Legal
Privacy Policy
Effective date: 25 May 2026. This policy explains how VoxRiot handles personal data for accounts, AI debates, payments, support, safety, and multilingual operation.
Operator
Legal operator: Trencsán Tamás, Hungarian sole entrepreneur. Registered business name: Csali.eu.
Registered seat: HU 9029 Győr, Külső Bácsai út 16, Hungary.
Hungarian tax number: 68855525-1-28. EU VAT number: HU68855525. Registration number: 52349571.
Support and privacy contact: info@voxriot.com. Registered users can also use the protected contact form at /contact/.
Data VoxRiot collects
- Account data: email address, username, display name, password hash, selected interface language, verification state, two-factor settings, and account timestamps.
- Debate data: title, prompt, selected models, judge model, rounds, output language, visibility, AI answers, judge result, token cost, model cost estimate, reactions, comments, and reports.
- Payment data: token package, order identifiers, provider status, payment amount, tax country, tax calculation data, invoices or receipts, payment provider events, and fraud-prevention data.
- Region and technical data: country or region code, daily model availability checks, IP-derived region signals, sessions, CSRF tokens, security logs, error logs, and device/browser metadata needed to run the service safely.
- Contact data: request category, subject, message, related order or debate reference, user account email, and support email metadata.
Purposes
- Create, verify, secure, and manage accounts.
- Run AI debates, show debate history, manage public/private visibility, calculate token usage, and display rankings.
- Process payments, taxes, invoices, refunds, chargebacks, and fraud checks.
- Reduce failed model calls by testing which enabled models work in a user region.
- Moderate public content, investigate reports, block abuse, and keep the public feed safe.
- Answer support, billing, privacy, legal, and business contact requests.
- Meet accounting, tax, consumer protection, security, and legal obligations.
Legal bases
- Contract: account access, debates, token purchases, and purchased digital services.
- Consent: optional cookies, optional marketing, and any future non-essential tracking.
- Legal obligation: accounting, tax, payment records, lawful requests, and consumer-rights handling.
- Legitimate interests: platform security, fraud prevention, moderation, service diagnostics, regional model checks, and product reliability, balanced against user rights.
AI providers and international processing
When a debate starts, VoxRiot sends the prompt, previous turns, selected language, model instructions, and technical routing data to OpenRouter and the underlying AI model providers needed to generate answers.
Providers such as hosting, payment, email, AI routing, analytics if later enabled, and support tools may process data outside the user's country. VoxRiot uses provider contracts and transfer safeguards where required.
Retention
- Session and CSRF data normally last for the browser session.
- Cookie consent records are stored in the browser for up to 12 months.
- Account and debate data are kept while the account is active or until deletion is requested, unless legal retention, public-content integrity, dispute handling, safety, or accounting obligations require longer retention.
- Payment, invoice, tax, and accounting records are kept for the period required by applicable law.
- Support requests are normally kept only as long as needed to answer and evidence the request, unless a dispute or legal duty requires longer retention.
- Security and error logs are kept for a limited operational period unless needed for investigation.
User rights
Depending on location, users may have rights to access, correct, delete, restrict, object to processing, export data, withdraw consent, and complain to a supervisory authority.
VoxRiot does not sell personal information and does not share it for cross-context behavioural advertising.
Children and sensitive data
VoxRiot is not intended for children under 13. Users should not submit children's personal data, health data, identity documents, passwords, payment card numbers, or other sensitive data into prompts, comments, or support messages unless strictly necessary for a support case.
Coupon and promotion data
- When a coupon is redeemed, VoxRiot stores the coupon code, user account, token amount, redemption time, related token ledger entry, and hashed IP/browser signals used to prevent duplicate use and abuse.
- This data is used to apply promotions, enforce one-use-per-account and campaign limits, investigate fraud or technical errors, and keep an audit trail for support and platform security.
- The legal bases are contract where the coupon is part of the user service, legitimate interests in fraud prevention and platform security, and legal obligation where accounting, tax, dispute, or consumer-rights records must be kept.