Website Privacy Policy
Last updated: October 21, 2026
Vessel AI Lab Limited designs and develops CrossVox, operates the brand and provides customer service. Botcoin network limited Hongkong provides payment collection through Stripe. These companies process the relevant website, order and support information to operate CrossVox and fulfill your purchase. This policy covers website visits, the hardware update list, V1 preorders and the earlier reservation program. The native app has a separate App Privacy Policy.
Information collected on this website
For the earlier reservation program, we collected your email address, country, reservation amount and status, and optional product research answers. When you sign up for hardware updates, we collect your email, consent choice and time, confirmation status and unsubscribe status. We also record visit and advertising attribution information such as UTM parameters, Meta, Google and TikTok click identifiers, browser information and page visits on pages where those tools are enabled. For V1 preorders, we process contact and delivery details, order and payment status, activation-code and fulfillment records, and support requests. Stripe processes card details; CrossVox does not store your full card number.
How we use it
We use order information to fulfill V1 purchases, provide gifted membership access, manage shipping, returns and warranty support. We use reservation information to administer existing reservations and refunds, send payment confirmations and related updates, measure which messages bring visitors to CrossVox, and understand demand. We use a confirmed hardware update email address to send occasional development and launch messages. Signing up for updates does not place an order. We do not use survey answers about faith or prayer to target individuals with ads.
Services
Our site, update list, order and reservation records are hosted on Railway, with Cloudflare providing edge delivery. Stripe processes payments and refunds. Resend sends transactional order and reservation messages and hardware update confirmation emails. If enabled, Google Analytics 4 measures website usage. A HireCX support widget loads when you choose to open chat on the support page, and may also appear on previously loaded legacy pages and process information submitted through that conversation under its own policy. These providers handle information under their own policies.
Advertising measurement and your choices
Advertising measurement update: October 22, 2026. On public hardware shopping pages, basic Meta and TikTok measurement can start automatically for visits identified as United States by Cloudflare's network-country response, unless you previously declined or your browser sends Global Privacy Control or Do Not Track. This uses an opt-out model, not a recorded affirmative consent. Outside the US, or if the country cannot be determined, measurement stays off unless you have explicitly allowed the relevant provider. We do not infer your location from an advertising link or language setting. Open Your privacy choices in the footer of a hardware shopping page to decline or enable measurement; no choice is required to browse or buy. Choices are remembered for up to 180 days. Declining stops subsequent advertising measurement and clears the advertising identifiers controlled by this integration. We honor Global Privacy Control and Do Not Track even if you previously allowed measurement.
When enabled, Meta Pixel measures public hardware-page views, product views and successful entry into Stripe checkout. Meta Conversions API reports successfully created live Stripe checkouts and confirmed paid V1 preorders, including the actual payment amount, currency, unit count, product identifier, available Meta browser or click identifiers, and the browser user-agent from checkout. Meta may receive browser and network information through its Pixel and set advertising cookies. Sharing for advertising measurement may constitute sharing for cross-context behavioral advertising under applicable US law. Use Your privacy choices to opt out. We do not send email to Meta in these events.
TikTok uses the US opt-out rule above for basic hardware-page and checkout measurement and eligible verified payment-return events. Its base code may load in a paused consent mode; events remain held until measurement is permitted by your choice or the network-confirmed US rule. A browser Purchase event is sent only after Stripe payment is verified on the secure return page. For eligible TikTok-sourced visits, TikTok Events API may report the paid preorder with the same purchase event ID for deduplication. Purchase data includes payment amount, currency, unit count, product identifier and available TikTok click or browser identifiers. Only a specific TikTok email-matching permission enables a SHA-256 hash of the verified purchaser email, normalized to lowercase, for purchase matching. A hashed email is still personal information. Earlier advertising permission or US opt-out measurement does not enable email matching. We never send plain-text email to TikTok. Automatic Advanced Matching, which scans page fields, is off.
Google Ads measures purchases on the verified payment-return page using the order transaction ID, purchase value, currency and Google advertising identifiers. On public hardware shopping pages and the payment-return page, Google measurement uses the same network-confirmed US opt-out rule described above; outside the US or when location is unknown, a new explicit choice that includes Google is required. Existing Meta or TikTok permission alone does not grant Google permission. Global Privacy Control, Do Not Track and a saved refusal take priority. Google measurement may constitute sharing for cross-context behavioral advertising; use Your privacy choices to opt out. We do not send customer email, delivery address, activation codes or order-access links to Google, and Google enhanced conversions and personalized advertising signals are disabled in this integration.
Purchase events are based on independently verified Stripe payment, not button clicks or merely returning to a page. We do not send your address, prayer content, faith-related survey answers, activation codes or private order links in these events. A changed choice applies to subsequent visits and new checkouts; contact support about a previously submitted order. The earlier reservation program retains its separate measurement records.
V1 orders and membership gifts
For V1 preorders, we process your purchaser email, shipping address, payment references, per-unit order status, return requests and customer support records. Stripe handles payment-card details. Activation codes are stored encrypted and matched to individual hardware units. When a recipient redeems a gift, we link its entitlement to the existing CrossVox software account so we can enforce one code per account and revoke only that gift after a hardware refund. We do not send activation codes, order-access credentials, passwords or prayer content to advertising tools or HireCX. Private order links and redemption pages do not embed advertising scripts. The verified payment-return page can send the eligible purchase event described above. Transactional emails are separate from optional marketing subscriptions. We retain necessary order and entitlement records for fulfillment, support, fraud prevention and applicable recordkeeping obligations.
Product privacy
The Android app has its own Privacy Policy. CrossVox hardware and additional device experiences remain in development; their final data practices will be explained before launch.
When measurement is permitted, we retain first and most recent campaign tags in this browser for up to 30 days to connect a return visit with its campaign. New campaign tags replace the previous campaign for last-touch reporting. Declining measurement clears this stored campaign history. We record a visit ID with new orders to reconcile checkout and payment with the visit; this does not identify visits made in a different browser or device. These first-party records include campaign IDs, page paths and referring hostnames, not private URL queries. Source-unidentified orders remain separate rather than being assigned to an advertising campaign by guesswork.
Your choices and contact
Hardware updates require email confirmation. Each future update will include a way to unsubscribe; you can also ask [email protected] to remove your address. Existing reservation customers can request a refund using their private confirmation link or by emailing support. Contact the same address to request access to or deletion of website information. You can clear browser cookies through your browser settings.