Privacy Policy — Voke API

1. Who We Are

Voke API ("we", "us", "our") is an AI model gateway service operated at vokes.in. For questions about this policy, contact us at support@vokes.in.

2. Information We Collect

Account data: When you sign up, we collect your email address via Clerk authentication. We do not store passwords — authentication is handled entirely by Clerk.

API usage data: We log API requests including model used, timestamp, and token counts for billing and rate-limiting purposes. We do not log the content of your messages.

Payment data: Payments are processed by Dodo Payments. We do not store card numbers or payment credentials. We receive only a confirmation of successful payment and your plan tier.

Technical data: IP address (used for rate limiting, not stored long-term), browser type, and request metadata.

3. How We Use Your Data

To authenticate your account and validate your API key
To enforce rate limits and usage quotas
To process billing and manage your subscription plan
To send transactional emails (API key issuance, billing receipts)
To detect and prevent abuse of the service
To improve the reliability and performance of the gateway

4. Data Storage

Account and API key data is stored in Supabase (PostgreSQL). Supabase stores data in secure, encrypted databases. For data residency details, see Supabase's privacy policy.

We do not use cookies for tracking. We use session storage only for UI state (e.g. keeping you signed in during a browser session).

5. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with:

Clerk — authentication provider
Supabase — database infrastructure
Dodo Payments — payment processing
Upstream AI providers — your API requests are forwarded to AI model providers (e.g. DeepSeek, xAI, Anthropic). These providers receive only the model request content, not your account details.

We may disclose data if required by law, court order, or to protect the safety and integrity of the service.

6. Data Retention

Account data is retained as long as your account is active. API usage logs are retained for 90 days. You may request deletion of your account and associated data at any time.

7. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your account and data
Portability: Receive your data in a machine-readable format
Objection: Object to certain processing of your data

To exercise any of these rights, email support@vokes.in. We will respond within 30 days.

8. Security

We implement industry-standard security measures including TLS encryption in transit, hashed API key storage (SHA-256), and strict server-side access controls. Backend provider keys are never exposed to clients. If you discover a security vulnerability, please report it to support@vokes.in.

9. Children's Privacy

Voke API is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active users of material changes by email. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests: support@vokes.in