Privacy Policy

Effective Date: March 6, 2026 Last Updated: March 6, 2026

ChainPay Solutions EOOD ("we," "us," or "our") operates the Voidara application ("Voidara," "the App," or "the Service"), an AI-powered assistant available on iOS, Android, and the web. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use Voidara.

By using Voidara, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

Data We Collect
How We Collect Data
How We Use Your Data
Third-Party Services
AI Data Processing – Important Disclosures
Data Retention
Your Rights
Security Measures
Children's Privacy
International Data Transfers
Cookies and Tracking
Changes to This Privacy Policy
Legal Basis for Processing (GDPR)
Data Controller
Contact Us

1. Data We Collect

1.1 Account Information

When you create an account, we collect:

Email address (provided directly or via Google Sign-In / Apple Sign-In)
Display name
Profile identifier (a unique user ID assigned by our system)
Authentication tokens (managed securely; never stored in plaintext)

1.2 Chat Messages and Conversations

When you use the AI assistant, we collect:

Chat messages you send and the AI-generated responses
Conversation metadata (timestamps, conversation titles, selected AI model)
Search queries performed within the App

1.3 Uploaded Files

When you upload files to use with the AI assistant, we collect:

File content (documents, images, and other files you upload)
File metadata (file name, file type, file size, upload timestamp)

1.4 Audio Recordings

When you use voice input or text-to-speech features, we collect:

Audio recordings of your voice input (speech-to-text)
Text-to-speech requests (the text you request to be converted to audio)

1.5 Device and Usage Data

We automatically collect certain technical information:

Device type and model
Operating system and version
App version
IP address
Browser type (for web access)
General usage patterns (features used, session duration)

We do not collect precise geolocation data.

2. How We Collect Data

2.1 Information You Provide Directly

We collect data that you actively submit through the App, including:

Account registration details
Chat messages and prompts
Files you upload
Voice recordings when using speech input
Text submitted for text-to-speech conversion
Feedback or support requests

2.2 Information Collected Automatically

When you use the App, we automatically collect:

Device and browser information via standard HTTP headers
Usage analytics (session start/end, feature interactions)
Error logs and crash reports for stability improvements

2.3 Information from Third-Party Authentication Providers

When you sign in with Google or Apple, we receive:

Your email address
Your display name
A unique identifier from the authentication provider

We do not receive or store your Google or Apple account password.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

Purpose	Data Used
AI Processing	Chat messages, uploaded files, and audio recordings are sent to our AI service to generate responses
Account Management	Email, display name, and authentication tokens to maintain your account
Conversation History	Chat messages and metadata to allow you to revisit past conversations
File Management	Uploaded files are stored so they can be referenced in conversations
Text-to-Speech	Text content is sent to our TTS provider to generate audio output
Service Improvement	Aggregated, anonymized usage data to improve App performance and features
Security	Device data and IP addresses for fraud prevention and abuse detection
Customer Support	Account and usage information to assist you with support requests
Legal Compliance	Any data as required to comply with applicable laws and regulations

4. Third-Party Services

Voidara relies on the following third-party services to operate. Your data is shared with these services only as necessary to provide the functionality described:

Service	Provider	Purpose	Data Shared	Data Location
Azure OpenAI Service	Microsoft Corporation	AI processing of chat messages and uploaded content	Chat messages, uploaded file content, conversation context	Sweden Central, EU
Azure Cosmos DB	Microsoft Corporation	Primary database for account data, conversations, and messages	Account information, chat messages, conversation metadata	Sweden Central, EU
Azure Blob Storage	Microsoft Corporation	Storage of uploaded files and generated content	Uploaded files, file metadata	Sweden Central, EU
ElevenLabs	ElevenLabs, Inc.	Text-to-speech audio generation	Text content submitted for TTS conversion	United States
Google Sign-In	Google LLC	User authentication	Email, display name, authentication tokens	United States
Apple Sign-In	Apple Inc.	User authentication	Email, display name, authentication tokens	United States

All third-party services are bound by their respective data processing agreements and privacy policies. We select providers that maintain appropriate security certifications and data protection standards.

5. AI Data Processing – Important Disclosures

5.1 Your Data Is NOT Used to Train AI Models

Voidara uses Microsoft Azure OpenAI Service under our own Azure subscription. Under the Microsoft Azure data processing terms:

✓Your prompts (inputs) and completions (outputs) are NOT available to other customers.
✓Your prompts and completions are NOT available to OpenAI.
✓Your prompts and completions are NOT used to train, retrain, or improve Azure OpenAI foundation models.
✓Your prompts and completions are NOT used to train, retrain, or improve any Microsoft or third-party models.

Your conversations with Voidara remain private and are used solely to provide you with AI-generated responses in real time.

5.2 Your Data Is NOT Sold

We do not sell, rent, lease, or trade your personal data to any third party for any purpose, including marketing, advertising, or data brokerage.

6. Data Retention

We retain your data as follows:

Data Type	Retention Period
Account information	Retained for the lifetime of your account. Deleted within 30 days of account deletion request.
Chat messages and conversations	Retained for the lifetime of your account. You may delete individual conversations at any time. Deleted within 30 days of account deletion request.
Uploaded files	Retained for the lifetime of your account. You may delete individual files at any time. Deleted within 30 days of account deletion request.
Audio recordings (speech-to-text)	Processed in real time and not persistently stored after transcription.
Text-to-speech requests	Processed in real time by ElevenLabs and not persistently stored by Voidara after audio delivery.
Device and usage data	Retained for up to 12 months for analytics and security purposes.
Server logs	Retained for up to 90 days for debugging and security purposes.

When data is deleted, it is removed from our active systems. Backup copies may persist for up to an additional 30 days before being permanently purged.

7. Your Rights

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with applicable data protection laws, you have the following rights regarding your personal data:

7.1 Right of Access

You have the right to request a copy of the personal data we hold about you.

7.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

7.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data. You can delete individual conversations and files directly within the App, or request complete account deletion, which will remove all associated data within 30 days.

7.4 Right to Data Portability

You have the right to request an export of your personal data in a structured, commonly used, machine-readable format.

7.5 Right to Restrict Processing

You have the right to request that we limit the processing of your personal data under certain circumstances.

7.6 Right to Object

You have the right to object to certain types of data processing, including processing based on legitimate interests.

7.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7.8 How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days. We may request verification of your identity before processing your request.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in your jurisdiction.

8. Security Measures

We implement industry-standard technical and organizational measures to protect your personal data:

8.1 Encryption

At rest: All data stored in Azure Cosmos DB and Azure Blob Storage is encrypted using AES-256 encryption.
In transit: All data transmitted between your device and our servers, and between our servers and third-party services, is encrypted using TLS 1.2 or higher.

8.2 Infrastructure Security

All infrastructure is hosted on Microsoft Azure in the Sweden Central region within the European Union.
Access to production systems is restricted and requires multi-factor authentication.
Network security groups and firewalls restrict access to backend services.

8.3 Authentication Security

Passwords are hashed using industry-standard algorithms and are never stored in plaintext.
OAuth tokens for Google and Apple Sign-In are managed securely and rotated regularly.
Session tokens have defined expiration periods.

8.4 Operational Security

Regular security reviews of application code and infrastructure.
Logging and monitoring of access to sensitive systems.
Incident response procedures for potential data breaches.

While we strive to protect your personal data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Children's Privacy

Voidara is not intended for use by children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children under 13.

If we become aware that we have collected personal data from a child under 13, we will take steps to delete that data as promptly as possible. If you believe a child under 13 has provided us with personal data, please contact us at [email protected].

10. International Data Transfers

Our primary infrastructure is located in the Sweden Central region of Microsoft Azure, within the European Union. However, some third-party services (ElevenLabs, Google, Apple) may process data in the United States.

Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data processing agreements with all third-party providers
Verification that recipients maintain adequate data protection standards

11. Cookies and Tracking

11.1 Web Application

When accessing Voidara via the web, we use:

Essential cookies for authentication and session management (required for the Service to function)

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

11.2 Mobile Application

The mobile application does not use cookies. Authentication is managed via secure token storage on your device.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

Update the "Last Updated" date at the top of this document
Notify you via email or in-app notification for significant changes

We encourage you to review this Privacy Policy periodically. Your continued use of Voidara after changes are posted constitutes your acceptance of the updated policy.

13. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

Legal Basis	Applicable Processing
Consent	Processing of chat messages by AI services; text-to-speech processing; optional analytics
Performance of a Contract	Account creation and management; providing the AI assistant service; storing your conversations and files
Legitimate Interests	Security monitoring; fraud prevention; service improvement through aggregated analytics
Legal Obligation	Compliance with applicable laws and regulations; responding to lawful requests from authorities

14. Data Controller

The data controller for personal data processed through Voidara is:

ChainPay Solutions EOOD

Zapadna Industrial Zone Star Domostroitlen Kombi

ul. "Usta Kolyu Ficheto"

9009 Varna, Bulgaria

Email: [email protected]

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]

We aim to respond to all inquiries within 30 days.