Privacy Policy

Last updated 31 August 2026

Voquo is a tool for running a trade business, so it holds business records: your quotes, your invoices, your customers’ details. This page says exactly what we hold, where it goes and when it gets deleted, in plain English. No surprises is the whole point.

Who we are

Voquo (voquo.io) is run from Scotland, United Kingdom. For anything about your data, email hello@voquo.io.

The data we hold

Your account. Your name, email address, company name and the business details you add: address, phone, VAT number, bank details for your invoices, logo, your prices and templates.

Your business records. The quotes, estimates, invoices, certificates and job notes you create. These include your customers’ personal details: names, addresses, email addresses and phone numbers.

Your costs and receipts. If you use Records, we hold the photographs you take of receipts and invoices, along with what was read from them: the shop, the date, the amount, the VAT, the category and any job you link them to. We also hold costs you type in yourself and any business mileage you record. Receipt images are stored privately and are readable only by your own account and the people you have invited to it. They are never public and never shared.

A note on whose data that is. Your customers are your customers. For their details, you are the data controller and Voquo is your data processor: we store and process those details only to do what you ask the app to do, such as sending a quote to the person it is addressed to. We never contact your customers for our own purposes and we never sell data to anyone.

Voice recordings

When you speak a job, the recording is sent to a third-party speech-to-text service to be turned into a transcript, and the transcript is used to build your document. Recordings are used to produce your transcript and are not used by us for anything else. You always see the words before anything is priced or sent.

AI processing

The text of your jobs is processed by an AI service to draft estimates and answer your questions about your own work. This processing runs on your instructions and its output goes only to you.

When you photograph a receipt, the image itself is sent to an AI service to be read, so the shop, date, amount and VAT can be filled in for you. What it reads is a suggestion: nothing counts towards your figures until you have looked at it. The image is not used to train anyone’s model.

How Voquo learns

Your account learns from you. The prices you correct, the templates you shape and the way you run your jobs are remembered in your account and used to draft your next document more accurately. That memory serves your account and no one else’s.

Separately, we keep and use information in aggregated, anonymised form, with names, contact details and anything else that could identify you or your customers removed, to improve Voquo and to build new features, such as pricing benchmarks and smarter drafting. Anonymised like this, it can no longer identify anyone, so it is no longer personal data and may be kept after your account closes. Your customers’ personal details are never used for this: Voquo learns from patterns, not from people.

Services we rely on

Voquo runs on established infrastructure providers: our database and authentication run on Supabase, the site and its functions run on Netlify, transactional email is sent through Resend, and card payments are handled by Stripe. Your card details go directly to Stripe and never touch Voquo’s servers. Each provider processes data only as needed to provide their service to us.

Email records

When Voquo sends an email for you, a quote, an invoice, a follow-up, a reminder, we keep a delivery log (who it went to, the subject, whether it sent) so you have a record and so we can diagnose failed sends.

Analytics and IP addresses

We count visits to our own pages with our own beacon. No tracking cookies, no third-party analytics, no advertising pixels. Where an IP address is processed for counting, it is stored only as a salted hash, which cannot be turned back into the address. Plain IP addresses are logged briefly for rate limiting and abuse prevention on email sending and AI requests.

How long we keep it

Your data stays as long as your account does. If you cancel, we keep it for 15 months and then delete it permanently by an automatic daily process. Fifteen months is deliberate: it covers a full tax year plus the filing that follows it, so cancelling does not cost you the records you may still need.

When that point is reached, everything goes: your quotes, invoices, certificates, customers, notes, prices, costs, receipt photographs and your sign-in itself. Nothing that could identify you or your customers is kept back. The only thing that can outlast deletion is the anonymised patterns described in How Voquo learns, which cannot be traced to you or to them.

If you want it gone sooner, email us and we will delete it. If you want to keep it, export it from inside the app before you go. Keeping records for as long as the law requires is your responsibility, not ours, and exporting is how you do that.

Your rights

Under UK data protection law (UK GDPR and the Data Protection Act 2018) you can ask us for a copy of your data, ask us to correct it, ask us to delete it, and object to or restrict how it is processed. Email hello@voquo.io and we will act on it. You can also complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you raised it with us first so we can fix it.

Changes

If this policy changes in a way that matters, we will say so plainly on this page and update the date at the top. We will not quietly weaken it.