Security and data

Convex stores the database and the files you upload. Vercel serves the website and the application. LangGraph Platform runs the ActVox agent. Render turns pages into PDF, PNG and video files when you export or share them. The full list of providers, and what each one receives, is in the Privacy Policy.

ActVox LLC is a United States company, and these providers are predominantly United States providers. If you use ActVox from outside the United States, your data is transferred there.

The website, the application and the API at api.actvox.com are served over HTTPS. A request over plain HTTP is redirected to HTTPS.

Access tokens for the Google, Telegram and GitHub accounts you connect are encrypted with AES-256-GCM before they are stored, and they are never saved without that encryption.

• Members of the workspace, with the role you give each of them.
• Guests, only on the pages and databases you share with them.
• Anyone with a share link, until you revoke the link.
• Connected agents, only in the workspaces and with the permissions you tick for them (see below).

We do not license your workspace content to anyone for advertising or for training their models. When you use the ActVox agent, the part of your content it needs is sent to a model provider, which handles it under its own terms. The Privacy Policy lists each provider and what it receives.

ActVox agent runs are traced in LangSmith so we can debug them. Email addresses, record identifiers, tokens and keys are removed first, but by default the text of prompts and replies is included. Agents you connect yourself (Claude, ChatGPT, Codex and others) run on their own provider's systems, not ours.

• Read is always included. Every other permission is a separate tick: write, run workspace actions, manage share links, and publish.
• Publish can never be combined with write. A person approves what an agent then sends to a real audience.
• An agent never does more than you can. If your role in a workspace does not allow sharing or publishing, the agent cannot do it there either.
• You can pause, resume or revoke any connection in the app under Connectors. The next call after a revoke is refused.
• An edit made to an outdated version of a page is refused, and the newer content stays.
• Every agent write returns a receipt that names what changed.
• Page history keeps every version. Restoring an old version adds a new one and never rewrites the past.

For each connection we keep a log of the calls it made: the method, the tool name, the result and the time, never the content. The workspace change feed shows who made each change, a person or a named agent, for the last 30 days.

Clerk runs sign-in. You can sign in with an email code or link, a password checked against known breaches, a passkey, or a Google, LinkedIn, GitHub or Vercel account. SAML single sign-on and authenticator-app two-factor sign-in are not available.

• Trash. "Delete forever" and "Empty Trash" wait 30 days. Until then, any editor can restore the item. A workspace owner or admin can choose "Delete now" instead.
• A workspace. Deleting it needs manage access and removes its contents. Billing and usage records are kept for accounting.
• Your account. What it removes and what it keeps is listed in the Privacy Policy.

• The whole workspace: Settings → General → Privacy and data → Export workspace data downloads its pages, agent memory, chat threads and messages, content drafts and reports as one JSON file. Uploaded files are not part of it; download them from the workspace.
• One page: PDF, PNG, video, Word or Markdown.
• One database: CSV or Excel.

A data processing agreement (DPA) is available on request. Write to support@actvox.com.

If you find a security problem, write to support@actvox.com with the steps to reproduce it. Please do not test against other people's workspaces.