> For the complete documentation index, see [llms.txt](https://docs.voicemoat.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.voicemoat.com/account/security-and-your-data.md).

# Security and your data

**In short:** your content and your data are private, encrypted, and yours. We never use your content to train shared models, we never sell it, and you can export or delete everything at any time.

VoiceMoat is built on the assumption that creators are (rightly) protective of their voice and their data. Here is exactly how we handle both.

**Your content stays yours**

{% hint style="success" %}
We never use your posts, your voice profile, or anything you generate to train shared models, to improve other customers' experiences, or to sell to third parties. Your content is used to serve you, and nothing else.
{% endhint %}

**Encryption**

* **In transit:** everything moves over TLS 1.3.
* **At rest:** your data is encrypted with AES-256 in managed Postgres.
* **Secrets:** API keys and tokens are held in an encrypted store, never committed to code.

**Signing in**

VoiceMoat signs you in with **Google**. We never see or store your Google password, and connecting Twitter or LinkedIn is a separate authorization that also never shares your password with us.

**Access control**

Your data is isolated at the database level with row-level security, so you can only ever access your own. The access tokens VoiceMoat stores to read your posts and post for you are kept securely and are **never exposed through the API**.

That holds for the assistant connection too. When you connect VoiceMoat to an AI assistant, the assistant receives a token for **VoiceMoat**, and it never sees your Twitter or LinkedIn tokens. Those stay on our side and are only ever used by us, to do the thing you asked for.

**Isolation between profiles**

Each profile's voice, claim bank, edit history, drafts, memory, and analytics are separate. Nothing crosses between your profiles, and nothing crosses between different users. A social account can only be connected to one VoiceMoat login at a time.

**Your claim bank and your edits**

Your claim bank quotes your own published posts, word for word, so you can see where each claim came from. When you change a draft audenAI wrote, the before and after are kept so audenAI can learn from what you changed. Both belong to that one profile, are never shared with anyone else, and are never used to train shared models. You can remove any claim or rule, and you can pause learning from edits with **Learn from my edits** in **Voice Lab → Teach audenAI → Your rules**.

**Deleting your data**

{% hint style="info" %}
You can delete your account from **Settings** at any time. Scheduled posts are cancelled and any connected assistant loses access straight away. Signing back in with the same Google account within 30 days restores your account; after that, your voice profiles, drafts, and analytics are permanently deleted. An **export** is available beforehand if you want your data first. See Account settings.
{% endhint %}

**What we do not do**

* No advertising or cross-site ad-targeting cookies.
* No selling your data, ever.
* No shadow profiles or hidden tracking.

**Payments**

Payments are handled by **Dodo Payments** as merchant of record. VoiceMoat never stores your card details; Dodo processes the payment and appears on your statement. See Cancel and refund.

**LinkedIn and the extension**

On LinkedIn, the Chrome extension reads data (your posts, your analytics, your home feed) from **your own logged-in session**. It never reads or transmits your LinkedIn login token. You can turn off home-feed reading with **Grow the shared feed** in the extension's popup.

When you press the audenAI mark in a LinkedIn comment box, the extension reads the post, and the comment you are replying to if there is one, from the page, and sends that text to VoiceMoat to write the draft. It reads nothing for this until you press the mark.

The extension **never posts on LinkedIn**: no comments, no scheduling, no bulk commenting. It only fills the box you opened, and you press **Comment** or **Reply** yourself. See Chrome extension.

**Talking to audenAI**

{% hint style="success" %}
VoiceMoat never receives, records, or stores audio. When you talk to audenAI, your **browser** turns your speech into text, and VoiceMoat receives only that text, handled like anything you type. When audenAI reads a reply aloud, your browser does that too.
{% endhint %}

Your browser's own speech service may process the audio or the text being read, for example Google in Chrome. That happens between you and your browser, under the browser maker's privacy policy. See Talking to audenAI.

**Posting from audenAI chat**

audenAI chat can post your own posts to Twitter or LinkedIn, but only after it shows a card with the exact text and the account, and you tap **Post**. It never posts a reply to someone else, and a post that already went out in the last two minutes is not posted twice. Spoken requests never press the card for you. See Ask audenAI.

**Connecting an assistant**

Connecting VoiceMoat to an AI assistant gives that assistant access to your VoiceMoat account: your voice profile, your posts, your analytics, and the ability to draft. It reaches your own account and nothing else. It cannot see another customer's data, and it cannot reply to other people's posts or read comments or messages. The only content by other people it can read is the public LinkedIn posts in Inspiration, and the assistant is told to treat that text as material, never as instructions.

It **can post on your behalf**, so it works differently on purpose:

* Posting never happens on a single request. The first one returns a preview of the exact text and the account it would go to, and posts nothing.
* Publishing needs a second request carrying a confirmation code tied to that exact text and that account. Change either and it is refused.
* A confirmation code works once, so one approval can never post twice.
* Most assistants also ask your permission before running a tool that posts. That prompt is what puts a person in the loop, so leave it on.

Removing the connector in your assistant ends that assistant's access immediately. To stop every assistant at once, use **Disconnect** in Settings → Assistants. Neither one disconnects your Twitter or LinkedIn accounts, and neither affects anything already posted or scheduled. See Connect VoiceMoat to an assistant.

**Reporting a security issue**

Found a vulnerability? Email [**founder@voicemoat.com**](mailto:founder@voicemoat.com). We respond quickly (under 24 hours on weekdays), and researchers acting in good faith are welcome.

**Common questions**

**Is my content used to train your AI for other people?** No. Your content trains only your own voice profile. It is never used to train shared models or to help anyone else's account.

**What happens to my data if I delete my account?** For 30 days you can restore it by signing back in with the same Google account. After that it is permanently removed: your voice profiles, drafts, and analytics are deleted for good. Export first if you want a copy.

**Do you store my card?** No. Dodo Payments handles payment as merchant of record; we never see or store your card details.

**Is the LinkedIn extension safe?** Yes. It reads from your own session, never touches your login token, and never posts. To write a comment, it reads only the post and the comment you are replying to, and only when you press the audenAI mark.

**What can an assistant do once I connect it?** Only what you could do yourself in VoiceMoat, on your own account. It can read your voice profile, posts, and analytics, and it can draft. It can post, but only after showing you the exact text and the account first and receiving a second confirmation. It cannot reach anyone else's data, and it never receives your Twitter or LinkedIn tokens.

**Does VoiceMoat record my voice when I talk to audenAI?** No. Your browser turns speech into text, and VoiceMoat only ever receives the text.