Security and your data

In short: your writing and your data are private, encrypted, and yours. We never use your content to train shared models, we never sell it, and you can export or delete everything at any time.

VoiceMoat is built on the assumption that creators are (rightly) protective of their voice and their data. Here is exactly how we handle both.

Your writing stays yours

We never use your posts, your voice profile, or anything you generate to train shared models, to improve other customers' experiences, or to sell to third parties. Your writing is used to serve you, and nothing else.

Encryption

• In transit: everything moves over TLS 1.3.
• At rest: your data is encrypted with AES-256 in managed Postgres.
• Secrets: API keys and tokens are held in an encrypted store, never committed to code.

Access control

Your data is isolated at the database level with row-level security, so you can only ever access your own. The access tokens VoiceMoat stores to read your posts and post for you are kept securely and are never exposed through the API.

Isolation between profiles

Each profile's voice, drafts, memory, and analytics are separate. Nothing crosses between your profiles, and nothing crosses between different users. A social account can only be connected to one VoiceMoat login at a time.

Deleting your data

You can delete your account from Settings at any time. Your voice profiles, drafts, and analytics are hard-deleted (within 30 days), and an export is available beforehand if you want your data first. See Account settings.

What we do not do

• No advertising or cross-site ad-targeting cookies.
• No selling your data, ever.
• No shadow profiles or hidden tracking.

Payments

Payments are handled by Dodo Payments as merchant of record. VoiceMoat never stores your card details; Dodo processes the payment and appears on your statement. See Cancel and refund.

LinkedIn and the extension

On LinkedIn, the Chrome extension reads data (your posts, your analytics, your home feed) from your own logged-in session. It never reads or transmits your LinkedIn login token, and it only ever reads your own data. It does not post on your behalf. See Chrome extension.

Reporting a security issue

Found a vulnerability? Email [e-mail]. We respond quickly (under 24 hours on weekdays), and researchers acting in good faith are welcome.

Common questions

Is my writing used to train your AI for other people? No. Your writing trains only your own voice profile. It is never used to train shared models or to help anyone else's account.

What happens to my data if I delete my account? It is permanently removed. Your voice profiles, drafts, and analytics are hard-deleted within 30 days. Export first if you want a copy.

Do you store my card? No. Dodo Payments handles payment as merchant of record; we never see or store your card details.

Is the LinkedIn extension safe? Yes. It reads only your own data from your own session and never touches your login token.