Skip to content

Privacy Policy

Last updated: August 17, 2026

Vohux Inc. ("Vohux", "we", "us") is committed to protecting your privacy. This Privacy Policy explains how our software products handle your information.

1. Our Principle: Local-First Where It Is Possible

Our desktop applications are designed to operate entirely on your local device. We do not collect, transmit, or store your personal data on external servers unless explicitly stated for a specific feature you opt into.

Two categories are exceptions, and each is described in its own section below rather than covered by the local-only guarantees in Sections 2 and 3:

2. Data We Do Not Collect

Our desktop applications (Verscout, AppQuiver) do not:

3. Data Stored Locally

Our desktop applications store the following data on your computer only:

This data never leaves your device. You can delete it at any time by removing the application and its configuration files.

4. CorpBooks (Cloud Service)

CorpBooks is a hosted bookkeeping service and does not run locally. Sections 2 and 3 above do not apply to it. To provide the service, CorpBooks stores and processes your data on servers we operate:

CorpBooks uses third-party processors to operate: Google Cloud (hosting and storage) and Stripe (subscription billing). Stripe handles payment details directly; we do not receive or store your card information. We do not sell your data or use it for advertising.

5. Financial Account Connections

Some products can connect to your bank or credit-card accounts to retrieve balances and transactions, so that bookkeeping and reporting do not require manual entry. Where a product offers this, the following applies.

Your banking credentials are never shared with us. The connection is made through Plaid Inc., a regulated financial data aggregator. You authenticate directly with your financial institution inside Plaid's own interface. Vohux receives a scoped access token, never your username, password, or security answers, and never your full account numbers.

What we can retrieve through a connection you authorise:

Access is read-only. A connection cannot move money. It cannot initiate a transfer or payment, pay a bill, trade, or change anything about your account. This is a property of how the integration is built, not a policy we could quietly relax: the software contains no money-movement capability, and an automated test fails the build if one is introduced.

Retention. Transaction records are retained for seven years, because financial records supporting a filed tax return must be kept — the Canada Revenue Agency requires books and records be retained for six years from the end of the last tax year they relate to, and we allow a margin beyond that. Balances are superseded on each refresh and not retained historically. Access tokens are destroyed when a connection is revoked.

Ending a connection. You can revoke a financial account connection at any time. Revocation invalidates the access token immediately and permanently ends all further retrieval — it does not wait on a request to us. You may also ask us to delete the data already retrieved, and we will comply.

We do not sell, share, or disclose this data to any third party, and we do not use it to train machine-learning models. The parties in the data path are your financial institution, Plaid as the aggregator, and Vohux. Plaid's own handling of your data is governed byPlaid's End User Privacy Policy.

6. Purchase Information

When you purchase a license, the transaction is processed by a third-party payment provider (e.g., LemonSqueezy, Gumroad). We receive your name and email address solely for the purpose of delivering your license key. We do not receive or store your payment card details.

7. Email Communication

We use your email address only for:

We do not send marketing emails, newsletters, or promotional communications unless you explicitly opt in.

8. Website

The Vohux website (vohux.com) is a static site. It does not use cookies, analytics scripts, or tracking pixels. No personal data is collected when you visit our website.

9. Third-Party Services

Our Products do not integrate with third-party analytics, advertising, or data collection services. If a future Product feature requires network communication (e.g., update checking), it will be clearly documented and opt-in.

CorpBooks, being a hosted service, necessarily relies on the infrastructure and billing processors named in Section 4. Those are service providers required to operate it — not analytics, advertising, or data-collection services.

10. Children's Privacy

Our Products are not directed at children under 13. We do not knowingly collect information from children.

11. Data Security

For our desktop applications, your data stays on your device, so its security is governed by your operating system's security measures. License files use HMAC checksums to detect tampering. We recommend keeping your operating system updated and using full-disk encryption.

For CorpBooks, we are responsible for the security of the data we hold. Records are stored on Google Cloud infrastructure, encrypted in transit and at rest, and each customer's records are kept logically separate from every other customer's.

For financial account connections, data is encrypted in transit using TLS 1.2 or better on every request, and encrypted at rest wherever it is stored — on full-disk-encrypted local storage and, where cloud storage is used, under the provider's managed encryption. Access tokens are held in a single controlled location and never written into source code; an automated check blocks any change that would embed one.

12. Your Rights

For our desktop applications, we do not collect or store your personal data on our servers, so there is no data for us to provide, correct, or delete on your behalf. All application data is under your direct control on your device.

For CorpBooks, we do hold your data, and you may ask us to provide a copy of it, correct it, or delete it. Contact us at the address in Section 14 and we will respond promptly.

For financial account connections (Section 5), you have two independent routes and do not need to rely on us for either: you can revoke the connection yourself at any time, which immediately ends all further retrieval, and you can ask us to delete the data already retrieved. Where we are required to retain financial records for tax purposes, we will tell you which records those are and why, rather than refusing the request in general terms.

If you have purchased a license and wish to have your email address removed from our records, contact us and we will comply promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on our website with an updated revision date.

14. Contact

For privacy-related inquiries:

Vohux Inc.
Ontario, Canada
[email protected]
https://vohux.com