VoxwakePrivacy Policy
Last updated: 24 October 2026
Voxwake is a brand intelligence service: it helps organizations find public mentions of their brands, products and competitors on Threads, understand them and reply with human approval. This policy explains what personal data we process, why, and the choices you have.
Who we are
Voxwake is operated by Intelligent Syndicate Ltd, a company registered in England and Wales under company number 17533214 ("we", "us"). We are the controller of the personal data described here. Contact: privacy@voxwake.com.
What we collect
- Account data: e-mail address, display name, password hash, two-factor settings and sign-in sessions (IP address and browser).
- Organization data: brand profiles, monitoring rules, team members and their roles, reply drafts and approval history.
- Public content from Threads that matches the rules an organization sets: the post text, its link, the public username of its author and when it was published.
- Connected account data: when you connect a Threads account, we receive your Threads user ID, username and an access token (stored encrypted), and the replies to posts of that account.
- Technical data: server logs needed to keep the service secure and working. We don't use advertising cookies or trackers.
How we use it
- To run monitoring and show findings in your organization's inbox.
- To classify findings by language, sentiment, intent and priority, and to draft replies for a person to review.
- To publish a reply only after a member of your organization approves it.
- To enforce plan limits, provide support, keep the service secure and meet legal obligations.
We don't sell personal data, don't use it for advertising, don't send unsolicited messages and don't build profiles of the people whose public posts we process beyond the post itself.
Legal bases
Under the UK GDPR and EU GDPR we rely on: performance of a contract (providing the service to our customers and their users); legitimate interests (processing public posts so organizations can understand and respond to what is said about them, and keeping the service secure), balanced against the rights of the people concerned; and legal obligations (for example accounting records).
Who can see it
Members of your organization, according to their role. Our staff can see account and billing metadata for support; findings, drafts, replies and tokens are not accessible to them by design. We share data only with the service providers below, under contracts that limit their use to providing their service to us.
| Provider | Purpose | Location |
|---|---|---|
| Webdock.io ApS | Server hosting | Denmark (EU) |
| Cloudflare, Inc. | DNS, network security, e-mail routing | USA / global |
| Groq, Inc. | AI classification and reply drafts | USA |
| Anthropic PBC | AI classification and reply drafts | USA |
| OpenAI, L.L.C. | AI classification and reply drafts | USA |
AI providers receive only the text needed for a task (for example a public post and your brand's tone settings) and are not permitted to train on it. Transfers outside the UK and EEA rely on the UK International Data Transfer Addendum and EU Standard Contractual Clauses.
Data from Meta platforms
Data received through the Threads API is used only to provide the features described above to the organization that connected the account, in line with the Meta Platform Terms. It is not sold, not used for advertising and not shared with data brokers. You can remove it at any time as described on the data deletion page.
Retention
- Findings nobody worked on are deleted automatically after 90 days (an organization can choose between 7 and 730 days).
- Findings your team worked on keep their statistics, but the author's identity (username, platform ID and profile link) is removed after 180 days of inactivity.
- When a Threads account is disconnected, its token is deleted immediately.
- A deleted organization is closed at once and all its data is removed after 30 days. Notifications are kept for 180 days and security audit records for two years.
- Account data is kept while the account exists; records we must keep by law (such as invoices) are kept for the legally required period.
Security
Access tokens are encrypted at rest, traffic is encrypted in transit, organizations are isolated at the database level, and privileged roles require two-factor authentication.
Your rights
You can access, correct, export or delete your data, restrict or object to processing, and withdraw consent where we rely on it. If one of your public posts was processed by an organization using Voxwake, you can ask us to delete it from our systems. Write to privacy@voxwake.com; we answer within 30 days. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.
Children
Voxwake is a business service and is not intended for anyone under 18.
Changes
We'll post any changes on this page and, for material changes, notify account owners by e-mail before they take effect.