Privacy Policy

Effective date: April 12, 2026

Vroxy (“we”, “us”, “our”) operates the Vroxy application and website. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

Account information: When you create an account, we collect your email address and display name. You may optionally provide a username, bio, profile photo, phone number, and date of birth.

Guest users: If you use Vroxy as a guest, we assign a temporary identifier. No personal information is required for guest access.

Messages and content: We store audio messages, text messages, reactions, and files you share in rooms. Audio messages may be automatically transcribed.

Device information: We collect basic device information (browser type, operating system) to provide and improve the Service.

IP addresses: We record IP addresses associated with sign-ins and messages for abuse prevention. IP addresses are retained for 30 days and then automatically deleted.

Push notification tokens: If you enable push notifications, we store your device token to deliver notifications.

2. How We Use Your Information

• To provide, maintain, and improve the Service.
• To send you notifications about activity in your rooms.
• To prevent abuse, fraud, and violations of our Terms of Service.
• To generate transcriptions of audio messages using third-party speech recognition services.
• To generate text-to-speech audio using third-party TTS services.

3. Third-Party Services

We use the following categories of third-party services:

• Speech recognition: Audio may be sent to third-party providers (such as OpenAI or Groq) for transcription.
• Text-to-speech: Text messages may be sent to third-party providers to generate audio.
• AI language models: Messages in agent-enabled rooms may be sent to third-party AI providers to generate responses.
• Cloud storage: Files and audio are stored on Amazon S3.
• Push notifications: Firebase Cloud Messaging (FCM) for mobile push notifications.

4. Data Retention

• Account data is retained until you delete your account.
• Messages are retained until deleted by the sender or a room admin.
• IP addresses are retained for 30 days.
• Guest account data may be automatically purged after a period of inactivity.

5. Account Deletion

You may delete your account at any time through the account settings page or by contacting us at /support. When you delete your account:

• Your profile information is removed.
• Your messages remain in rooms but are disassociated from your identity.
• The deletion is processed immediately.

6. Data Security

We implement reasonable security measures to protect your information, including encryption of sensitive data in transit and at rest. However, no method of transmission over the Internet is 100% secure.

7. Children’s Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction or deletion of your personal information.
• Object to or restrict processing of your personal information.
• Request a copy of your data in a portable format.

To exercise these rights, contact us at /support.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service.

10. Contact

If you have questions about this Privacy Policy, please contact us at /support.