Privacy Policy

Prototype notice. This describes how the Vozimi prototype handles data.

Accounts and verification

To use Vozimi you create an account with your name, email and a password. We verify your email with a one-time code (OTP), and new accounts are reviewed and approved before access. Your password is never stored in plain text; it is kept as a salted PBKDF2 hash.

Where your data lives

Your projects, transactions, vendors, bookings, invoices and reminders are stored in our secure database (Cloudflare D1), isolated per account so no other user can see your data. Uploaded files, such as GST invoices, are stored privately in object storage (Cloudflare R2) and served back only to you. We can export or delete your data on request.

Secrets and keys

Service API keys (OpenAI, email, payments) live only as server-side secrets in our backend. They are never sent to the browser or the mobile app, and never stored in the app's code or in your account.

Voice and AI

When you use voice entry, your device converts speech to text, and that text (not audio) is sent to the OpenAI GPT API through the backend to extract the transaction details. Only the sentence you spoke is sent; it is used to produce the structured entry and is subject to OpenAI's data policies.

Email

If you enable email reports and reminders, messages are sent via Resend to the address you configure. We do not use your email for anything else.

Payments (Razorpay)

When paid plans are active, payments are processed by Razorpay, our payment gateway. To take a payment we share the details necessary to complete it, such as your name, email, amount and billing identifiers, with Razorpay. We do not store your full card, UPI or bank details on our servers; those are handled by Razorpay under their own privacy policy and security standards (PCI-DSS). We keep a record of your plan, invoices and transaction references for accounting and support.

Analytics

We may use privacy-respecting analytics, such as Google Analytics, to understand how the site is used and improve it. Analytics load only if you accept via the cookie banner. If you decline, we use only the essential storage needed to run the app. See our Cookie Policy.

What we store in your browser

A short-lived sign-in token, your chosen project and your cookie-consent choice are stored in your browser's local storage so the app works and remembers your preferences. Clearing site data removes them.

Your choices

You can export or delete your data at any time directly from your Google Sheet. Disabling email features stops all outgoing messages.

Contact

This is a prototype built for a specific user. For questions, contact the project owner.