Privacy Policy

Last updated: March 10, 2026

VoxArca ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

We collect information you provide directly to us:

• Account information: Email address, name, and invite code when you create an account
• Usage data: Artist searches, audience analyses, ad creatives generated, and other interactions with the platform
• Technical data: IP address, browser type, device information, and session data

We also collect data from third-party services when you use our integrations:

• Spotify artist data (public information only — no account access required)
• Meta Ads platform data when you connect your Meta account

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the VoxArca platform
• Generate audience insights, ad copy, and visual creatives for your campaigns
• Send transactional emails (login links, account notifications)
• Analyze usage patterns to improve our AI models and service quality
• Comply with legal obligations

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, we process your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the VoxArca service
• Legitimate interests: Improving our service, preventing fraud, and ensuring security
• Legal obligation: Compliance with applicable laws
• Consent: Where you have given us explicit consent (you may withdraw at any time)

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data at any time by emailing us at privacy@voxarca.com. We will delete your data within 30 days of such request, except where retention is required by law.

5. Data Sharing

We do not sell your personal data. We may share your information with:

• Service providers: Hosting (Render), database (Neon/PostgreSQL), AI processing (Anthropic), and email services — all under data processing agreements
• Third-party APIs: Spotify (read-only public artist data), Meta Ads (when you connect your account)
• Legal requirements: When required by law or to protect our rights

6. Your Rights (GDPR / CCPA)

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Request your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Restriction: Request that we restrict processing of your data
• CCPA (California): Right to know, delete, and opt-out of sale of personal information (we do not sell data)

To exercise any of these rights, contact us at privacy@voxarca.com.

7. Cookies and Tracking

We use session cookies strictly necessary for authentication and maintaining your logged-in state. We do not use third-party advertising cookies or tracking pixels. We use minimal analytics to understand platform usage (no personally identifiable information is shared with analytics services).

8. Data Security

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• Encrypted storage for sensitive credentials using AES-256-GCM
• Session-based authentication with secure, HttpOnly cookies
• Regular security reviews and dependency updates

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.

9. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for any international transfers of your personal data in accordance with applicable law.

10. Children's Privacy

VoxArca is not directed at individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our platform or sending an email. Your continued use of VoxArca after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@voxarca.com

This policy applies to the VoxArca platform accessible at releaseloop.polsia.app and any associated services.