping the service safe.
  • Customer support — performance of our contract and our legitimate interests in responding to you.
  • Product improvement and aggregated analytics — our legitimate interests in improving Voxo.
  • Legal compliance — to comply with applicable laws and respond to lawful requests.

4. Who we share it with

  • Stripe — our payment processor. Stripe processes payments, manages subscriptions, calculates and remits taxes, issues receipts, and handles refunds and chargebacks. See Stripe's Privacy Policy.
  • Service providers and subprocessors — including our hosting and database provider (Supabase / Cloudflare), our email delivery provider, and Google for sign-in if you use it.
  • Professional advisers — legal, accounting, and tax advisers under duties of confidence.
  • Authorities — where required by law, court order, or to protect our rights or those of others.

We do not sell your personal data.

5. International transfers

Some of our service providers are located outside the UK and EEA. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or adequacy decisions.

6. Retention

We keep personal data only as long as we need it for the purposes above. Account and branding data are kept while your account is active and for a reasonable period after closure. Meeting metadata is automatically deleted after the meeting expires (typically within 24 hours of creation). Billing records held by Stripe are kept by Stripe in accordance with their policies and applicable tax law. We will delete or anonymise data when it is no longer needed.

7. Your rights

Subject to applicable law (including UK GDPR / EU GDPR), you have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate data;
  • request deletion ("right to be forgotten");
  • request restriction of, or object to, certain processing;
  • request portability of data you provided;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.

We aim to respond to rights requests within one month. To exercise any of these rights, contact David Runacres via the support contact on your Voxo dashboard.

8. Security

We use appropriate technical and organisational measures to protect your personal data, including TLS encryption in transit, encrypted storage, access controls, row-level security in our database, and signed webhooks. Audio and video streams are end-to-end between participants where the network allows.

9. Cookies and similar technologies

We use a small number of strictly necessary cookies and similar technologies (for example, to keep you signed in and to remember your preferences). We do not currently use third-party advertising cookies. If we add analytics or marketing cookies in the future, we will update this notice and ask for your consent where required.

10. Changes to this notice

We may update this notice from time to time. Material changes will be communicated through the service or by email.

11. Contact

For privacy questions or to exercise your rights, contact David Runacres via the support contact on your Voxo dashboard.