Privacy Policy
Last updated: July 13, 2026
1. What This Covers
Voxlio is an AI-powered IELTS Speaking practice platform. This policy explains what data we collect, why, and how it is handled. By using the platform, you agree to the practices described here.
2. Data We Collect
2.1 You Provide
- Account: name, email, and password (bcrypt-hashed).
- Practice Audio: your recorded speech for IELTS Parts 1, 2, 3.
- Transcripts & Results: what you said, AI band scores, feedback, and vocabulary you save.
- Vocabulary Searches: words you type into the AI Vocabulary feature are sent to Groq for OALD-style analysis. These are not stored server-side unless you choose to save them.
- Payment: only payment confirmation from Click (Click.uz). We never see your card details.
2.2 Automatically Collected
- IP address (temporary — for rate limiting and abuse prevention).
- Browser/device type (in server logs).
- Session cookies (see Cookie Policy).
3. Why We Collect It
- To run the service — manage accounts, process assessments, show your history.
- To secure the platform — rate limiting, heartbeat monitoring, abuse detection.
- To improve assessment quality — transcripts and scores help refine the AI. Audio is used only for transcription and is deleted after processing (max 30 days if retained for debugging).
We do not sell your data. We do not use it for marketing or advertising.
4. Where Data Is Stored
- Database: Neon PostgreSQL. Servers in US/EU. Encrypted at rest.
- Audio: processed in-memory for transcription, then deleted.
- Logs: Render (hosting) keeps server logs with IPs for up to 7 days.
5. Third-Party Services
| Service | What For | Data Shared |
|---|---|---|
| Groq Inc. | AI band scoring, feedback & vocabulary analysis | Transcripts, speech metrics, vocabulary search words |
| ElevenLabs | Text-to-Speech for questions | Question text only |
| Click (Click.uz) | Payment processing | Amount, transaction ID (no card data) |
| Neon (Neon.tech) | Database hosting | All stored data |
| Render (Render.com) | Web hosting | Server logs (IP, timestamps) |
| Microsoft Azure | Pronunciation assessment (optional) | Audio, transcripts |
Azure pronunciation assessment is not active unless you configure a key in .env. It is not enabled by default.
6. Your Rights
- Access: ask us what data we hold about you.
- Deletion: delete your account anytime — all associated data will be removed within 30 days.
- Correction: update your name/email from account settings.
To exercise these rights, message @voxlio_bot on Telegram. We respond within 30 days.
7. Data Retention
- Active accounts: data kept until you delete your account.
- Assessment transcripts & scores: kept so you can track progress over time.
- Audio: deleted immediately after transcription unless retained for debugging (max 30 days).
- Server logs: retained ~7 days on Render.
8. Contact
Telegram: @voxlio_bot