Privacy policy
This policy says what Cockpit AI collects, why, and what we do with it. It is written to be read.
What we collect
- Account data: your name, email address, password (stored as a hash), the name of your business and the people you invite.
- Business Profile data: what you enter about your business: address, hours, menu, prices, brand voice, channels, tracking identifiers.
- Channel data: when you connect Facebook, Instagram, YouTube, Google Business Profile or TikTok, the access tokens those platforms issue, the posts we publish for you, and the comments, reviews and insights those platforms return.
- Usage data: what the product did for your account (pieces, articles, renders), sign-ins, and an audit log of changes.
- Billing data: handled by Stripe; we store only your Stripe customer and subscription identifiers, never card numbers.
Why
To run the product for you: publish to your channels, write and render pieces from your facts, answer comments with your approval, show you results, bill you, and support you. Nothing else. We do not sell data and we do not advertise to your audience.
Platform data
Data received from Meta, Google and TikTok is used only to provide the features you switch on, is stored only as long as your account needs it, and is deleted when you disconnect the channel or close your account. We follow each platform's developer policies. You can disconnect any channel from the Business page at any time; this revokes our access.
Who sees it
Your account's people, by the roles you set. Veroxa staff, only to support you, and every such access is logged. Processors we rely on: our hosting provider (Oracle Cloud), Stripe for billing, Resend for email, Google for AI writing and analytics reads. No processor may use your data for anything but the service.
Retention and deletion
Account data lives while the account is open plus 30 days. Ask us at hello@veroxa.co and we delete the account, its workspaces, its stored channel data and its tokens within 30 days; a written confirmation follows. Backups roll off within 35 days.
Your rights
Access, correction, export and deletion on request. Complaints to hello@veroxa.co first; you may also contact your local data protection authority.
Security
Encrypted in transit, isolated per account, passwords hashed with scrypt, sessions expire, changes audited. Tell us about a vulnerability at hello@veroxa.co and we answer within two business days.
Changes
We post changes here with a new effective date and, for material changes, email account owners.
Contact
Veroxa · hello@veroxa.co · veroxa.co