Last updated: August 10, 2026
At Voxluma, we take your privacy seriously. This policy explains what information we collect, how we use it, and your rights regarding your data.
When you use Voxluma, we collect the following information:
Voxluma offers "Continue with Google" as a convenient, secure way to create and access your account. If you choose it, you authenticate directly with Google using Google's standard, non-sensitive sign-in scopes. This section describes exactly what Google user data we access, how we use it, whether we share it, how we protect it, and how it is retained and deleted.
1. Data we access. When you sign in with Google, Google shares a limited set of basic profile information from your Google account with us:
We request only these basic, non-sensitive sign-in scopes (your email address and basic profile). We do not request or receive access to any other Google data — including Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos, or any other Google service — and we can never read, send, delete, or modify anything in your Google account.
2. How we use this data. We use the information we receive from Google solely to:
We do not use Google user data for advertising, and we do not use it to build profiles for any purpose unrelated to providing Voxluma.
3. How we share this data. We do not sell your Google user data, and we do not share it with third parties for their own purposes. We share it only with the service providers that operate Voxluma on our behalf, strictly to run the service: Supabase (stores your account and profile) and Cloudflare (hosts and secures our service). These providers are contractually bound to protect your data and may not use it for any other purpose. See "Data sharing" below for our full list of providers.
4. How we store and protect this data. Google user data is transmitted only over encrypted connections (HTTPS/TLS) and stored in our Supabase database, which encrypts data at rest. Access is restricted to authorised Voxluma systems and personnel who need it to operate the service, and is protected by authentication and access controls. We never receive or store your Google password — authentication is handled entirely by Google. See "Data security" below for more detail.
5. How long we keep it, and how to delete it. We retain your Google account information for as long as your Voxluma account is active. If you cancel your account, this data is deleted within 90 days. You can request immediate deletion of your account and all associated data at any time via our support form. You can also revoke Voxluma's access to your Google account at any time from your Google Account permissions page.
Voxluma's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Your conversations with Voxluma's AI agents are processed by Anthropic's Claude API. Anthropic's privacy policy applies to how your prompts are handled. We do not use your conversations to train AI models without your explicit consent.
Voxluma saves your recent chat history locally on your device — in your browser's storage — so you don't lose your work if you refresh the page or sign back in. This history stays on your device and is not sent to or stored on our servers. It is automatically removed after 7 days of inactivity.
Because this history lives on your device, it does not follow you across devices: if you sign in from a different browser or device, your previous chats will not appear there. Clearing your browser data will also remove it. To send your messages to the AI and generate a response, the content of a message is transmitted securely (over HTTPS) to Anthropic's Claude API at the time you send it, as described above.
Clara is our premium document assistant, available on paid plans. When you use Clara, your uploaded file (a PDF or Word document) is read in your browser to extract its text — the file itself is never uploaded to or stored on our servers. Only the extracted text is transmitted securely (over HTTPS) to Anthropic's Claude API to generate Clara's analysis and answer your follow-up questions.
We do not store your documents. Neither the file nor its text is saved in our database or on our servers, and Clara's analysis and conversation exist only in your browser for the duration of your session. They clear when you leave the page, upload a new document, choose "Clear & delete," or close the tab, and nothing is written to your device's long-term storage. If you'd like to keep Clara's summary, you can download it before you leave. As with our other agents, the document text is processed by Anthropic's Claude API and is not used to train AI models. Clara helps you understand documents; she is not a lawyer and does not provide legal advice.
We do not sell your personal data. We share data only with:
We take reasonable technical and organisational measures to protect your data — including all data received from Google. Data is transmitted over encrypted connections (HTTPS/TLS) and stored with our infrastructure providers, which encrypt data at rest. Access to personal data is restricted to the systems and authorised personnel that need it to operate the service, and is protected by authentication and access controls. Payment card details are handled entirely by Stripe and never stored on our systems.
We retain your data for as long as your account is active. If you cancel your subscription or account, your data — including any information received from Google — is deleted within 90 days. You can request immediate deletion of your account and all associated data at any time by contacting us via our support form; we action verified deletion requests promptly.
Voxluma uses essential cookies only — for authentication and session management. We do not use advertising or tracking cookies.
We collect aggregate, anonymous statistics about visits to our public website — such as page views, which pages are viewed, the general source of a visit (for example a search engine or a link from another site), and an approximate country. This is done without cookies and without storing your IP address: your IP address and browser type are combined with a value that changes every day and converted into a one-way fingerprint that cannot be reversed, cannot be traced back to you, and cannot be used to follow you from one day to the next. We use these figures only to understand overall traffic to our site. This information is never sold or shared, and is not used to identify you.
For any privacy-related questions, contact us via our support form.