Privacy policy and GDPR

Last updated: 30 October 2026

Draft of 30 October 2026, pending legal review. This text is not yet legally binding.

1. Roles

For data of participants in an event, the organizer (tenant) is the controller and Voxpla acts as the processor on the organizer's behalf. For data of organizer accounts (name, e-mail, billing), Voxpla is the controller.

2. What we process

  • Organizers: e-mail, name, profile picture when signing in with Google, membership in teams, billing data handled by Stripe.
  • Participants: an optional display name, questions, votes and answers, a random participant token stored in the browser.
  • For rate limiting only: a salted hash of the IP address that rotates every 24 hours. In anonymous events the IP address is never stored in readable form.
  • Organizers never see the identity of anonymous participants, not even in exports.

3. Where data is stored

The application and the database run on servers in the EU. Texts of participants are not sent to third parties outside the EU unless the organizer explicitly switches on the AI features.

4. Cookies and tracking

Participants see no cookie banner because Voxpla only uses technically necessary storage (the participant token in the browser and the session cookie of organizers). There is no tracking of participants by third parties. The marketing website uses Plausible, a cookieless analytics tool.

5. Retention and deletion

  • Event data is anonymized automatically 24 months after the end of the event: question texts stay, links to participants are removed. Organizers can set a shorter period.
  • An organizer can export all account data and request deletion of the account. The account is deleted within 30 days after the request, confirmed by e-mail.

6. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with a supervisory authority. Participants should contact the organizer of the event first, as the controller. Write to us at the contact address below.

Sub-processors

Services that process data on behalf of Voxpla
ProviderPurposeWhen
Hosting provider in the EUApplication server and databaseAlways
StripePayments, subscriptions and invoicesPaid plans only
ResendTransactional e-mails (sign-in links, invitations)Always
SentryError monitoringAlways
PlausibleCookieless analytics of the marketing websiteMarketing website only
AnthropicAI moderation, clustering, translation and summariesOnly when the organizer enables AI features

Data processing agreement

Contact

[Operator company name, registered office and company ID - to be completed]

E-mail: support@voxpla.eu