Privacy Policy
Last updated: January 11, 2026
Voxl ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website voxl.art and use our services.
Please read this privacy policy carefully. By using our services, you consent to the practices described in this policy.
Information We Collect
Information You Provide
- Email Address: When you join our waitlist, subscribe to updates, or place an order.
- Shipping Information: Name, street address, city, state, postal code, and country when you make a purchase.
- Photos: Images you upload to create your sculpture design.
- Feedback: Any revision requests or communications you send us.
Payment Information
We use Stripe to process payments. Your payment card information is sent directly to Stripe and is never stored on our servers. Stripe is PCI-DSS compliant and handles your payment data securely. We receive only confirmation of payment status and a transaction ID.
Automatically Collected Information
We collect minimal technical data necessary to operate our website, including browser type and basic session information. We do not use tracking cookies or third-party analytics services for behavioral advertising.
How We Use Your Information
We use your information for the following purposes:
- Order Fulfillment: To process your order, create your custom sculpture design, and ship your kit.
- Communication: To send order confirmations, design approvals, shipping updates, and building instructions.
- Pre-Launch Updates: If you join our waitlist, to send you information about our Kickstarter campaign and product launch.
- Customer Support: To respond to your inquiries and provide assistance.
- Service Improvement: To understand how our service is used and make improvements.
How We Handle Your Photos
Photos you upload are used solely to create your custom sculpture design. Your photos are:
- Stored securely in our cloud storage system
- Processed by AI services to generate your 3D model
- Reviewed by our team to ensure quality
- Never shared publicly or used for marketing without your explicit consent
- Retained for the duration of your order and a reasonable period afterward for customer support
You may request deletion of your photos at any time by contacting us.
Third-Party Services
We use the following third-party services to operate our business:
- Stripe: Payment processing. Stripe Privacy Policy
- Supabase: Database and file storage. Supabase Privacy Policy
- Resend: Transactional email delivery. Resend Privacy Policy
- MailerLite: Marketing email communications. MailerLite Privacy Policy
- fal.ai / Tripo3D: AI-powered 3D model generation from your photos.
These services have their own privacy policies governing their use of your data.
Email Communications
Transactional Emails
If you place an order, you will receive transactional emails including order confirmation, design approval requests, and shipping notifications. These are necessary to fulfill your order.
Marketing Emails
If you join our waitlist or opt in to marketing communications, you will receive updates about our Kickstarter campaign and product news. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly. We process unsubscribe requests within 72 hours.
We will never sell your email address to third parties or send you unsolicited marketing without your consent.
Data Retention
We retain your personal information as follows:
- Order Data: Retained for 7 years for legal and accounting purposes.
- Photos and Models: Retained for 1 year after order completion, then deleted unless you request earlier deletion.
- Email List Subscribers: Until you unsubscribe or request deletion.
- Communication Records: Retained for 3 years for customer support purposes.
Your Privacy Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate information.
- Deletion: Request deletion of your personal data.
- Portability: Request your data in a portable format.
- Opt-Out: Opt out of marketing communications at any time.
- Withdraw Consent: Withdraw consent where processing is based on consent.
To exercise these rights, please contact us at privacy@voxl.art. We will respond to your request within 30 days.
For European Union Residents (GDPR)
If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):
- We process your data based on consent (for marketing) or contract performance (for orders).
- You have the right to lodge a complaint with your local data protection authority.
- We only transfer data outside the EU using appropriate safeguards.
For marketing communications, we will only email you if you have actively opted in by providing your email address and consenting to receive updates.
For California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: You can request information about what personal data we collect and how we use it.
- Right to Delete: You can request deletion of your personal data.
- Right to Opt-Out: You can opt out of the sale or sharing of your personal information. Note: We do not sell your personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise your CCPA rights, contact us at privacy@voxl.art or call us at the number provided below.
Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (HTTPS)
- Secure cloud storage with access controls
- PCI-compliant payment processing through Stripe
- Limited access to personal data on a need-to-know basis
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: privacy@voxl.art
- Website: voxl.art