Privacy Policy

Last updated: 25.08.2025

We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard information when you use our services.

1. Controller

The controller responsible for processing your personal data within the meaning of the General Data Protection Regulation (GDPR) is:

Business Name: Voxtopus
Owner: Felix Scholz
Address: Servitengasse 4a/16, 1090 Wien, Austria
Email: hello@voxtopus.com

2. Data We Collect

We collect and process the following categories of personal data:

• Account Information: name, email address, login details.
• Billing Information: company name, VAT ID (if applicable), payment details (processed via Stripe).
• Usage Data: logs of service usage, content processed by our SaaS (stored only as needed to provide the service).
• Analytics Data: anonymized or pseudonymized usage statistics for product improvement.

We do not knowingly process personal data of individuals under 18 years of age.

3. Purpose and Legal Basis of Processing

We process personal data based on the following legal grounds under GDPR:

• Contract performance (Art. 6(1)(b) GDPR): to provide our SaaS services, subscriptions, and credits.
• Legal obligations (Art. 6(1)(c) GDPR): e.g., accounting, tax compliance.
• Legitimate interests (Art. 6(1)(f) GDPR): to improve services, ensure security, and prevent abuse.
• Consent (Art. 6(1)(a) GDPR): where required for analytics or marketing cookies.

4. Data Sharing and Third-Party Services

We use the following processors and service providers:

• Hosting: Hetzner Online GmbH (Germany, EU) – Stores our servers and databases in the EU.
• Analytics:
  • Plausible Analytics (EU-based, privacy-friendly, no cookies).
  • PostHog (may involve international transfers, Standard Contractual Clauses apply).
• Payments: Stripe Payments Europe, Ltd. (Ireland, with data transfers to the USA under SCCs).

All processors are bound by data processing agreements according to Art. 28 GDPR.

5. International Data Transfers

If data is transferred outside the European Union (e.g., to the USA via Stripe or PostHog), we ensure appropriate safeguards are in place, typically through Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Data Retention

We store personal data only as long as necessary:

• Account and billing data: for the duration of your subscription and up to 7 years (tax law).

7. Your Rights

Under GDPR, you have the following rights:

• Access to your data (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (“Right to be Forgotten”, Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent at any time (Art. 7(3) GDPR)

To exercise these rights, please contact us at hello@voxtopus.com.

8. Security

We apply technical and organizational security measures to protect your data against unauthorized access, loss, or misuse. This includes encrypted transmission (SSL/TLS), restricted access, and regular monitoring.

9. Cookies

• Necessary cookies: required for login and service operation.
• Analytics: Plausible does not use cookies; PostHog may require cookies depending on configuration. Consent will be obtained via cookie banner where necessary.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be published on our website with the date of the last revision.

11. Contact

If you have any questions about this Privacy Policy or the processing of your personal data, please contact:

Voxtopus
Felix Scholz
Email: hello@voxtopus.com