Privacy Policy
This policy explains what personal data Emvoox collects on emvoox.com and in Emvoox Studio, why we collect it, who helps us process it, and what you can ask us to do with it.
Last updated: 21 October 2026
01Who we are
Emvoox runs the website emvoox.com and Emvoox Studio, our production workspace at dev.emvoox.com and app.emvoox.com. We are based in Ho Chi Minh City, Vietnam, and we are responsible for the personal data described here.
For any question about this policy or your data, write to [email protected].
02What we collect
On emvoox.com
- Contact form. Your name, email, phone number, company (optional), the topic you choose and your message. The form sends them to our team mailbox by email; the website keeps no copy.
- Spam protection. To allow only a few messages per sender each hour, the form notes the times of recent messages under a one-way hash of your IP address, never the address itself.
- Preferences. Your language and your light or dark theme are saved in your own browser. They are not sent to us.
- Technical logs. Like any website, our hosting providers record technical details of each request, such as IP address, browser, page and time, to deliver the site and protect it from abuse.
In Emvoox Studio
- Your account. Your name, your email address and whether it is confirmed, your role and approval status, and when you joined, were approved and last signed in. If you sign in with a password, we keep only a one-way hash of it.
- Sign-in with GitHub. Your GitHub name, user ID, username, profile picture and primary verified email, and whether you are a member of the Emvoox organisation on GitHub, whose members are approved automatically. We get no access to your repositories.
- Sign-in with Google. Your name, email address, profile picture and Google account ID.
- Sessions. While you are signed in, we keep a record of the session: when it started and was last used, your IP address and your browser type. It keeps you signed in and helps us spot misuse.
- Your work. The stories, scripts, messages, decisions and audio you create, and your name on the reviews and approvals you make.
03How we use it
- To reply to messages sent through the contact form.
- To create your Studio account, confirm your email, let an admin approve it and keep you signed in.
- To email you about your account: confirming your address, resetting your password and telling you when it is approved. We send no marketing email to Studio accounts.
- To produce the content you ask for in the Studio.
- To keep our services secure: limiting repeated attempts, stopping spam and looking into misuse.
We do not use your data for advertising, and we do not sell or rent it to anyone.
04Services that process data for us
We share data only with the services that run emvoox.com and Emvoox Studio for us, and only what each one needs:
- Cloudflare delivers and protects both sites; every visit passes through its network.
- DreamHost hosts emvoox.com and our email, so contact form messages and account emails pass through its servers.
- Google Fonts serves the typefaces of emvoox.com, so your browser connects to Google when the page loads.
- GitHub and Google sign you in when you choose them. Their own privacy policies cover your accounts with them.
- AI model providers (through WaveSpeed, for example models from Google, ElevenLabs and MiniMax) receive the text needed to write scripts and generate voices when you work in the Studio, such as stories, chat messages and scripts. Your account details are not part of these requests.
Studio accounts and your work are stored on a server that Emvoox operates. Some of the providers above process data outside Vietnam, including in the United States.
06How long we keep it
- Contact messages: as long as we need them to answer you and follow up.
- Studio accounts: until you ask us to delete yours or an admin removes it. Deleting an account also deletes its sessions, its unused email links and its connected GitHub or Google sign-ins.
- Sessions end when you sign out or after 30 days. Email links work once and expire after 48 hours (confirming an address) or 60 minutes (resetting a password).
- Your work stays with the production it belongs to after an account is removed. Tell us if you want something taken out.
07Your rights
You can ask us to tell you what personal data we hold about you, give you a copy, correct it, delete it, or stop or limit how we use it. Where we rely on your consent, you can withdraw it at any time; this does not affect what was done before.
Write to [email protected], ideally from the address you use with us. We may ask you to confirm it is you before we act on a request.
If you think we have mishandled your data, you can also complain to the data protection authority in your country.
08Security
Both sites are served only over HTTPS. Passwords are stored as salted one-way hashes, and session keys and email links only as hashes. We limit repeated sign-in attempts, and only admins can see the list of Studio accounts. No system is perfectly secure: if a breach affects your data, we will tell you.
09Children
Our services are made for professionals and partners, not for children. We do not knowingly collect personal data from anyone under 16.
10Changes to this policy
When our practices change, we update this page and the date at the top. If a change matters for Studio accounts, we will also tell account holders.
11Contact
Emvoox · Ho Chi Minh City, Vietnam
[email protected]