Volvexa ("we", "our", or "us") operates the website volvexa.ai and the Volvexa platform (the "Service"). This page explains what data we collect, why we collect it, how we use it, and the rights you have over it.
We aim for plain language over legalese. If anything here is unclear, email hello@volvexa.ai and we'll explain.
1. Information we collect
Account information
When you sign up, we collect your email address, name, and authentication credentials. Authentication is managed by Clerk; we never see or store your password.
Business profile
During onboarding we ask you to pick an industry category and (optionally) describe your target market. This information is used solely to personalize your dashboard and Volvexa's AI outputs.
Workspace data
When you connect Volvexa to third-party services (Airtable, Make.com, Apollo, your email provider), we read the data you authorize: lead records, company records, campaign metrics, and execution logs. We process this data on your behalf to provide the Service. We do not sell, share, or use your workspace data to train AI models for other customers.
Usage data
We collect standard server logs (IP address, browser type, pages visited, request timestamps) for security and operational purposes. We use Vercel Analytics for aggregate, anonymized traffic insights — no individual user is tracked across sessions or sold to advertisers.
Payment data
When you subscribe to a paid plan, payment processing is handled entirely by Stripe. We receive a subscription identifier and your billing email; we do not see, store, or process credit card numbers ourselves.
2. How we use your information
- To provide, maintain, and improve the Service
- To personalize your dashboard, outreach recommendations, and AI outputs
- To process payments and manage subscriptions
- To send transactional emails (account verification, password resets, billing receipts, security alerts)
- To respond to your support requests
- To send occasional product updates (you can unsubscribe anytime)
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations
We do not sell your personal information. We do not share it with third parties for their own marketing purposes.
3. Third-party services we use
Volvexa relies on a small set of trusted infrastructure providers to deliver the Service. Each one processes data only as needed to perform their function:
- Clerk — authentication, user accounts, session management
- Vercel — application hosting and edge functions
- Cloudflare — DNS, email forwarding for company addresses
- Airtable — your data lives in your own Airtable workspace; Volvexa reads/writes via API keys you control
- Make.com — workflow automation; your scenarios live in your own Make organization
- Apollo — lead enrichment, used only when you provide an Apollo API key
- Resend — transactional email delivery
- Anthropic / OpenAI — AI inference for outreach personalization. Volvexa sends prompts to these providers; per their published policies, prompts and outputs are not used to train their public models
- Stripe — payment processing (when paid plans are enabled)
4. Data storage and security
Application servers run on Vercel's infrastructure (United States and global edge locations). User authentication data lives with Clerk (United States). Your workspace data primarily lives in your own Airtable and Make accounts; Volvexa caches small amounts of metadata for performance.
We use industry-standard security practices: TLS encryption in transit, encrypted storage at rest, short-lived session tokens, and HTTP-only cookies. Access to production systems is limited to authorized personnel and protected by two-factor authentication.
No system is perfectly secure. If we ever detect a security incident affecting your data, we will notify you without undue delay — and where feasible within 72 hours of becoming aware — and tell you what happened and what we're doing about it.
5. Data retention
We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we're legally required to retain it longer (e.g., financial records for tax purposes). Your workspace data in Airtable and Make.com is yours — Volvexa does not delete it when you cancel.
6. Your rights
Depending on where you live, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data (subject to legal retention requirements)
- Export your data in a portable format
- Object to or restrict certain processing
- Withdraw consent at any time (for processing based on consent)
- Lodge a complaint with your local data protection authority
These rights apply under the EU General Data Protection Regulation (GDPR), Mexico's LFPDPPP (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), and California's CCPA — among other regional laws. To exercise any of them, email hello@volvexa.ai and we'll respond within 30 days.
7. Cookies
We use a small number of cookies, all strictly necessary for the Service to function:
- Clerk session cookies — keep you signed in
- Language preference cookie (
VOLVEXA_LOCALE) — remembers your EN/ES choice
We do not use third-party advertising cookies or cross-site tracking pixels. You can clear cookies anytime via your browser settings.
8. International data transfers
Our infrastructure providers operate globally. By using the Service, you consent to your data being transferred to and processed in countries outside your own, including the United States. We rely on standard contractual clauses and our providers' certifications (SOC 2, ISO 27001 where applicable) to ensure appropriate safeguards.
9. Children's privacy
The Service is intended for businesses and is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us data, contact us and we'll delete it.
10. Changes to this policy
We may update this Privacy Policy as the Service evolves. When we make material changes, we'll notify you by email and update the "Last updated" date at the top. Continued use of the Service after changes constitutes acceptance.
11. Contact
Questions, requests, or complaints about this Privacy Policy?
Email: hello@volvexa.ai
Data controller: Volvexa, operating from the State of Mexico, Mexico