This policy explains what information we collect when you use BasedVox, how we use it, and who we share it with.

Information we collect

Information you provide

Text submissions: Scenarios, quotes, drafts, or other text you submit for scoring and feedback.
Account information: When you sign in via a social provider (Google, Facebook, LinkedIn, or X), we receive your name, email address, and profile picture from that provider.

Information collected automatically

Technical data: IP address, browser type, device information, and access times.
Usage data: Pages visited, features used, and interaction patterns (if analytics are enabled).
Session identifiers: Anonymous session IDs to maintain your session state.

How we use your information

Provide the service: Process your text using AI to generate scores and feedback.
Authenticate you: Verify your identity to unlock premium features.
Improve the service: Analyze usage patterns to enhance features and performance.
Security: Prevent abuse, fraud, and unauthorized access.
Legal compliance: Respond to legal requests and protect our rights.

Requests from public authorities

We may disclose information if we believe it is reasonably necessary to comply with a valid legal process (for example, a subpoena, court order, or other lawful request) or to protect the rights, safety, and security of our users, the public, or our service.

When we receive a request from public authorities, we aim to:

Review legality: Evaluate requests for legal sufficiency and scope.
Challenge when appropriate: Object to, narrow, or challenge requests we believe are unlawful, overbroad, or inappropriate, when permitted.
Minimize disclosure: Provide only the minimum information necessary to comply with the request.
Document requests: Keep records of requests and our responses, consistent with applicable law.

How we share your information

Third-party service providers

We share information with the following categories of providers:

AI/LLM providers: Your submitted text is sent to third-party AI services (such as xAI) to generate scores and feedback. These providers may process your text according to their own terms and privacy policies.
Authentication providers: Google, Facebook, LinkedIn, and X (Twitter) receive and provide authentication data when you sign in.
Cloud infrastructure: We use cloud hosting providers to store and process data.
Analytics providers: If enabled, we may use analytics services to understand usage patterns.

We do not sell your data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Social login and third-party accounts

When you sign in using a social provider, we receive limited profile information as authorized by that provider. We do not post to your social accounts or access your contacts, messages, or other private data beyond basic profile information.

You can revoke BasedVox's access at any time through your provider's account settings:

Data retention

Text submissions: May be retained for up to 30 days for service operation and abuse prevention, then deleted.
Account data: Retained while your account is active. Deleted upon account deletion request.
Security logs: Retained for up to 90 days for security and fraud prevention.

We may retain limited information for longer periods where required or permitted for legal compliance, dispute resolution, security, fraud prevention, or to enforce our terms.

Your rights and choices

Access: Request a copy of your data.
Deletion: Request deletion of your data. See the data deletion instructions.
Revoke access: Disconnect social login providers through their account settings.
Opt out: You can use the service without signing in (with limited features).

Mobile applications, photos, videos, and field notes

BasedVox LLC publishes mobile applications on the Apple App Store and on Google Play, including Guruvox Library, the companion app for our Guruvox service. This section describes what those apps collect; everything else in this policy applies to them as well.

Our apps do not scan, index, or upload the contents of your phone. There is no background uploader. A photo or video leaves your device only when you pick it inside the app or share it into the app from another app, and the original stays where it was: the app never moves or deletes it. Neither app asks for access to your photo library, because neither app has it. Picking a file goes through the system photo picker, which runs outside the app and hands back only the one file you tapped. Where notification permission is asked for, it is used solely to tell you an upload finished or failed, may be declined, and may be withdrawn in your device settings. Microphone access is requested only if you use Dictate on a field note; it is used only while you are dictating, may be declined, and may be withdrawn in your device settings.

When you do send a file, we receive the file itself, its name, size, and type, and whatever metadata the file already carries, which may include the time and the location it was taken. We do not strip that metadata. Alongside it we store your account identifier, the time of the upload, and whether it succeeded. The upload goes over TLS directly from your device to our cloud storage, using a one-time link issued by our server, and does not pass through any other party.

Field notes. An account owner may type a sticky field note, or tap Dictate and speak one. Speech is turned into text on the device by the platform speech recogniser. We do not upload or store the audio from Dictate. When you stick the note, only the text is sent over TLS to our servers and stored with your account for use as a scout observation. An automatic gate may refuse a note. You can delete sticky notes from inside the app; copies may remain in encrypted backups for the retention period described above.

You can delete any media item you have sent from inside the app. Deletion removes it from your library; copies may remain in encrypted backups for the retention period described above, and deletion does not retract anything already published elsewhere on your behalf. For anything further, see Data Deletion Instructions.

Signing in to an app uses the same account as the corresponding website. On iOS you may also use Sign in with Apple, from which we receive an email address and a unique Apple user identifier and nothing else: we do not ask Apple for your name. If you choose Hide My Email, the address we receive is the relay alias Apple issues rather than your own.

Our apps carry no third-party advertising, attribution, or analytics SDKs, and collect nothing for advertising or cross-app tracking. A photo or video you send may contain personal information about someone other than you; you are responsible for having their agreement before sending it. If someone appears in material we hold and wants it removed, write to admin@basedvox.ai.

Children's privacy

BasedVox is not intended for children under 13. We do not knowingly collect personal information from children under 13.

International users

Your data may be processed in the United States or other countries where our service providers operate. By using the service, you consent to this transfer.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against loss, misuse, and unauthorized access or disclosure. However, no method of transmission over the Internet or method of electronic storage is 100% secure.

Third-party links

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties, and your use of those services is subject to their policies.

Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above when we do. Your continued use of the service after any update means you accept the updated policy.

Contact

For privacy questions or deletion requests, contact: admin@basedvox.ai.