Vyxora

Privacy Policy

Last updated October 17, 2026This Privacy Policy explains how Vyxora, currently developed and operated by an individual developer, handles information when you visit vyxora.app or use the Vyxora workspace, mobile app, or Vyxora Capture extension.

Information we collect

Vyxora collects information needed to run the public site, workspace, mobile app, and extension. The information we collect depends on the features you use and the choices you make. It can include information you provide directly, content you submit for analysis, information collected automatically when you use the site, your AI processing choice and the version and date of the disclosure, and information received from service providers that help us operate Vyxora.

Information you provide

If you create or use a workspace account, we may collect your name, email address, profile details, authentication details, workspace preferences, and information you provide when you contact us. You may also submit recordings, transcripts, notes, and documents, along with questions, tasks, study material, and other content for Vyxora to process. Please do not submit sensitive information unless it is necessary for the feature you are using and you have the right to do so.

Information collected automatically

When you visit or use Vyxora, we may automatically collect your IP address, browser type, device type, operating system, referring page, pages or routes visited, request timestamps, approximate location derived from an IP address, and information about errors, performance, and security events. We use Google Analytics to count visits and measure coarse page categories. Google may receive an IP address, browser and device details, the referring page, the Vyxora hostname, and the coarse page category. We do not send note or workstream identifiers, page query values, note titles, submitted content, or form values in Vyxora page-view events. We use these records to understand site use, keep the service working, protect accounts, and diagnose problems. We do not use them to create advertising profiles.

Third-party services

Vyxora uses service providers for functions such as authentication, hosting, storage, email delivery, transcription, AI processing, infrastructure operations, security, and website measurement through Google Analytics. When a provider processes information for Vyxora, it may receive the information needed for that function under its agreement with Vyxora. Information may be processed in the United States and other countries where our providers operate. Those providers may have their own privacy notices, and their independent handling of information is governed by those notices and applicable law.

Cookies and local storage

Vyxora may use essential cookies, local storage, and similar technologies to keep you signed in, remember settings, protect the service, and maintain session security. Google Analytics may use analytics cookies or similar browser storage to distinguish visits and produce usage reports. Vyxora does not use advertising cookies or third-party tracking pixels for targeted advertising. Your browser may allow you to block or delete cookies and local storage, but doing so can prevent sign-in, limit measurement, or make some workspace features unavailable.

How we use your information

We use information to operate the public site, provide the Vyxora features you choose, and process recordings, notes, documents, and other content you submit. We also use it to create the results you request, maintain account and session security, troubleshoot errors, protect the service, and respond to messages sent to [email protected]. We may send essential administrative communications and use information to comply with applicable legal obligations. We do not use submitted content to send targeted advertising.

AI features and submitted content

With your permission, Vyxora sends recordings, transcripts, notes, attached sources, and chat messages to Google (Gemini) and OpenAI through their API services to transcribe audio, organize your knowledge, and answer questions. Only content needed for the requested feature is sent. This may include relevant saved content when generating or searching knowledge, building Workstreams, or answering follow-up questions. For example, an audio recording may be converted into text, and text or other source material may be used to generate summaries, maps, tasks, study material, or answers. Vyxora does not currently use submitted content to train or fine-tune a Vyxora model. Vyxora uses paid API services for AI processing. Under the paid-service terms of the providers we use, prompts, uploaded files, and generated outputs are not used to improve provider models by default unless an account owner enables an optional data-sharing or feedback program. Provider retention or model-improvement practices depend on the provider, service tier, account settings, and applicable terms. Limited retention for security, abuse monitoring, or legal compliance may still apply. These systems can produce incomplete or inaccurate results, so review generated results before relying on them. If Vyxora enables optional sharing of submitted content for model training or improvement, we will update this policy and provide any notice or choice required by law.

Your AI processing choice

Before AI processing is enabled, Vyxora asks you to allow it or choose Not now. We save that choice with your account, so you are not asked for every recording or message, or when you sign in on another device. You can review or turn off AI processing in Account. Turning it off blocks new AI requests and queued AI work that has not started. Work already in progress may finish. Your saved content remains available to read, and your account and deletion controls remain available. Turning AI off does not delete existing content or reverse processing that already occurred. If we materially change the disclosed AI sharing, we will ask you again before enabling it under the new disclosure.

Mobile recordings and permissions

The mobile app uses microphone access when you choose to record. Microphone permission allows recording on the device. It is separate from your account’s AI processing choice. The app sends audio to Vyxora when you submit a recording to create a Note. Local app storage holds session information and temporary recordings. Recording files can remain in the app’s cache after an upload or when you discard a recording, until the operating system clears the cache or you remove the app. Account deletion removes backend-owned data and ends the session, but does not promise immediate removal of these temporary device files. You can manage microphone access in your device settings. Vyxora’s mobile app does not include the website’s Google Analytics page-view tracking.

External AI clients and MCP

If you authorize an MCP-compatible AI client through Vyxora, that client can read selected Vyxora knowledge under your Clerk identity and request answers inside an explicit Note or Workstream scope. MCP is read-only: it does not create Vyxora conversations, edit or delete workspace data, or return raw audio, complete transcripts, complete uploaded documents, storage details, or another user’s data. Read requests do not use assistant-answer allowances. An MCP answer uses the same Standard or Deep allowance as an answer requested inside Vyxora. Vyxora does not store a connection record, so revoke access from the client or Clerk when you no longer want it authorized. The client’s own retention and use of information is governed by its provider’s terms and privacy notice.

Vyxora Capture extension

If you use Vyxora Capture, the extension records only the audio source you select: microphone, current-tab audio, computer audio, or a combination. Computer-audio capture may require a display share because the browser requires a display track, but Vyxora records only the audio and does not save screen frames. The extension makes no upload request until you choose General, Meeting, or Study and press Create Note. If you enable meeting participant collection, the extension also reads display names from the browser meeting selected when recording starts. This setting is off by default. Names remain local with the unsent audio, pause with recording, and are sent as editable Recording context only when you press Create Note. Before that action, one unsent recording and its collected names stay in your browser’s private OPFS storage. After Vyxora confirms a durable Job is queued or active, the extension removes that local audio and its collected names. It does not store Clerk JWTs, authorization headers, transcripts, or generated Note content in browser local storage.

Data retention

We retain information for as long as reasonably necessary to provide the service, maintain an account, keep requested results available, secure Vyxora, resolve disputes, enforce our agreements, and meet legal obligations. Active workspace content may remain available until you delete it or request account deletion. Operational records connected to failed, abandoned, or expired processing may be removed when they are no longer needed. Retention can vary by information type and by the requirements of our service providers.

Deletion requests

You can request deletion of your account or personal information by using an available account control or emailing [email protected]. After verifying the request, we will delete or de-identify information we are not required to retain. Where operationally possible, an account deletion removes associated jobs, outputs, transcripts, retrieval data, and stored source files. We may retain limited information when necessary for legal compliance, fraud prevention, security investigations, dispute resolution, or the establishment, exercise, or defense of legal claims.

Data security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. No website, storage system, transmission, or security measure is completely secure. You are responsible for protecting your credentials, using appropriate access controls, and notifying us promptly if you believe an account or submission has been compromised.

Sharing your information

Vyxora does not sell personal data or use targeted advertising. We may share information with service providers that host, store, secure, analyze, transmit, transcribe, or process information for us. We may also share it with professional advisers subject to confidentiality obligations, when required by law or valid legal process, to protect the rights, safety, and property of users, Vyxora, or others, or in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets. We do not share more information than reasonably needed for the relevant purpose.

Your rights under GDPR

If the GDPR or another applicable European privacy law applies to you, you may have rights to access, correct, delete, restrict, or object to processing of your personal information. You may also have the right to receive a portable copy of certain information, withdraw consent where processing relies on consent, and complain to a data protection authority. To exercise a right, email [email protected] with enough information for us to understand and verify your request. We may ask for additional information to protect against unauthorized requests and will respond within the time required by applicable law.

California privacy rights (CCPA)

If California privacy law applies to you, you may have rights to know about personal information we collect, request access to or deletion of that information, request correction of inaccurate information, and receive equal service when exercising a privacy right. Vyxora does not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information for purposes beyond providing and securing the service. Send a request to [email protected]. We will verify and handle it as required by the California Consumer Privacy Act and other applicable law.

Recordings and third-party content

You are responsible for making sure that your use of Vyxora complies with recording, wiretap, consent, confidentiality, copyright, employment, education, and data-protection laws. Before recording or uploading another person’s voice, personal information, or confidential material, provide the required notice and obtain the required permission. Vyxora does not determine whether your recording or source material is lawful to collect or process.

Children’s privacy

Vyxora is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Vyxora, contact [email protected] so we can review and remove it as required. If a higher minimum age applies where you live, that age applies to your use of Vyxora.

Changes to this policy

We may update this Privacy Policy when Vyxora, our processing practices, or applicable requirements change. We will post the revised version on this page and update the “Last updated” date. If a change is material, we will provide additional notice when required. Your continued use of Vyxora after an updated policy becomes effective means the updated policy applies to your future use.

Contact us

Questions, privacy requests, and concerns about this policy can be sent to [email protected]. You can also visit https://vyxora.app for the current public Vyxora site.

Back to VyxoraBlogTerms