Legal

Privacy Policy

Effective date: 25 May 2026

01

Who We Are

VoxMachine is a B2B content generation platform operated by Virtara (Pty) Ltd, a company registered in South Africa. We help small and medium-sized businesses create brand-aligned marketing content using artificial intelligence.

This Privacy Policy explains how we collect, use, store, and share your personal information when you use VoxMachine. It applies to all users of our platform, including free trial users and paying subscribers.

By creating an account or using VoxMachine, you agree to the practices described in this policy. If you do not agree, please do not use our services.

02

Information We Collect

Account information

When you sign up, we collect your email address and, where provided, your name and company name. This is used to create and manage your account.

Brand and business information

To generate content, you provide us with information about your business: your brand voice, tone preferences, target audience, services, pricing, and any documents you upload to the knowledge base. This information is stored securely and used solely to generate content on your behalf.

Generated content

All content created within VoxMachine, including drafts, approved content, and scheduled posts, is stored in association with your account.

Usage data

We collect information about how you interact with the platform, including pages visited, features used, and content generation activity. This helps us improve the product and enforce fair usage limits.

Payment information

Billing is handled through Paystack. We do not store your card details. We receive confirmation of successful payments and your subscription status.

03

Third-Party Services

VoxMachine integrates with the following third-party services to deliver its features. By using VoxMachine, you acknowledge that your data may be processed by these services in accordance with their own privacy policies.

Anthropic (Claude AI)

We use the Claude API by Anthropic to generate marketing content. Your brand information, uploaded documents, and content briefs are sent to Anthropic's API to produce generated output. Anthropic's data processing is governed by their privacy policy at anthropic.com/privacy.

OpenAI

We use OpenAI's embedding models to power the knowledge base retrieval system. Excerpts from documents you upload may be sent to OpenAI to generate vector embeddings. OpenAI's data processing is governed by their privacy policy at openai.com/policies/privacy-policy.

Supabase

Your account data, brand information, knowledge base documents, and generated content are stored in a Supabase-hosted database. Supabase is GDPR-compliant and stores data in AWS data centres. See supabase.com/privacy for details.

Buffer

VoxMachine integrates with Buffer to allow you to publish or schedule approved content directly to your social media accounts. When you connect Buffer, we request OAuth access to your Buffer account. This access is used only to post content you explicitly approve and schedule within VoxMachine. We store your Buffer access token securely to fulfil scheduled posts. We do not access, read, or store data from your social media accounts beyond what is necessary to post content on your behalf. You may disconnect Buffer at any time from your account settings, which will revoke VoxMachine's access to your Buffer account.

Paystack

Subscription billing is processed by Paystack. When you subscribe, you interact directly with Paystack's hosted payment interface. We receive payment confirmation and subscription status. We do not store payment card information.

04

How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the VoxMachine platform
  • Generate marketing content on your behalf using AI models
  • Retrieve relevant context from your knowledge base to improve content quality
  • Publish or schedule content to connected social media accounts via Buffer
  • Process payments and manage your subscription
  • Send transactional emails such as password resets and billing notifications
  • Enforce our Terms of Service and fair usage limits
  • Respond to support requests and inquiries
  • Analyse usage trends to improve the product

We do not sell your personal information or your business data to third parties. We do not use your content to train AI models.

05

Data Sharing

We share your data only in the following circumstances:

  • With the third-party service providers listed in Section 03, strictly as necessary to deliver the service
  • With Buffer, when you have connected your Buffer account and approved content for publishing
  • When required by South African law, court order, or regulatory authority
  • In the event of a business acquisition or merger, in which case users will be notified

We do not share your brand data, business information, or generated content with any party for advertising or marketing purposes.

06

Data Retention

We retain your account data and content for as long as your account is active. If you close your account, we will delete your personal information and content within 30 days, except where retention is required by law.

Knowledge base documents you delete are removed immediately. Generated content you delete is removed within 30 days.

Buffer access tokens are deleted immediately when you disconnect Buffer from your account settings.

07

Data Security

We implement appropriate technical and organisational measures to protect your data. These include encrypted data storage, secure API key management, row-level security on all tenant data, and HTTPS-only access.

All data is logically separated by tenant. One account cannot access another's data.

Despite these measures, no system is completely secure. We encourage you to use a strong, unique password and to notify us immediately if you suspect unauthorised access to your account.

08

Your Rights

Under the Protection of Personal Information Act (POPIA) and applicable data protection law, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal information
  • Object to the processing of your information
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email us at privacy@voxmachine.co.za. We will respond within 30 days.

09

Cookies

VoxMachine uses cookies and similar technologies to maintain your login session and remember your preferences. We do not use tracking cookies for advertising purposes.

Session cookies are deleted when you close your browser. Authentication cookies persist until you sign out or your session expires.

10

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and display a notice within the platform. The updated policy will take effect 14 days after notification.

Continued use of VoxMachine after the effective date constitutes acceptance of the updated policy.

11

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Virtara (Pty) Ltd / VoxMachine

South Africa

privacy@voxmachine.co.za