Privacy Policy

Last updated: October 18, 2026

This policy explains what personal data Voyce collects, how it is used, who processes it, and the choices you have. Voyce (voyce.co.in) is operated by Rishav Raj, an individual based in Bengaluru, Karnataka, India ("Voyce", "we", "us"). For the purposes of India's Digital Personal Data Protection Act, 2023, we are the data fiduciary for your personal data.

1. What we collect

• Account: your name and email address, from the sign-in you use (email or Google). Sign-in is handled by Clerk; we never see your password.
• Profiles: the profile details you enter — names, niche, title, tone, post time and time zone, an optional website (and text we read from it), and any notes you give Voyce to write from.
• Voice samples: posts you paste, LinkedIn data exports, profile PDFs and screenshots you upload, and the writing-style summary we generate from them.
• LinkedIn connection: the access token LinkedIn issues when you connect, your LinkedIn member ID and name, and when the connection expires. If someone connects their LinkedIn to a profile you manage, through an invite link, we hold the same details for their account.
• Content: the posts, carousels and images we generate for you, your edits and approvals, and your post history — including the news articles each post was based on.
• Payments: order and payment IDs, amount, status and dates. Your card, UPI or bank details go directly to Razorpay; we never receive them.
• Free tools: for the Voice Check, the posts you paste, your first name if given, an optional email address, and your IP address; and the email address if you join a waitlist.
• Technical data: IP address and request details, used for security, abuse prevention and rate limits, and error logs.
• Product usage: the pages you visit on Voyce, what you click, and what you do with features (for example writing, approving or publishing a post), linked to your account ID, name, email and plan once you sign in, plus your IP address and browser details. When session recording is on, we can replay how a page was used; anything you type into a form field is hidden from those recordings.

2. How we use it

• To write content in your voice and, when you approve it or have chosen automatic posting, publish it to your LinkedIn account.
• To send service emails: a post is ready for your approval, a post was held or failed, your LinkedIn connection or Pro pass is about to expire. These are part of the service, not marketing.
• To process payments and refunds, and to keep the records the law requires.
• To keep the service secure, prevent abuse and enforce plan limits.
• To answer your support requests.
• To understand how people use Voyce, find where it is confusing or broken, and improve it.
• If you gave your email in the Voice Check, to send occasional Voyce updates. Reply to any of them to stop.

We do not sell your personal data, and we do not use it for advertising.

3. Who processes it

We use these service providers to run Voyce. Each receives only what it needs for its job.

We may also disclose data if Indian law requires it, or to protect the rights and safety of users and the service.

4. AI-generated content

To write a post, Voyce sends the relevant text to Google's Gemini API, which processes it under Google's Gemini API terms. AI-written content can contain mistakes. Voyce checks each post against its sources and holds back posts that fail, but you should still review what goes out under your name.

5. Where your data is processed

Several of the providers above store or process data outside India, including in Singapore and the United States. We only use providers that protect data under their own security and privacy commitments.

6. Cookies and local storage

• Sign-in cookies from Clerk keep you logged in. They are required for the app to work.
• li_oauth is a short-lived cookie set while you connect LinkedIn, so the connection can only finish in the browser that started it. It lasts 10 minutes.
• Razorpay may set cookies during checkout.
• Local storage in your browser keeps drafts and app preferences on your device.
• PostHog sets a first-party cookie and a local storage entry (named ph_…_posthog) so it can tell visits apart and link them to your account after you sign in. It is used only for product analytics.

We do not use advertising cookies, and we do not share analytics data with advertisers.

7. How long we keep it

• Account, profile and content data: while your account exists, and deleted within 30 days of a deletion request.
• Posts waiting for approval: they expire after 48 hours.
• LinkedIn connection: until you disconnect or it expires (LinkedIn connections last about 60 days).
• Payment records: as long as Indian tax and accounting law requires.
• Voice Check and waitlist entries: up to 12 months, or until you ask us to delete them.

8. Your rights

You can ask to access, correct or delete your personal data, withdraw consent you gave us, or nominate someone to exercise these rights on your behalf. Email hello@voyce.co.in from your account's address; we confirm within 72 hours and act within 30 days. You can disconnect LinkedIn at any time in Voyce, or in LinkedIn's settings under permitted services. If you're not satisfied with our response, you may complain to the Data Protection Board of India.

9. Security

We use reasonable safeguards, including encrypted connections (HTTPS) and restricting access to the data to the operator. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.

10. Children

Voyce is not intended for anyone under 18, and we do not knowingly collect their data.

11. Changes

If we change this policy, we'll update the date above, and email you about significant changes before they apply.

12. Contact and grievance officer