Privacy Policy

1. Who we are

VOXN8 CRM ("VOXN8", "we", "us") is a WhatsApp CRM, shared inbox and automation platform operated at wacrm.voxn8.com. This policy explains what personal data we collect, how we use it, and the choices you have. For any privacy question, contact us at support@voxn8.com.

2. Data we collect

• Account data — name, email address, password (stored as a secure hash), workspace and team membership details you provide when signing up.
• Business & WhatsApp data — when you connect a WhatsApp Business Account through Meta's Embedded Signup, we receive your WhatsApp Business Account ID, phone number ID, display phone number, business name, and an access token. The access token is stored encrypted.
• Messages & contacts — WhatsApp messages, message templates, delivery statuses, and contact details (names, phone numbers, labels, notes) processed through the platform so you can run your inbox, broadcasts and automations.
• Usage data — log data such as IP address, browser type, and actions taken in the app, used for security and to improve the product.

3. Google user data

Some features connect to Google. We only ask for access when you (or a workspace admin) choose to connect that feature, and only for what the feature needs:

• Sign in with Google — your name, email address and profile picture, used only to create and sign in to your account.
• Google Ads (scope https://www.googleapis.com/auth/adwords) — the list of Google Ads accounts your login can reach, and for the account you connect: its name, currency, time zone, campaigns, budgets, ads, keywords, targeting and performance numbers (spend, impressions, clicks, conversions). We use this to show your campaigns and results in your workspace and, when a member with permission asks, to create campaigns, switch them on or off and change budgets. Every such change is recorded in your workspace's change log.
• Google Calendar — your calendar events and free/busy times, used to offer meeting slots and to create the meetings you book.
• Google Sheets — the spreadsheet you link, read (and, if you turn on write-back, updated) to match rows to your contacts. A list of your spreadsheet names is read only to let you pick one.

How we store it. OAuth refresh and access tokens are encrypted at the application layer (AES-256-GCM) and are only read by our servers. Google Ads data is read live from Google each time you open the page and is not copied into our database, apart from the connected account's id, name, currency and time zone.

Who sees it. Only members of your own workspace who have the matching permission. We do not sell Google user data, do not use it for advertising, do not use it to train AI or machine-learning models, and do not share it with anyone except as needed to run the feature you turned on, for security, or where the law requires it. People at VOXN8 do not read it unless you ask us to for support, it is needed for security, or the law requires it.

Removing access. Disconnect the feature in wacrm at any time; we then stop using the token and delete it. You can also revoke wacrm's access in your Google Account permissions. Deleting your workspace deletes all stored Google tokens and account details (see Retention).

VOXN8's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. How we use data

• To provide and operate the CRM, inbox, broadcast and automation features.
• To send and receive WhatsApp messages on your behalf via the WhatsApp Business Platform (Cloud API) operated by Meta.
• To secure the service, prevent abuse, and comply with legal obligations.
• To communicate with you about your account and service updates.

We do not sell personal data, and we do not use your message content for advertising.

5. Sharing

We share data only with:

• Meta Platforms, Inc. — messages you send and receive are transmitted through the WhatsApp Business Platform and are subject to Meta's WhatsApp Business Terms.
• Google LLC — when you connect a Google feature, requests to manage it (for example a campaign budget change) are sent to Google's APIs, under Google's Privacy Policy.
• Infrastructure providers — hosting and managed database services that store data on our behalf under confidentiality obligations.
• Legal requirements — where required by law or to protect our rights and users.

6. Retention

We keep your data for as long as your account is active. When your account or workspace is deleted, associated personal data is removed from production systems within 30 days, except where a longer period is required by law.

7. Your rights

You may access, correct, export, or delete your personal data at any time. See our Data Deletion Instructions or email support@voxn8.com. We respond to verified requests within 30 days.

8. Security

Data is encrypted in transit (TLS) and at rest. WhatsApp access tokens and Google OAuth tokens are additionally encrypted at the application layer. Access to production data is restricted to authorized personnel.

9. Changes

We may update this policy from time to time. Material changes will be announced in the app or by email. Continued use of the service after changes take effect constitutes acceptance.

10. Contact

VOXN8 — email: support@voxn8.com