1. Who We Are
Voxrate ("we", "us", "our") is an AI-powered review analysis platform for Amazon sellers. For privacy inquiries, contact us at info@voxrate.app.
2. What Data We Collect
- Account data: Email address, name, and authentication provider (Google or email/password) when you create an account.
- Usage data: Amazon listing URLs and ASINs you analyze, analysis results, credit balance, and subscription status.
- Payment data: Payment processing is handled entirely by Stripe. We never see or store your card details.
- Technical data: IP address (for rate limiting), browser type, and pages visited (via Vercel Analytics).
- Error data: Crash reports and error logs via Sentry, which may include browser and OS information.
3. How We Use Your Data
- To provide and improve the Service
- To process payments and manage your subscription
- To send transactional emails (account confirmation, weekly digests, monitoring alerts)
- To detect and prevent abuse, fraud, and security threats
- To understand how users interact with the platform (analytics)
We do not sell your data to third parties. We do not use your data for advertising.
4. Data Storage and Security
Your data is stored on servers in the United States (AWS us-east-1) via Supabase. All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We use industry-standard security practices including Row Level Security (RLS) to ensure users can only access their own data.
5. Third-Party Services
We use the following third-party services to operate Voxrate:
- Supabase — database, authentication, and file storage
- Stripe — payment processing
- AI Infrastructure Partners — Voxrate routes analysis requests through a proprietary ensemble of state-of-the-art large language models (LLMs) provided by third-party AI infrastructure partners. Listing content and review data are transmitted to these services solely for the purpose of generating analysis output. Vendor identities are not disclosed as they constitute part of Voxrate's proprietary technology stack.
- Vercel — hosting and analytics
- Sentry — error monitoring
- Upstash Redis — rate limiting
Each service has its own privacy policy. By using Voxrate, you acknowledge that your data may be processed by these services.
6. Chrome Extension
The Voxrate Chrome extension ("Voxrate for Amazon Sellers") has a single purpose: to read Amazon product review data from pages the user is actively viewing in their authenticated Amazon session and send that data to the Voxrate API for AI-powered analysis.
- Amazon review pages: The extension reads publicly visible review text, star ratings, and product listing metadata from Amazon product pages you visit. This data is transmitted over HTTPS to the Voxrate API (voxrate.app) for analysis and may then be forwarded to third-party AI processing partners solely to generate the analysis output. It is the same data visible to any logged-in browser visitor.
- Seller Central pages: When you visit your Amazon Seller Central account, the extension reads account health metrics, stranded inventory counts, and return summaries that are already displayed on-screen. This data is sent to Voxrate to generate alerts. The extension never accesses, stores, or transmits your Amazon credentials, payment information, or buyer order details.
- Listing monitoring: The extension checks product listing pages (title, price, images, buy box status) at regular intervals you configure. Changes are sent to Voxrate to generate alerts.
- Local storage: The extension stores your Voxrate session token locally in Chrome storage to authenticate API calls. It is never shared with third parties.
The extension does not collect, store, or transmit any Amazon customer's personally identifiable information. It reads only review text content, star ratings, and product listing metadata visible on pages the user has loaded. It does not access any Amazon pages the user has not explicitly navigated to.
The extension does not collect browsing history outside of Amazon domains. It does not inject ads, track affiliate links, or run any code on non-Amazon pages (except voxrate.app for authentication). All data transmitted by the extension is covered by this Privacy Policy.
Review and listing data transmitted by the extension is processed on AWS infrastructure in us-east-1. Analysis results are stored in your Voxrate account. Raw review text transmitted for analysis is not retained beyond the duration of the API request unless it forms part of a saved report in your account.
Permissions used and why:
- storage — stores your session token and cached report data locally
- tabs — opens Amazon review pages within your existing Amazon session to collect paginated reviews. The extension does not read, monitor, or access URLs of any tabs outside of amazon.com domains.
- alarms — schedules periodic listing checks for monitoring alerts
- scripting — injects content scripts on Amazon pages to read on-screen data
- host_permissions (Amazon domains) — required to read Amazon page content in the above scripts
- host_permissions (voxrate.app) — required to authenticate and send collected data to your Voxrate account
7. Cookies
Voxrate uses cookies solely for authentication (session management via Supabase). We do not use tracking or advertising cookies. You can disable cookies in your browser but this will prevent you from logging in.
7. Your Rights (GDPR — EEA Users)
If you are located in the European Economic Area, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict processing of your data
- Request a portable copy of your data
To exercise any of these rights, email info@voxrate.app. We will respond within 30 days. You may also delete your account directly from Settings → Delete Account in your dashboard, which initiates removal of your personal data within 30 days.
8. Your Rights (CCPA — California Residents)
If you are a California resident, you have the right to:
- Know what personal information we collect about you and how it is used
- Request deletion of your personal information
- Opt out of the sale of your personal information — we do not sell personal information
- Non-discrimination for exercising your privacy rights
To submit a request, email info@voxrate.app with the subject "CCPA Request". We will respond within 45 days.
9. Data Retention
- Review cache: Amazon review text is cached in Upstash Redis for 7 days, then automatically deleted.
- Analysis reports: Stored indefinitely until you delete your account or request deletion.
- Account data: Removed within 30 days of account deletion.
- Seller Central scan data (Pro): Purged when you downgrade from Pro or delete your account.
- Email logs: Retained 30 days by Resend (our email delivery provider).
- Payment records: Retained by Stripe per their data retention policy.
10. Children's Privacy
Voxrate is not intended for use by children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at info@voxrate.app.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the Service after changes constitutes acceptance.
12. Contact
For any privacy-related questions or requests, contact us at info@voxrate.app.