Privacy Policy

1Personal information we collect

Information you give us:

Contact data, such as your name, email address, phone number, and company name.

Communications data, such as the messages you send through our contact form, by email, by phone, or through WhatsApp, and our replies.

Account data, such as the names, email addresses, roles, and permissions needed to create and manage user accounts in our cloud software.

Transaction data, such as the plan you subscribe to, invoices, and payment status. For VoraClip and ErpVora, Paddle collects your payment details, which we never see. For VoraCashier, we arrange payment with you directly and do not store card details.

Information collected automatically: when you visit the Site, our hosting and security providers record technical data such as your IP address, browser and device type, pages requested, and the date and time of the request, to deliver and secure the Site. When you start a VoraCashier trial, we record the IP address used, to prevent abuse of free trials. The Site does not use analytics, advertising, or session-replay tools.

Customer data: business customers store their own records in our cloud software, such as customer and supplier details, invoices, inventory, sales, and employee information ("Customer Data"). We process Customer Data on the customer’s behalf, as described below.

2How we use personal information

To provide our services: responding to inquiries, preparing quotes and demos, creating and managing accounts, delivering our software, and providing support.

To communicate with you about our services, including account notices, invoices, security alerts, and replies to your messages.

To bill for subscriptions and services and keep the business and tax records the law requires.

To keep our systems secure and to prevent fraud and misuse.

To comply with the law and enforce our agreements.

We send marketing messages only if you have separately agreed to receive them, and you can withdraw that consent at any time. We do not sell personal information, share it for targeted advertising, or use it for automated decisions that have legal or similarly significant effects on you.

3Summary of what we collect and why

4Customer Data in our cloud software

We process Customer Data on behalf of the customer, according to its instructions and our agreement with it. The customer decides what to store and is responsible for having the right to do so. If your information is held in a customer’s workspace, please contact that customer first with any request about it. Business customers can ask us for a data processing addendum (DPA).

Each customer’s workspace is logically isolated within shared database infrastructure, and access is controlled by user roles and permissions.

5AI features

Some of our software includes AI features, such as an assistant that answers questions about a customer’s records. When a user asks the assistant something, the request and the relevant records may be sent to an AI model provider (OpenAI, Anthropic, or Google) to generate the answer. AI features work within the signed-in user’s permissions. We do not use Customer Data to train AI models, and we send AI providers only the data needed for the request.

6How we share personal information

Service providers that run our services for us: Laravel Cloud and AWS (hosting), Google Workspace (email), Postmark (transactional email, including contact-form messages), Cloudflare (security and content delivery), and OpenAI, Anthropic, and Google (AI features).

Paddle.com, the Merchant of Record for VoraClip and ErpVora, which collects payment details directly and shares with us the order details we need to provide the product.

Third-party services that a customer chooses to connect to our software.

Professional advisers, such as lawyers and accountants.

Authorities, when required by a binding legal demand and only to the extent required, or when needed to protect rights, property, or safety.

A buyer or successor in a merger, acquisition, or sale of our business.

We aim to notify customers 30 days before we change a major service provider that processes Customer Data.

7Cookies and Do Not Track

The Site stores your language and region choice in your browser and may receive security cookies from Cloudflare. It does not use advertising or analytics cookies. Our Cookie Notice has the details. Because the Site does not track you across other websites, it does not respond differently to "Do Not Track" signals.

8Retention and deletion

We keep personal information for as long as we need it for the purposes above, including to provide our services, meet legal, accounting, and tax requirements, resolve disputes, and enforce our agreements. When we no longer need it, we delete or anonymize it.

We keep Customer Data, including AI assistant conversations, after a subscription ends so the customer can return to it. Customers can ask at any time for an export of their Customer Data or for its deletion. We delete it within 30 days of a verified request, except records the law requires us to keep.

9Security

We use technical and organizational safeguards designed to protect personal information. Support access is limited to authorized personnel, and test environments use synthetic or de-identified data unless a customer agrees otherwise. If we confirm a security incident that the law requires us to report, we aim to notify affected customers within 72 hours, or sooner where the law requires. No system is completely secure, and we cannot guarantee the security of your information.

10International processing

We are registered in the United States, operated from Egypt, and use service providers in other countries. Your information may therefore be processed outside the country where it was collected, including in places whose privacy laws may be less protective than your own. Where the law requires, we use appropriate safeguards for these transfers.

11Your choices and rights

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy of it, to correct or delete it, to object to or restrict some uses, and to appeal if we decline your request. You will not be treated differently for exercising these rights.

To make a request, email privacy@voratechllc.com. We may ask you to confirm that you control the email address or account concerned before we act, and an authorized agent may need to show that you permitted the request. We aim to reply within 7 business days, complete verified deletion requests within 30 days, and deliver data exports within 15 business days. You may also have the right to complain to your local privacy regulator.

You can opt out of marketing emails at any time with the unsubscribe link or by contacting us. Service messages, such as invoices and security notices, will continue while you use our services.

12Children

Our Site and products are for businesses and adults and are not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

13Changes to this policy

We may update this Privacy Policy. We will post the updated version on this page with a new date, and we will give additional notice of material changes where appropriate.

14Contact

For questions about this document, contact us: