Cookies Policy

Effective date: 10 June 2026 · Last updated: 10 June 2026 · Version: 1.0

1. What is a Cookie?

A cookie is a small text file that a website stores on your device when you visit. Cookies let the site remember things like whether you are signed in, which workspace you last visited, your theme preference, and your language. We also use a small number of similar technologies (local storage, session storage) for the same purposes. In this policy "cookies" means all of these together.

2. How Voxy Uses Cookies

Voxy uses cookies sparingly. Every cookie we set is described below by category, name, purpose, and lifetime. We do not set advertising cookies, do not use Google Analytics, and do not sell or share information collected from cookies for cross-context behavioral advertising.

3. Cookie Categories

3.1 Strictly Necessary (always on)

These cookies are required for the Service to function. They cannot be turned off — without them you cannot sign in or stay signed in. We do not need consent for these under EU PECR and similar laws because they are strictly necessary to provide the service you requested.

• voxy_at — short-lived authentication token. Lifetime: 15 minutes. HttpOnly, Secure, SameSite=Lax.
• voxy_rt — refresh token used to renew your session. Lifetime: 30 days. HttpOnly, Secure, SameSite=Strict.
• voxy_ws — your currently active workspace identifier. Lifetime: 30 days. HttpOnly, Secure, SameSite=Lax.
• voxy_csrf — CSRF protection token, set per session.
• voxy_consent — records your cookie-consent banner choices. Lifetime: 12 months.

3.2 Functional (off until consented)

Functional cookies remember preferences that improve your experience but are not strictly necessary. They are set only after you accept them in the cookie banner.

• voxy_theme — your light / dark theme choice. Lifetime: 12 months.
• voxy_lang — your preferred interface language. Lifetime: 12 months.
• voxy_dialer_mode — your last-used human-dialer mode and number-pad layout. Lifetime: 12 months.
• voxy_table_density — your dashboard table density preference. Lifetime: 12 months.

3.3 Analytics (off until consented)

We use self-hosted, privacy-respecting analytics (Plausible / Umami) to understand which features are used and where users get stuck. These tools do not set cross-site identifiers, do not track you across other websites, and aggregate data so individual visitors cannot be identified. Analytics cookies are set only after you accept them in the cookie banner.

• _pa_session (Plausible / Umami) — short-lived session identifier for de-duplicating page views. Lifetime: 24 hours.

3.4 Marketing (none)

Voxy does not currently set marketing or advertising cookies. We do not run ad campaigns that drop pixels on our website, and we do not load social-media tracking scripts.

4. Third-Party Cookies

We keep third-party cookies to an absolute minimum:

• Payment processor (Stripe) — when you reach a checkout page, the embedded payment frame may set short-lived cookies needed to process the transaction and prevent fraud. These cookies are governed by the processor's own privacy policy.
• Telnyx WebRTC — when you place a call from the web widget or human dialer, the WebRTC session may set short-lived cookies needed to maintain the voice connection. These cookies are governed by Telnyx's privacy policy.

5. How to Manage Cookies

You have three ways to control cookies on Voxy:

• The cookie consent banner — shown the first time you visit our marketing pages. You can choose "Accept all", "Reject all (non-essential)", or "Customize" to toggle each category.
• The "Cookie preferences" link in the website footer — re-opens the banner at any time so you can change your choices.
• Your browser settings — most browsers let you block or delete cookies. Blocking the strictly-necessary cookies will prevent you from signing in to the Service.

We store your consent choices in our database (see cookie_consent_records) and in the voxy_consent cookie so we can apply them on every page load.

6. Do Not Track and Global Privacy Control

Voxy respects the Global Privacy Control ("GPC") signal: when your browser sends GPC, we treat it as an opt-out of any non-essential cookies and as a CCPA opt-out of sale / sharing (even though we do not sell or share personal information in the CCPA sense). We do not currently react to the legacy "Do Not Track" header because there is no industry consensus on its meaning.

7. Changes to this Cookies Policy

We may update this Cookies Policy from time to time. The effective date at the top of the page always reflects the current version. If we materially change which cookies we set, we will re-prompt you for consent on your next visit.

8. Contact

Questions about cookies: privacy@voxy.pk.