Privacy Policy

The short version: We collect what we need to run the service and bill you correctly. Your data is encrypted in transit (HTTPS everywhere), protected by access controls, and stored on backed-up servers. We don't sell your data. We don't train external models on it. (At-rest encryption is on our roadmap — see section 4.)

1. What we collect

• Account info — email, name (optional), company (optional), use-case description (optional).
• Payment info — handled by Stripe. We see the last 4 digits + cardholder name; Stripe holds the rest.
• Session data — your conversations with Aria, the memory cards it builds, and the audit log of its actions (every tool call, every model invocation, every state transition).
• Operational data — IP address (truncated), browser type, signin timestamps, error logs.

2. How we use it

• Authenticate you (magic-link email).
• Run Aria for you — store memory cards it uses to remember you across sessions.
• Bill you correctly. Send receipts.
• Diagnose problems. Improve reliability.
• Optionally, send onboarding emails to help you get the most from the 3-month growth curve.

3. What we DON'T do

• Sell your email or data to third parties.
• Train our base models on your private code without explicit per-account opt-in.
• Surface your sessions to other customers, ever.
• Use cookies for tracking outside our own service.

4. Data storage + encryption

• Servers in Lansing, Michigan (Liquid Web). Backed up to Acronis cloud.
• At-rest encryption of memory-card summaries (AES-256 via pgcrypto) is built and being rolled out — until that rollout completes, stored data is protected by host-level and database access controls rather than at-rest encryption.
• Voice call audio (when used) is recorded through our voice provider (ElevenLabs) and the recording is stored on our backed-up servers, protected by host-level and database access controls and encrypted in transit (TLS) — at-rest encryption of audio is on our roadmap. Call transcripts are encrypted at rest (AES-256-GCM).
• HTTPS everywhere — Let's Encrypt certs renewed automatically.

5. Third parties we share with

• Stripe — payment processing. Stripe privacy.
• Resend — transactional email (sign-in links, receipts).
• Anthropic — when you escalate to premium tier, your prompt is sent to Anthropic. Our sovereign tier keeps everything in-house.
• ElevenLabs — if you use voice mode on the paid sacred line.
• Internet Archive — public-domain corpus we use for model training (never your data).

5a. Google user data (Connect Google)

If you choose to connect your Google account, Vox Ordo requests the following scopes and uses them only as described:

gmail.readonly — your agent lists and reads messages in your Gmail, at your request, to answer you and to maintain your own day context.

gmail.send — your agent sends email from your address only when you tell it to.

calendar — your agent lists your events and creates events you ask for.

Vox Ordo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the features above to you; it is never sold, never used for advertising, never used to train models, and never read by humans except with your explicit permission for support, for security investigation, or where the law requires. You can disconnect Google at any time from your workspace settings or at myaccount.google.com/permissions; on disconnect we delete stored Google tokens, and cached Google data is removed within 30 days in line with our retention policy.

6. Your rights

• Access — request a copy of your data anytime via ian@insynctech.io.
• Deletion — same email. We honor within 30 days; some operational logs retained for legal/billing reasons up to 1 year.
• Correction — edit your profile at Settings → Account.
• Portability — we'll export your memory cards + splats in JSON on request.

7. Cookies

• ac_session — your sign-in cookie. HttpOnly, Secure, 30-day TTL. Used only by us.
• No third-party tracking cookies. No analytics that ship your identity off-platform.

8. Children

Vox Ordo is for adults. We don't knowingly collect data from anyone under 13. If you believe a minor has signed up, email us and we'll delete the account.

9. International users

Our servers are in the US. By using Vox Ordo outside the US, you consent to your data being transferred to and stored on US servers. EU/UK users: we honor GDPR-equivalent rights via the access/deletion process above.

10. Changes

If we change this policy materially, we'll email you 14 days in advance. Continued use after the effective date = acceptance.

Contact

Ian Steitz · InSync Tech, Inc. · Venice, FL · ian@insynctech.io

This is a launch-version privacy policy. We'll refine it with counsel before broader scale. Last updated 2026-05-13.