VoxyThis website
This website automatically uses Google Analytics on eligible public pages to measure page views, add-bot intent, voice-sample interactions and interface choices, without a consent prompt. When you arrive on a public page through the exact reviewed campaign label, the site also automatically connects that landing with subsequent add-bot clicks in this tab for up to 30 minutes, with at most one landing and one add-bot intent per context; earlier arrivals and clicks are not replayed. The site may also record which known website or link label sent you here (for example producthunt, tinhte or google) as a fixed label, never the full address, and adds that label to the /invite link within the same 30-minute context. It is not proof of paid clicks, installations or purchases. The short install link /invite is answered by Cloudflare, which also sends Google Analytics one anonymous count from its server with only a fixed source label (our site, a reviewed share label such as producthunt or youtube, the known website that sent you, derived from its domain name only, direct or other) and a random one-time identifier: no cookie, IP address, browser details, the link itself or the address of the page that sent you. This count honors DNT/GPC and skips link-preview bots, but cannot see denials saved in your browser. Saved denials (all analytics or campaign analysis), DNT/GPC and unavailable storage prevent collection; checkout, error pages and previews do not load analytics. To opt out, enable DNT or GPC in your browser. Google may process IP addresses, browser information and host-only voxy_public cookies. The site never saves a permission on your behalf; campaign context exists only in tab memory and is removed on expiry, denial or page exit. We do not send raw URLs, query/fragment, referrers, advertising click IDs, Discord content, server/user IDs, orders or payment data. There is no advertising personalization; Google Signals and enhanced conversions are disabled. There is no Discord-install/activity or payment reporting to Google, no GA–Ads link or conversion import. Not being measured does not affect bot use or checkout. Opting out stops future collection; data already sent is not automatically deleted. Functional preferences voxy.locale (VI/EN) and voxy.theme (System/Light/Dark) remain device-only until you clear site data, are not sent to the API and contain no order data. Cloudflare serves the site and may process network requests and security metadata.
Private checkout
An opaque access token arrives in the URL fragment. This is a bearer link: anyone with the link can view the corresponding order details, not access an account or every order in the server. The page removes the token from the visible URL before requesting the order from the API with an Authorization header. Keep checkout links private; do not share them or send them to support. The page never stores access tokens, order data or credentials in localStorage or cookies. The capability has a 30-minute expiry; expiry is not deletion of the order record.
Payment QR image
A pending order can display a bank-transfer QR image hosted by a third-party payment provider. That request contains bank account, amount and transfer memo, not your private checkout token. It is sent without a referrer. The home page shows a Product Hunt badge loaded directly from Product Hunt (without a referrer); like any image request, Product Hunt receives your IP address and browser details.
Service data
Voxy processes Discord server/user identifiers, settings, usage and order/payment data for service operation and reconciliation. Text selected for speech is transiently processed and sent to a third-party speech synthesis provider; To fix errors, Voxy temporarily keeps messages from the channel it is reading (with the text it read and the outcome) for up to 14 days, then deletes them automatically; a server's records are deleted as soon as Voxy leaves that server. Do not submit sensitive content. Temporary audio files are cleaned up during normal processing, but cleanup is not guaranteed after a process crash or force-kill. General error logs sometimes contain provider error details; there is no guarantee that all logs are free of input text. To find and fix problems, technical error reports from the bot and API (error type, error code, the error message with Discord IDs, quoted text, links and numbers removed, code location, version, number of occurrences and number of affected servers) are sent to PostHog, an error-tracking service that stores data in the EU; these reports contain no message content and no server, channel or user IDs. Cloudflare, Discord and third-party speech and payment providers process relevant data under their own policies. While a reading session runs, Voxy stores the session’s server, voice channel and chat channel IDs (no message content) so it can reconnect within 30 minutes if Voxy is interrupted; the record is deleted on /leave, when the bot is disconnected from the room, when the room is gone or after that window. Voxy also keeps, per day, how many characters and credits each member used and in which voice (no message content) for the /dashboard command; everyone in the server can see that board. The pronunciation dictionary (/dictionary) and personal voices (/myvoice) are kept until removed or changed. /dashboard statistics, the dictionary and personal voices are not deleted automatically when Voxy leaves a server; email to request deletion. When you send feedback with /feedback, Voxy stores what you wrote with the server, channel and user IDs and technical details (bot state, error code; no chat messages) to fix problems and improve the service; feedback is deleted 180 days after it was last reviewed (it is kept until then even if Voxy leaves the server), and you can email to have it deleted sooner.
Retention and data requests
Order, payment and credit records are kept for public service operation and reconciliation; retention receives periodic review against service purposes, reconciliation needs and applicable legal obligations. Server settings, /dashboard statistics, the billing database and usage JSONL logs currently have no automatic fixed-day purge. The 12-month credit expiry is not record deletion. Email access, correction or deletion requests to khanhduyvt0101@gmail.com for manual review and handling, including reconciliation needs and applicable legal obligations. There is no user self-service deletion tool and no promise of automatic deletion or deletion within a fixed number of days.
Website error reports
When the website hits a JavaScript error (including the checkout page), your browser sends an error report to PostHog (EU-hosted) so we can fix it. A report contains the error type, the error message with long digit runs (such as Discord server/user IDs or order codes), token-like strings and URL query/fragment removed, file names and line numbers, the page path without query/fragment, browser, operating system, screen size and the website version. No page views, clicks, session recordings, referrers, what you type, checkout access tokens or order data are sent; no cookies or browser storage are used, and each page load gets a new random identifier that is not linked to you. PostHog may process the IP address when receiving the request; the project is set to discard IP addresses. Error reports are separate from analytics and needed to keep the site and checkout working (legitimate interest), so an analytics denial does not turn them off; DNT/GPC does. Reports are kept for PostHog's retention period (currently up to 1 year) and then deleted automatically. Bot and API errors go to the same PostHog project with only the error type and a scrubbed message, never Discord content or server/user IDs.
