millevoix — Terms of use
Version of September 24, 2026. If the languages diverge, the French text prevails.
1. The service
millevoix is a conversational space for collectives: everyone speaks freely to their AI representative, anonymously toward the other members, and the group discovers what it really thinks. The service is operated by millevoix, a sole proprietorship registered in Switzerland (see the legal notice).
2. Two roles, two acceptances
The organizer creates a group, chooses how people enter it, and manages its credit. A spontaneous group (section 3) has no organizer: each member is their own client there, for their own credit (section 5). They accept these terms by creating the group, and confirm them with each payment. They are the client in the contractual sense. Organizing requires being 16 or older; a minor organizer confirms having the consent of a parent or legal guardian. Paying, however, requires being at least 18 with the capacity to make the purchase (section 5).
The participant joins a group through an invitation link and takes a seat there. By taking a seat, they accept these terms. Participating requires being 16 or older; a minor participant confirms having the consent of a parent or legal guardian.
3. The seat and its keys
There is no required account and no password. A seat is bound to the device that took it; to find it again elsewhere, two optional keys exist, each opening every seat of its holder: verified email addresses (one or several, never a password) and a personal access link, readable and regenerable in the app. A device carries one person at a time: opening another person’s key means switching account.
The proof on the way in. A shared-link group may ask a proof on entry: an email address on the domains it chose (an organization’s), confirmed by a code — or a mobile phone number, confirmed by SMS, to guarantee that one person is one voice where no common domain exists. The number is never kept: only an irreversible fingerprint and the country. A personal-link group asks nothing more: the invitation is the proof.
Spontaneous groups. A group can also be defined by a list of email domains, those of one organization or several: nobody organizes it, and whoever proves an address on one of those domains enters. An institutional address is hard to multiply; millevoix accepts that a small minority may hold several, and says so here. A person has one seat per spontaneous group; such a group’s domains and description are set at its creation; its invitation link leads to the same proof. A person who leaves the organization keeps their seat: belonging is verified on entry.
The public place. A third kind of group stands for a real territorial political community, in a tree (the world, the countries, and inside each country its pertinent political levels: in Switzerland, the cantons and the communes, after the official register). Nobody creates it, organizes it or invites anyone. Reading it is public: anyone may consult its subjects, contributions, arguments and their support. Taking part requires belonging: the country is that of the verified phone number, with no other choice possible; beneath it, the region, canton or commune are declared by the user, without administrative verification. A person has one branch at a time and belongs to every level above their own. A change of place is announced, takes effect after a delay, and is possible a limited number of times a year, except a mere retreat to a level above, which is immediate; when it takes effect, the seats of the places left detach and the votes cast there are withdrawn — the texts stay. A phone number is neither a proof of identity nor a proof of residence; millevoix says so here and assumes that limit. Withdrawing the phone number withdraws the place and the votes that depend on it.
With no key besides the device, losing the device means losing access, permanently: millevoix can neither identify a seat’s holder, nor restore access, nor modify data at the request of a person whose control of the seat cannot be verified. This follows directly from anonymity; it is not a support limitation. Voices cast from a lost seat remain counted: nobody can prove they are theirs anymore, so nobody can change them.
Returning to the group remains possible depending on how it admits people, but with a new, blank seat. Keeping the keys safe is each user’s responsibility.
4. Anonymity, precisely
Between members, anonymity is the product’s promise: individual positions and activity are visible to no other member, the organizer included. No function of the interface attributes anything to anyone. Only the group’s presence volumes are public and exact: how many joined, how many contributed, how many are connected.
Toward the operator, millevoix is an ordinary hosted service: the data lives on its servers. What the operator does with it, and never does, is described in the privacy policy.
5. The group’s credit
The credit belongs to the group, not to a person, and the payment link can be passed along: anyone can top up a group. Whoever tops up a group accepts these terms through their payment, and confirms being at least 18 with the capacity to make the purchase. Credit is prepaid and non-refundable, except where mandatory law provides otherwise and in the event the service shuts down (section 10). It does not expire. millevoix may also offer credit, notably when a group is created. Offered credit is used like purchased credit, but is never refundable: only purchased credit is covered by the refund in section 10.
In a spontaneous group and on the public place there is no group credit: each person has their own credit, usable across all their spontaneous groups and public places, which they alone see and top up, and which follows the same rules. Credit offered to a person is offered once, on their first entry into a spontaneous group or a public place.
When the credit runs out, participation pauses: everything the group has built stays readable, and a top-up wakes it. Fair-use limits may also apply, per day and per seat, notably to voice; the use of offered credit may furthermore be temporarily suspended at times of high demand, without the credit being lost — a pause that never applies to purchased credit. Prices are published and may change for the future; they never change retroactively.
6. The representative and the clerk
Two AI roles hold the conversation. Your representative is yours: it is the only one you talk to, it understands what you think, carries it into the group and writes your votes itself. The clerk is the group’s: it talks to no member and alone writes texts into the shared ledger — every new contribution passes through it. It judges form only, never the worth of an idea: a text already present becomes your vote on it; a text that answers another is placed under it; a text is refused, with its reason shown to you, only when it identifies a person (a member or a private third party — public figures in their public capacity keep their names), when it breaks the law’s floor in Europe or the United States (threats, calls to violence, harassment, incitement against people for what they are), when it insults or degrades someone, or when it belongs to no deliberation at all. A hard opinion, a blunt critique of an idea, an institution, a policy or a public person’s public acts always passes: the clerk refuses a form or a target, never a position. It rewrites nothing and touches no vote.
Rephrasings, syntheses and restitutions are produced by an AI and can be imprecise or wrong. Every write is announced in the conversation and stays correctable and revocable by its author, through the conversation. The ledger’s accuracy rests on this member control, not on a guarantee of infallibility.
The group’s counters are exact and their method is documented; interpreting them remains the members’ job. millevoix works upstream of decisions, which remain sovereign: the service is neither professional advice, nor an official vote, nor a certified measuring instrument, and millevoix is not liable for decisions a group makes based on its restitutions.
7. Prohibited uses
The following are prohibited:
- content that is illegal under Swiss law, harassment, threats, infringement of third-party rights;
- any attempt to deanonymize a member: cross-referencing, pressuring, or demanding that someone reveal or prove their positions. This prohibition also applies to the organizer;
- any manipulation of the count: taking several seats in the same group, passing one’s access to someone else, automating contributions.
8. Reporting and moderation
millevoix performs no general surveillance of the conversations with the representative or of the ledger. At the write, the clerk refuses what identifies a person, what is unlawful or threatening, what insults someone and what is no contribution (an advertisement). Moderation is then reactive: whoever can read a text can report it, through the “Report” link placed under a text, under a conversation shared with the spokesperson or under a discussion’s title, or by writing to contact@millevoix.ai.
Every report is read by a person of the millevoix team. A report changes nothing by itself: no number of reports and no automatic process hides a text of the ledger. Who reported is shown to nobody.
Upon a substantiated report, millevoix may remove a text on one of these four grounds, and on no other: never for the opinion it defends. A removed text goes with the answers attached to it. In its place, everyone reads that a text was removed, when and on which ground, never what it said; the number of removals is published with the group’s other counters. The original is kept thirty days, accessible to millevoix alone, to answer an authority or repair a mistake, then erased. The author is told in the app, without their name ever being known; a removal is contested by writing to contact@millevoix.ai within that period.
What anyone says to a group’s spokesperson, member or not, is checked automatically on the same four grounds, with nobody having to report it, since the group reads these conversations. A message that breaks them is blocked: it is not passed to the spokesperson, the person sees why, the conversation goes on, and the message is kept ninety days for the millevoix team. A conversation an automatic review holds back is no longer shown to the group, nor shareable, until a person of the millevoix team confirms or releases it. A critique, however harsh, always passes.
When texts of the same person are removed, the sanctions climb by rungs: a warning, a seven-day suspension, a thirty-day suspension, then an exclusion. A removal climbs a rung only for a text written after the person read the previous warning; a rung is forgotten after twelve months, the exclusion never. Suspended, the person reads everything but no longer takes part; excluded, they lose their seats, and the number and addresses that proved them can no longer be used. millevoix knows nobody’s name: it recognizes a person by their keys and their proofs. As a last resort, millevoix may also close a group; the credit of a group closed for violation is not refunded.
9. Deletion and retention
The organizer can delete their group; a spontaneous group or a public place, having no organizer, is deleted by nobody, but anyone can leave it. Deletion is final for all members: the ledger, the conversations and the remaining credit disappear. Each member can also erase their own conversation at any time. When data is deleted, it disappears from the active service; copies may remain temporarily in backups, until their automatic renewal.
10. End of service
Should millevoix shut down, groups would be informed at least 30 days in advance, with the ability to export the state of their thinking during that period. The groups’ remaining credit would then be refunded, through the original payment method.
11. Availability and evolution
millevoix is provided as is, with no availability guarantee. The service evolves: features may be added, changed or removed.
12. Liability
Within the limits of mandatory law, millevoix’s liability is excluded for indirect damages and otherwise capped at the amounts paid by the concerned group during the 12 months preceding the triggering event.
13. Changes to these terms
The terms are versioned and dated. Substantial changes are announced in the app and on this site before they take effect; using the service afterwards constitutes acceptance of the current version.
14. Governing law and forum
Swiss law applies. The forum is at the operator’s seat, subject to mandatory forums.
Questions: contact@millevoix.ai