Privacy Policy

Last updated 2026-09-08. We collect the minimum we need to operate VOCO.

What we collect

Account info (email, name, language). Profile content (bio, photos, themes). Booking inquiries you receive. Anonymous, cookieless profile view counts. A strictly-necessary login/session cookie to keep you signed in. If you connect a calendar, the corresponding access token.

What we don't collect

We never sell data. No ad tracking. No third-party trackers and no third-party analytics at all: no Facebook pixel, no Google Analytics.

Cookies and audience measurement

VOCO sets one strictly-necessary login/session cookie so you stay signed in. As an essential cookie it is exempt from consent. Profile views are counted server-side with an anonymized, hashed identifier that sets no cookie and cannot identify you. There is no advertising tracker and no cookie-based analytics: no Google Analytics, no Facebook pixel, no third-party trackers.

Connecting your calendar

Google Calendar is an option on the Pro and Elite plans. If you turn it on, VOCO requests a single scope: https://www.googleapis.com/auth/calendar.events. We use it only to write events you created in VOCO into your calendar, and only when you ask us to send them. We pass the title, the location, and the start and end times. We never read your calendar and never retrieve any other event. This data is not used for advertising or to train AI models. We do not sell it and we pass it to no third party. We keep only the refresh token, encrypted in Supabase Vault, and the id of each event we created, so we can update it later. You can break the connection at any time from /settings/integrations, which deletes the token for good. Also revoke access at myaccount.google.com/permissions to withdraw the grant on Google's side. Events already written stay in your calendar, and you can delete them yourself. VOCO's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including its Limited Use requirements. Apple Calendar works differently: VOCO connects to no account and generates a secret ICS subscription link containing your VOCO events. Disconnect from the same screen to revoke it.

Your rights (GDPR)

Access, correct, export, delete. One click in /settings/privacy. Email privacy@getvoco.ai for requests.

Where data lives

EU-only infrastructure (Vercel + Railway/Render EU regions). PostgreSQL with pgvector for AI features.