Voicra

Security

Your data is safe with us

We take data security seriously. Here’s exactly how we protect your voice profiles, writing samples, and account information.

πŸ”

End-to-End Encryption

All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Your voice profiles are never stored in plaintext.

🏒

Isolated Per Account

Your voice profile exists only in your account. No cross-account data access. No shared models trained on your content.

πŸ—‘οΈ

Right to Delete

Delete your account at any time. All your data β€” voice profiles, generated content, samples β€” is permanently purged within 30 days.

πŸ”‘

Secure Authentication

Password hashing via bcrypt, JWT-based session tokens, and optional two-factor authentication. No passwords stored in plaintext.

🌍

AWS Infrastructure

Hosted on Supabase, built on AWS. Enterprise-grade infrastructure with 99.9% uptime SLA, regular backups, and disaster recovery.

πŸ“‹

Minimal Data Collection

We collect only what's needed to run the service. No tracking pixels, no advertising cookies, no third-party analytics sharing.

Technical details

Database & Storage

  • βœ“PostgreSQL database via Supabase (AWS RDS)
  • βœ“Row Level Security (RLS) ensures users can only access their own data
  • βœ“Automatic daily backups with 30-day retention
  • βœ“Point-in-time recovery available for enterprise

Authentication

  • βœ“Email/password authentication via Supabase Auth
  • βœ“Passwords hashed with bcrypt (cost factor 12)
  • βœ“JWT tokens with short expiry β€” automatically refreshed
  • βœ“Session invalidation on logout and password change

AI Processing

  • βœ“Content generation requests are processed ephemerally β€” not stored by AI providers beyond the API call
  • βœ“We use Anthropic Claude for generation; their API does not train on API requests by default
  • βœ“Your voice profile fingerprint is computed locally on our servers β€” not sent to AI providers

Network Security

  • βœ“All traffic encrypted with TLS 1.3
  • βœ“HTTPS enforced β€” HTTP connections are rejected
  • βœ“CORS configured to restrict cross-origin requests
  • βœ“Rate limiting on all API endpoints to prevent abuse

Found a security issue?

We take security reports seriously. If you discover a vulnerability, please disclose it responsibly by emailing us directly. We will acknowledge your report within 48 hours and keep you updated as we address it.

Report a vulnerability β†’