LEGAL

Privacy Policy & Terms

Last updated: March 2026 · Questions? privacy@infravox.ai

Overview

Infravox AI ("Infravox", "we", "us", or "our") operates infravox.ai and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.


By using Infravox, you agree to the practices described in this policy. If you do not agree, please do not use our services.

Information We Collect

We collect information you provide directly:

• Account registration data (name, email, company)

• Infrastructure connection details (cloud credentials stored encrypted)

• Billing information (processed by Stripe — we never store card numbers)

• Communications with our support team


We also collect usage data automatically:

• Log data (pages visited, features used, timestamps)

• Device and browser information

• IP address and location (country-level)

• Performance and error data

How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Infravox platform

• Authenticate users and enforce security policies

• Send transactional emails (alerts, invoices, security notices)

• Analyse usage patterns to improve product experience

• Comply with legal obligations


We do not sell your personal data to third parties. We do not use your infrastructure data to train AI models without explicit consent.

Infrastructure & Log Data

When you connect cloud accounts, Kubernetes clusters, or CI/CD pipelines, Infravox accesses infrastructure metadata and logs solely to deliver the service.


• Data is processed within your selected cloud region where available

• We do not store raw log data beyond the retention period of your plan

• All connections use encrypted transport (TLS 1.2+)

• Credentials are encrypted at rest using AES-256

• You can revoke access at any time from Settings

Data Sharing & Disclosure

We may share your information with:

• Service providers: Stripe (billing), Resend (email), Vercel (hosting), AWS/GCP (infrastructure) — each under data processing agreements

• Legal requirements: if required by law, court order, or to protect rights and safety

• Business transfers: in the event of a merger or acquisition, with notice to users


We do not share personal data for advertising or marketing purposes.

Data Retention

We retain personal account data for as long as your account is active. Upon account deletion:

• Account and billing data: deleted within 30 days

• Infrastructure connection data: deleted immediately

• Audit logs: retained for 90 days for legal compliance, then deleted


You may request deletion of your data at any time by emailing privacy@infravox.ai.

Your Rights

Depending on your location, you may have rights under GDPR, CCPA, or other applicable laws:


• Access: request a copy of data we hold about you

• Correction: update inaccurate personal data

• Deletion: request deletion of your account and data

• Portability: receive your data in a machine-readable format

• Objection: object to certain processing activities


To exercise these rights, contact us at privacy@infravox.ai. We respond within 30 days.

Security

Infravox implements industry-standard security controls:

• All data encrypted in transit (TLS 1.3) and at rest (AES-256)

• SOC 2 Type II compliance (in progress)

• Role-based access control (RBAC)

• Regular penetration testing

• SSO with Google Workspace for internal access

• No employee access to customer infrastructure data without explicit authorization


To report a security vulnerability, email security@infravox.ai.

Cookies

We use essential cookies for authentication and session management. We use analytics cookies (anonymized) to understand how users interact with the product.


You can disable non-essential cookies in your browser settings. Disabling essential cookies will prevent you from using the platform.

Terms of Service

By accessing or using Infravox AI, you agree to these terms:


• You must be 18 or older and authorized to bind your organization

• You are responsible for maintaining the security of your credentials

• You may not use the platform for illegal activities or to harm third parties

• We may suspend accounts that violate these terms

• Services are provided "as is" — we do not guarantee uninterrupted operation

• Our liability is limited to the fees paid in the preceding 3 months


We reserve the right to update these terms with 30 days' notice via email.

Contact Us

For privacy questions, data requests, or legal matters:


📧 privacy@infravox.ai

📧 security@infravox.ai (security vulnerabilities)

📧 hello@infravox.ai (general enquiries)


Infravox AI

infravox.ai