Privacy Policy

This policy explains what data Voxsanity collects, how it is used, and your rights under the Australian Privacy Act 1988 and the EU General Data Protection Regulation (GDPR).

Last updated: August 2026

Who we are

Voxsanity ("we", "us", "our") is a registered business name of Voxsanity Pty Ltd (ABN 82 700 348 867), trading as Voxsanity. You can contact us via our contact page.

What we do not collect

Voxsanity does not store which health conditions you search for linked to your identity. We do not build a search history against you, and nothing of the kind is shared or sold. This is a deliberate design choice, not a technical oversight. The one thing we do keep from searching is set out under Data retention: when a trial search returns no results we record which condition and filters were chosen, with no identifier attached to it.

What we collect

Analytics

We use Google Analytics 4 to understand which pages and features people use. If you accept analytics cookies, it records the pages you view — including the address of a condition page, which names that condition — and a small number of actions, such as following a condition, against a pseudonymous identifier Google assigns to your browser. That identifier is not your name, your email address, or your Voxsanity account: we never send your account identity to Google, and we never join analytics data back to your account. IP anonymisation is on, so IP addresses are not stored in identifiable form, and we strip condition, drug, diagnosis and treatment parameters out of the page address before it is sent. If you decline analytics cookies, no analytics cookie is set.

We look at this data in aggregate. The underlying records Google holds are per-event and pseudonymous rather than anonymous, so we describe them plainly here rather than call them anonymous.

Alert subscriptions

If you subscribe to trial alerts, we store your email address and the condition you are following. Trial alerts themselves are based on the condition you follow, not on individual trials. If you separately save specific trials to your shortlist, those saved trials are stored against your account so we can show them back to you — see "Followed conditions and saved trials" below for how we handle that.

We store the following information about subscribers: email address, subscription status, Stripe customer ID (a payment reference only — no card details), and the condition category IDs you choose to follow (system identifiers, not medical records). We do not store your health history, diagnosis, or the reason you are interested in any condition.

Account information

Your email address and password, used to create and secure your account.

Followed conditions and saved trials

Which conditions you follow and which trials you save, so we can show you relevant updates and send the alerts you've opted into.

Because followed conditions and saved trials can reflect a health condition you or someone you're caring for is dealing with, we treat this information with particular care. It's visible only to your own account, never sold, and never shared with advertisers or third parties.

Group tags

On the paid plans you can group what you follow under labels you type yourself, for example one per person you are supporting. We store the label exactly as you type it and never interpret it. Because these labels are the one place on this site where you might write something about another person, we ask on the page itself that you use a nickname or a code rather than a real name, a date of birth, or a diagnosis. Labels are visible only to your own account, are included when you download your data, and are deleted with your account.

Free monthly digest

If you sign up for the free monthly digest, we store your email address and the condition category ID (a system identifier, not a medical record) you selected. This information is used solely to send you the monthly digest email for that condition. We do not store your name, any health history, or any information about why you chose that condition. You can unsubscribe at any time by clicking the unsubscribe link in any digest email or by emailing voxsanityhq@gmail.com. Unsubscribing stops the digest straight away and keeps the conditions you follow, so you can start receiving it again later without setting them up from scratch. It is not the same as deleting your data: if you want your data removed, use the delete option on your account page, which removes it immediately, or contact us and we will do it for you.

Daily Today's Update email

If you sign up for the daily Today's Update email, we store your email address and nothing else. There is no name, no condition, and no link of any kind to a Voxsanity account, even if you happen to hold one under the same address: an address on this list tells us only that somebody wanted a daily summary of the trial registries, and we have deliberately built no way for it to tell us more. We send you one confirmation email when you sign up and nothing further until you confirm, so an address entered by somebody else never starts receiving mail. You can unsubscribe with one click from the link in every email, which stops that email and affects nothing else. We keep the record of the address and the date you unsubscribed rather than deleting the row, so that we can show we stopped when you asked; if you want the address removed entirely, email voxsanityhq@gmail.com or use the contact form and we will delete it. We may also use this address to tell you about this daily email or about new features on the site, and for nothing else.

Contact form submissions

If you contact us via the contact form, or report an error on a page, we store your name, your message, the category you choose, and your email address to reply to you. This data is not used for any other purpose. As with the waitlist forms, we have not set an automatic deletion window for it: an accuracy report is often the reason we changed something on the site, so we keep it as the record of that correction. It is not linked to any account you may have, and deleting your account does not remove it — ask us via this same form if you want it deleted, and we will.

So that we can answer safely, a message is flagged internally when it looks like it may describe a side effect from a medicine, either because you chose that category or because of the words used. The flag only changes how your message is prioritised and answered: it tells us to point you to the Therapeutic Goods Administration and your prescriber rather than treat your message as a website correction. It is stored with your message, it is not shared with anyone, and we do not report anything to the TGA on your behalf.

Waitlist and interest forms

If you register interest as a business — via the form at /for-businesses/ — we store what you submit: your name and email, the organisation you mention, and any free text you write, so we can follow up with you. This does not create an account and is not linked to one. We have not set an automatic deletion window for this data — it is kept until your enquiry is resolved, or you ask us to delete it via our contact page.

Cookies and browser storage

We use a single consent cookie to record your answer to the cookie notice. It is the only cookie this site sets itself, and it is set the moment you answer, whether you accept or decline. Analytics cookies are set only if you accept. Advertising runs with personalisation off and does not set advertising cookies to profile or target you; see "Advertising and analytics" below.

We also record your answer, along with a small number of other things, in your browser's own storage rather than in a cookie. If you accept and you reached us through a campaign link, we keep the campaign name from that link for the rest of your browsing session, so we can tell which of our outreach efforts brought people here. It holds no identifier, is not linked to your account, and your browser discards it when you close the tab. If you decline, or do not answer the notice, no campaign information is stored at all.

Separately, we keep a small number of display preferences in your browser's own storage: whether you told us you are looking on behalf of someone else, whether you have dismissed a prompt, and a saved comparison in the business dashboard. These are written only when you actively choose them, they stay on your device, they are never sent to our servers, and they are not linked to your account or to any condition. Because they only remember a choice you made about how the site displays, they are kept whatever your answer to the cookie notice. Clearing your browser's site data removes them.

How we use data

Analytics, looked at in aggregate, are used to understand which conditions and features are most useful and to improve the platform. We do not sell data to third parties.

Advertising and analytics

We use Google AdSense to display advertising on this site. We run it with ad personalisation turned off: our consent settings permanently deny ad personalisation, ad storage, and ad user data (regardless of the consent banner), so AdSense serves non-personalised ads and does not set advertising cookies to build a profile of you or target ads based on your browsing. We do not receive or control any data Google processes to serve these ads. We also block pharmaceutical and drug-related advertising categories through AdSense's content controls — see our editorial independence policy for more on how we keep advertising separate from what we cover. You can review Google's own controls at Ad Settings (adssettings.google.com).

We use Google Analytics (GA4) to understand how visitors use this site, with IP anonymisation enabled. You can opt out using the Google Analytics Opt-out Browser Add-on.

Neither AdSense nor Analytics data influences which conditions, trials, drugs, or sponsors we cover, or how they are described or ranked.

AI processing of public data

Voxsanity uses the Claude API, operated by Anthropic PBC (anthropic.com), to generate plain English summaries of publicly available government registry data. This processing occurs on de-identified public data only, and covers four things: the eligibility criteria text published on ClinicalTrials.gov; the summary results a trial sponsor has reported to ClinicalTrials.gov; the name of a health condition; and coarse indicators of research funding, trial activity and PBS coverage for a condition, expressed as broad bands rather than figures. No personal information about users, subscribers, or patients is sent to Anthropic, and no information about your account, your reading history or the conditions you follow is ever included. All of it runs as an overnight batch job — nothing is sent to Anthropic when you view a page. Anthropic is a sub-processor for this purpose under GDPR Article 28. Anthropic's privacy policy is available at anthropic.com/privacy.

Data storage and security

Data is stored on servers in Australia (Sydney region). We use industry-standard security practices including encrypted connections, row-level security on all database tables, and access controls. No payment card data is stored on Voxsanity servers.

Data retention

We retain your account data for as long as you have an account. We are required to keep payment and invoice records for 7 years for tax and accounting purposes, as Australian law requires; those records are held by our payment processor, Stripe, rather than on Voxsanity servers. Analytics data (Google Analytics 4) is retained for 2 months, which is the retention period set on our Google Analytics property.

We do not build a per-person browsing history: nothing in our own database records which condition pages a particular account has visited. Two things are retained, and we would rather name them than leave you to assume otherwise:

• Google Analytics holds the pseudonymous per-browser records described under "Analytics" above, which include the addresses of condition pages, for 2 months.
• When a trial search on this site returns no results, we store which condition and filters were chosen, with a date and a daily count, so we can see what people are looking for and failing to find. The condition can only be one of the ones we track, chosen from a list — this site has no free-text search box that records what you typed. Those records carry no account, no identifier and no IP address, and cannot be traced back to the person who searched.

If you delete your account, everything held against that account — the conditions you follow, the sponsors you follow, the medicines you follow, the trials you saved, your tags and saved views, your account profile and subscription record, any corrections you have asked for, the data-download links you have requested, whether the alert emails we sent you were delivered or opened, and the log of emails we have sent you — is deleted immediately, along with the account itself. If you pay for Voxsanity, deleting your account also cancels your subscription with Stripe at the same moment, so you are not left being charged for an account that no longer exists. If we cannot cancel it for any reason, we delete nothing and tell you, rather than erase the account and leave the payments running. Stripe keeps its own payment and invoice records, which Australian tax law requires us to retain for seven years; those are described under Data retention.

One further record is held by us rather than by Stripe: when Stripe tells our servers that a payment or a subscription change has happened, we store that notification as the record of what was charged and when. A payment notification includes the name, email address and billing address entered at the checkout. When you delete your account, those personal details are removed from those records immediately, along with everything else above. The notification itself is kept, without them, because it is our own accounting and reconciliation record of the payment.

Two things are deliberately not part of that, because they are not held against your account and can exist whether or not you ever had one:

• The payment records Stripe holds, which we are required to keep (see above).
• Anything you sent us through the contact form, an accuracy report, or a waitlist or interest form. These are kept as a record of the enquiry or the correction, and a correction report is often what caused us to change something on the site. They are not linked to your account and are not used to build a profile of you. If you want them removed as well, ask us via our contact page and we will do it.

One thing is not instant, and we would rather say so than let "immediately" carry more weight than it can. Deleting your account removes your data from our live database straight away, but our database provider also takes an automated daily backup of the whole database for disaster recovery. Residual copies of deleted data can therefore remain in those backups for up to 7 days before they are rotated out and overwritten. A backup restores the whole database at once, so it is never used to bring back an individual account or record — it exists only to recover the service after a failure.

Your rights

Voxsanity is an Australian service and does not, as a matter of general operation, deliberately target or monitor EU residents. GDPR's full obligations — including the requirement to appoint an EU representative — apply to a business outside the EU only where it does one of those things, so they do not currently apply to us. The rights below are extended to every visitor regardless of location; where they mirror GDPR rights, that reflects our own privacy practice, not a claim that we are subject to the GDPR in full.

Why we are allowed to hold it

Australian privacy law does not require us to name a legal basis, but the GDPR does, and we would rather state one for everybody:

• Your account, and the conditions, sponsors and medicines you follow — your consent. Following something is an affirmative act, and you can undo it, or delete the account outright, yourself at any time.
• Your subscription, payments and the emails that go with them — performance of a contract. We cannot run a paid subscription without them, which is why transactional email is not something you can unsubscribe from while the subscription exists.
• Analytics — your consent, and nothing analytics-related runs until you give it. If you decline, or never answer, no analytics cookie is set.
• Security, abuse prevention and keeping a record of enquiries — our legitimate interests in running the service safely and being able to answer you, balanced against the fact that none of it is used to profile you or shared with advertisers.

What you can ask for

Under the Australian Privacy Act, and extended by us to every visitor regardless of location, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Withdraw consent for analytics cookies at any time

Three of these you can do yourself, straight away, without asking us:

• Access. Ask for everything we hold against your account as a single file. It also lists what is deliberately not in it, and where to ask for those. We send the download link to your account's email address and it works once, within an hour, so getting the file takes both your password and access to your inbox.
• Deletion. Delete all of it, immediately, from your logged-in account.
• Withdrawing consent for analytics. Use the button below to re-open the cookie notice and change your answer at any time. Choosing "Decline" stops analytics and deletes the analytics cookies already in your browser. Unsubscribing from our emails is one click at the bottom of any of them.

Review or withdraw analytics consent The cookie notice needs JavaScript. With it turned off, no analytics cookie is ever set, so there is nothing to withdraw.

For correction, you can change what you follow, what you have saved and your tag names yourself on your account page. Your email address is the one thing you cannot currently change yourself — tell us via the contact page and we will change it for you. Anything else, including objecting to processing, also goes through the contact page.

Third-party services

Voxsanity uses the following third-party services, each with their own privacy policies. The first four hold data for us; the rest are contacted by your browser when a page loads, which means they receive your IP address:

• Netlify (hosting) — netlify.com/privacy
• Supabase (database) — supabase.com/privacy
• Stripe (payments) — stripe.com/privacy
• Resend (transactional email) — resend.com/privacy
• Google (AdSense advertising, Google Analytics, and Google Fonts, which loads the site's typefaces on every page) — policies.google.com/privacy

Resend, which sends our email, keeps its own record of each message: the address it went to, the subject line, whether it arrived, and when. Those records are held under Resend's retention policy rather than a period we set, and deleting your Voxsanity account does not remove them, because they are Resend's records rather than ours. This is why our subject lines are deliberately general — "An update on conditions you follow" rather than the name of a condition or a medicine. What a subject line says is the part that persists there, and it is also the part visible on a lock screen without the email being opened.

Nothing else is loaded from anywhere else. There is no session recording, no heatmap tool, no chat widget, no social media embed, no A/B testing tool, no image or video hosted elsewhere, and no advertising network other than Google AdSense on any page. Google Analytics is loaded from a Google address containing the words "tag manager", which is simply where Google serves the Analytics script from — there is no tag manager container on this site, so no third party can add a script to these pages without a code change we make ourselves.

Where your data is stored, and overseas disclosure

Your Voxsanity account data — your email address, the conditions you follow and the trials you save — is stored in Australia, in the Sydney (ap-southeast-2) region.

Some of the services the site depends on are based overseas, which means personal information may be disclosed to, or accessed from, outside Australia. Australian Privacy Principle 8 requires us to tell you which and where, so:

• Supabase (database) — the data itself is stored in Sydney, but Supabase is a United States company and its staff can access the service for support and maintenance
• Netlify (website hosting) — United States
• Stripe (payments) — United States and Ireland
• Resend (subscription, alert and digest email) — United States
• Google (Analytics, AdSense and Fonts) — United States, and other countries in which Google operates
• Anthropic (AI summarisation) — United States. Listed for completeness only: the data sent to Anthropic is public government registry text and coarse condition-level indicators, described in full under "AI processing of public data" above. Nothing about you is sent to it.

We take reasonable steps to ensure these providers handle personal information in a way consistent with the Australian Privacy Principles. If you would rather no information about you left Australia, the public parts of this site — trials, conditions, medicines and every statistic we publish — can be read without an account.

Making a complaint

If you think we have mishandled your personal information, tell us and we will try to put it right.

1. Contact us through our contact page, or email voxsanityhq@gmail.com, and describe what happened. You do not need any particular form of words, and you do not need to quote this policy.
2. We will acknowledge your complaint, investigate it, and tell you in writing what we found and what we have done about it. We do not quote a fixed turnaround we might not meet — we treat privacy complaints as a priority and will keep you posted on where yours is up to.
3. If you are not satisfied with our response, or we have not responded, you can take the complaint to the Office of the Australian Information Commissioner (OAIC), the regulator for the Privacy Act 1988. OAIC: oaic.gov.au, phone 1300 363 992, or GPO Box 5288, Sydney NSW 2001. You are entitled to go to the OAIC directly, but they will usually ask that you raise it with us first.
4. If you are in the EU or the UK, you may also complain to your local data protection authority.

Children

Voxsanity is not directed at children under 16. We do not knowingly collect personal data from children. We do not ask your age and we have no way to verify it, so this is a statement about who the site is for, not a check we perform. If you believe a child has created an account, tell us via our contact page and we will delete it.

Changes to this policy

We may update this policy from time to time. Changes will be noted with an updated date at the top of this page.

Contact

Privacy questions can be sent via our contact page.