Privacy Policy

Last updated: March 2026

This Privacy Policy explains how Voquo (“we”, “us”, “our”) collects, uses, and protects your personal data in accordance with UK GDPR and the Data Protection Act 2018.

1. Who We Are

Voquo is the data controller for personal data collected through voquo.io. For data-related queries, contact us at .

2. Data We Collect

Account data: Your name, email address, and business details when you register.

Usage data: Your job history, quote and invoice data, client information you enter, and voice transcripts processed through the AI.

Technical data: IP address, device type, browser type, and usage logs for security and service improvement.

Waitlist data: Your email address if you join our waitlist.

3. How We Use Your Data

To provide and operate the Voquo Service
To send quotes, invoices, and client communications on your behalf
To process your subscription and manage your account
To improve and develop the Service
To send service-related communications (receipts, product updates)
To comply with our legal obligations

We will not use your data for unsolicited marketing without your explicit consent. We never sell your data to third parties.

4. Legal Basis for Processing

Contract performance (to provide the Service), legitimate interests (to operate and improve the Service, prevent fraud), legal obligation (to comply with applicable law), and consent (for any optional communications you have opted into).

5. Your Clients’ Data

When you store and communicate with your clients through Voquo, you are the data controller for their personal data. We process that data as your data processor. You are responsible for ensuring you have a lawful basis to process your clients’ data.

6. Data Storage & Security

Your data is stored securely using Supabase, which operates on AWS infrastructure in the EU. All data is encrypted at rest and in transit using TLS encryption. Access is restricted to authorised personnel only.

7. Third-Party Processors

Supabase — database and authentication (EU)
Anthropic — AI processing of voice transcripts (USA; covered by SCCs)
Resend — transactional email delivery
Netlify — hosting and CDN

All third-party processors are bound by data processing agreements.

8. Data Retention

We retain your account data for as long as your account is active. On cancellation, your data is retained for 30 days then permanently deleted. You may request deletion at any time by contacting .

9. Your Rights

Under UK GDPR you have the right to access, correct, delete, restrict, object to, or port your personal data. To exercise any of these rights, contact . You may also lodge a complaint with the ICO at ico.org.uk.

10. Cookies

Voquo uses only essential session cookies required to operate the Service. No tracking, advertising, or analytics cookies. No cookie consent banner is required.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or notice within the Service.

12. Contact

For any privacy-related queries, contact us at .