How Integovox handles your data.

Your data is your data.

The operational data you put into Integovox, work orders, assets, parts, donor records, whatever your module tracks, belongs to you. Integovox does not sell customer data or share it with third parties for their own purposes.

Essentials and Professional, isolated differently.

Essentials runs on shared application infrastructure. Even so, every Essentials customer gets their own Postgres database and role, their own Zitadel identity realm, and their own credentials. Your data is never queried or stored alongside another customer's inside a shared table, it lives in your own database on the shared host.

Professional adds full infrastructure isolation on top of that: your own dedicated VPS, so nothing about the server itself, its resources, its network, its containers, is shared with any other customer.

Zitadel identity, role-based access.

Integovox uses Zitadel, an open-source identity platform, to handle authentication and single sign-on. Every account gets role-based access control, so what a manager can see and do is scoped differently from a technician, a driver, or a shop-floor kiosk. Essentials customers get their own isolated Zitadel realm on a shared Zitadel instance; Professional customers get their own dedicated Zitadel instance.

Shared application layer, or dedicated server.

Essentials customers run on a shared application host, alongside other Essentials customers, each isolated at the database, credential, and identity level as described above. Professional customers run on their own dedicated VPS: their own operating system, their own containers, their own resources, not shared with anyone else.

Automated, encrypted, and restore-tested.

Every server backing Integovox runs automated daily backups (Restic, encrypted, to Backblaze B2), retained on a rolling 30-day window. Backup integrity is verified with an actual test restore, not just an integrity check, before being relied on. Backup frequency and retention describe current infrastructure practice and may be adjusted as the platform grows.

Phoenix and Mother read what they need to do their job, nothing more.

Phoenix and Mother access your operational data only as required to provide the platform functionality you're using, answering a question, surfacing a record, or (for Mother, within permissions you define) taking an authorized action. Neither reads data belonging to another customer, on either plan.

Your operational data is not used to train AI models.

Phoenix and Mother work by reading your live data at query time to answer questions and take permitted actions, they are not fine-tuned or retrained on your data. Your operational data is not used to train models for other customers or for Integovox generally.

Your data, portable on request.

Your operational data lives in a standard Postgres database. If you need a full export, whether for backup, migration, or any other reason, contact info@integovox.com and we'll provide one.

What happens when service ends.

When you cancel, we stop billing and begin deprovisioning your infrastructure. If you want a copy of your data, request an export before or immediately after cancelling, see Data Export above. We don't currently publish a fixed data-deletion timeline after cancellation; contact info@integovox.com if you need specifics for your account.