Effective: 30 August 2026
1. Controller
VOXERN, obrt za usluge i trgovinu, vl. Robert Dusper, Drniška 15 A, 21220 Okrug Gornji, Croatia, OIB 44370289950 is the controller. Privacy requests: kontakt@voxern.com.
2. Data we process
- Account data: name, email, password hash, account preferences, subscription status and AI add-on entitlement.
- Billing data: billing details, base plan, optional add-on, invoices, payment status and Stripe identifiers. Voxern does not receive your full card number when Stripe-hosted payment pages are used.
- Rank-tracking data: project names, domains, keywords, devices, locations, languages, reports and historical results.
- AI-visibility data: tracked prompts, brand or domain context, sampled model responses, observed mention and citation results, cited source URLs, model information and check timestamps.
- Technical data: IP address, device and browser details, timestamps, security and error logs, and session identifiers.
- Communications: support requests, complaints, withdrawal requests and related correspondence.
- Preference records: cookie-notice choices and the time they were stored.
3. Purposes and legal bases
- Creating accounts, delivering rank tracking and AI-visibility checks, billing and support: performance of a contract.
- Invoices, tax records and lawful authority requests: legal obligation.
- Security, fraud prevention, troubleshooting and service protection: legitimate interests.
- Optional analytics, marketing storage or non-essential communications: consent, if introduced.
4. Recipients and processors
We disclose data only as needed to hosting, infrastructure, email, accounting and support providers; Stripe for payment processing; DataForSEO OÜ in Estonia for rank and keyword data; OpenAI for sampled model responses and web-search sources used by ChatGPT Visibility; professional advisers; and competent authorities where legally required.
DataForSEO receives only the domain, keyword, device, location, language and minimum technical parameters required for a query. OpenAI receives the tracked prompt, optional locale and technical settings needed to run the requested sampled check. Voxern does not add the tracked brand or domain to a non-branded prompt, but a brand or domain typed by the user into the prompt is necessarily included. Neither provider receives account passwords or full card data from Voxern. Stripe may also process information as an independent controller for fraud, regulatory and payment-network purposes.
5. International transfers
Some provider subprocessors may handle data outside the European Economic Area. Where required, transfers rely on an adequacy decision, the EU–US Data Privacy Framework, European Commission Standard Contractual Clauses or another valid safeguard.
6. Retention
Account and project data are kept while the account is active and afterwards only as long as reasonably needed for account closure, disputes, security and legal obligations. Billing and accounting records are retained for the period required by Croatian law. Written consumer complaints are retained for one year. Security logs, consent records and backups are deleted or overwritten according to operational and legal retention schedules. You may request the applicable period for a specific record.
7. Your rights
Subject to legal conditions, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent at any time without affecting earlier lawful processing and object to direct marketing at any time.
Contact kontakt@voxern.com to exercise a right. You may complain to the Croatian Personal Data Protection Agency, Ulica Metela Ožegovića 16, 10000 Zagreb, Croatia, azop@azop.hr, azop.hr.
8. Security
We apply measures appropriate to risk, including encrypted transmission, password hashing, access controls, backups and security logging. No online service can guarantee absolute security.
9. Children
The service is not directed to children. Accounts may be created only by adults legally capable of entering a contract.
10. Changes
Material changes will be communicated through the service or by email where appropriate. The current version and effective date remain published on this page.