LAST UPDATED SEPTEMBER 25, 2026

Your data,
in plain language.

Voxwoven is operated by Point Dynamics. This notice describes the current early-access website and voice service. Contact bhowerton@pointdynamics.com about privacy or to request correction or deletion of information you submitted.

Early-access requests

When you request access, we save your email address, optional product name or URL, description and submission time in our PostgreSQL database. Authorized administrators can review these details to evaluate your request and contact you. Submitting a request does not create an account or subscribe you to a marketing mailing list.

We keep requests while reviewing and coordinating early access. You can ask us to delete your request. A keyed hash of the connection address is used for a short-lived rate limit; this form does not store the raw IP address in the request record. Hosting providers may separately process network and request metadata needed to operate the site.

Public audio samples

The listening room plays pre-generated model samples. It does not request microphone access, record your voice or start a live voice session. Samples load when you choose to play them.

Live voice conversations

The authenticated playground and integrated applications process microphone audio through Voxwoven. Live audio and conversation history are held in service memory. Recognized text, instructions, reference text and tool context are sent to OpenRouter and the selected language-model provider to generate a reply. Those providers apply their own data-handling policies. Do not put secrets in prompts or context.

Agent configurations and session snapshots are stored in PostgreSQL. Session configuration is cleared on close or expiry. Tool arguments and results are temporarily stored for authenticated result exchange, expire after 25 seconds and are cleared by session close or cleanup. Session metadata and aggregate usage are retained for up to 30 days before routine cleanup. Saved agent versions persist until operator maintenance. Backups may retain earlier snapshots according to infrastructure retention policies.

Invitations and console access

The console uses Google sign-in through Better Auth for the administrator and invited project members. Invitations store an email address, assigned project, inviter, expiry and acceptance status. Signing in with the invited verified Google email accepts pending invitations. Account identity, project memberships, session records and access audit events are stored in PostgreSQL. Essential authentication cookies keep you signed in.

Members can access only assigned projects. Administrators manage invitations and memberships. Project API keys and browser session tickets are stored as hashes; provider credentials are encrypted at rest. Removing console access does not automatically revoke application API keys.

Infrastructure and contact

The site and voice service run on Fly.io, with domain and DNS configuration managed through Cloudflare. We serve the site’s fonts ourselves and do not add advertising trackers or session-replay analytics to this landing page. Email you send directly to our contact address is processed through our email provider.