Security

Voxtakr holds your IT documentation, so it needs to be trustworthy with it. This page describes how we protect and isolate your data, and how you stay in control of it. We describe what is actually true today, and we do not claim certifications we do not hold.

You own your data, and you can take it with you

Every document you create is yours. You can export any single document as a PDF or as Markdown, and you can export your entire account at once as a zip of Markdown files with a manifest listing each document. Export works whether or not you have an active subscription, so cancelling never locks you out of your own documentation.

Encryption

Your data is encrypted in transit using TLS between your browser, Voxtakr, and our providers. It is encrypted at rest in the database. Payment details are handled by Stripe and never reach Voxtakr servers.

Per-account isolation

Each account's documents are isolated at the database level using Postgres row-level security. Access rules are enforced by the database on every read and write, not just by application code, so one account cannot read or edit another account's documents. In a shared team workspace, access is scoped to the members of that workspace.

Voxtakr is not a password vault

By design, Voxtakr does not store your client credentials, secrets, or passwords. It is a documentation tool, not a secrets manager. Keep passwords and keys in a dedicated password manager, and reference them in your documentation rather than pasting the secrets themselves.

Service providers

We rely on a small set of established vendors, each receiving only the data it needs:

• Supabase: database and authentication (encrypted at rest, TLS in transit).
• Stripe: payment processing. Card data never touches Voxtakr servers.
• Anthropic: the AI that structures your notes and documents.
• Deepgram: voice transcription. Audio is transcribed and discarded, not stored.
• Resend: transactional email delivery.
• Vercel: application hosting.
• Google Analytics: aggregate website usage analytics.
• PostHog: product analytics (feature and funnel usage). Product events, page URLs, and a pseudonymous account identifier. Never document content, and never your email.

Continuity commitment

Voxtakr is an independent product, so it is fair to ask what happens to your data if it ever shuts down. Our commitment: if Voxtakr ever winds down, you will get at least 90 days of notice and a full window to export everything before any data is removed. Your export tools stay available the whole time.

Responsible disclosure

If you find a security issue, please report it privately to hello@voxtakr.com before disclosing it publicly, and give us a reasonable chance to fix it. We appreciate the help and will work with you in good faith.

Questions

For anything about security or your data, email hello@voxtakr.com. See also our Privacy Policy and Terms of Service.