Privacy Policy

Last updated: April 27, 2026

In summary

  • Your data stays yours and is never sold
  • We collect only what's necessary for the service
  • Your data is stored in France, securely
  • You can delete your account and data at any time

1. Who we are

Voxtya is a SaaS platform dedicated to managing the online presence of local businesses (customer reviews, websites, social media, reservations, AI search visibility). The service is operated from France and available at voxtya.com. For any question regarding the publisher, contact us at contact@voxtya.com.

2. What data we collect

As part of our service, we collect the following data:

  • Account data: Email, name, password (encrypted), profile picture.
  • Business data: Your business name, address, opening hours, photos, business category, Google Business Profile link.
  • Review data: Customer reviews fetched from Google, Facebook, TripAdvisor, and replies generated or published by you.
  • Payment data: Stripe handles your card details exclusively. Voxtya never stores your card numbers.

3. Why we collect this data

We use your data only to:

  • Provide our review management service
  • Generate automated replies to your reviews
  • Send you alerts and reports
  • Improve our service
  • Contact you for customer support
  • Handle billing

4. How long we keep your data

Your data is kept for the entire duration of your subscription, then for 3 years after your subscription ends (legal obligations). You can request deletion of your data at any time.

5. Who we share your data with

Your data is never sold to third parties. We share it only with:

  • Supabase: Database hosting (EU).
  • Vercel: Web app hosting.
  • Stripe: Secure payment processing (PCI DSS Level 1).
  • Google / Meta: Only the data needed to fetch your reviews and publish to your profiles, after your explicit authorization (OAuth).

6. Where we store your data

Your data is stored on servers located in France and the European Union. We use industry-standard security protocols (SSL/TLS encryption, regular backups, etc.).

7. Your rights

Under GDPR, you have the following rights:

  • Right of access: You can request a copy of all data we hold about you.
  • Right to rectification: You can correct any inaccurate data directly from your account.
  • Right to erasure: You can delete your account and all your data at any time from your settings.
  • Right to object: You can object to a specific processing by contacting us.
  • Right to portability: You can export a complete copy of your data at any time from your account.
  • Right to restriction: You can request restriction of processing in certain cases.

To exercise these rights, contact us at: contact@voxtya.com

8. Cookies

We use cookies essential to the service (authentication, preferences). We do not use advertising cookies. You can configure your browser to refuse cookies.

9. Security

We take your data security very seriously. Our measures include:

  • Encryption of data in transit (HTTPS) and at rest
  • Secure authentication with password hashing
  • Restricted access to personal data
  • Regular encrypted backups
  • Continuous system monitoring

10. Changes to this policy

We may modify this privacy policy. In case of significant changes, we will notify you by email at least 30 days before changes take effect.

11. Contact

For any question regarding your personal data:

You can also lodge a complaint with the CNIL (French Data Protection Authority) if you believe your rights are not respected.