Data residency
Where and how your data is actually stored
A clear answer you can forward straight to your bank or compliance team — not just a trust badge in the footer.
Infrastructure
Voltzzflow's database and application run on physical servers located in the European Union (Germany, at Hetzner Online GmbH). We do not host operational data outside the EU.
Strict per-organization isolation
Every database record is tied to your organization through an identifier that's checked on every single query. No other organization — and no other client in your own portal — can ever reach your data, regardless of role.
Technical details: security and GDPRFiles and documents
Contracts, invoices and uploaded documents are stored as private files, never public. Every view or download goes through a signed URL that expires within minutes — there's no permanent link that could be forwarded or indexed.
No resale, no advertising
We never sell or rent your data to any third party. We don't use advertising or cross-site tracking cookies — only what's strictly necessary for login, language and theme.
Your rights and portability
You have full control under the GDPR: access, rectification, erasure, portability. From Settings → Data export you can download your clients, projects and invoices as CSV at any time — without asking anyone.
Full privacy policySites you host through Voltzzflow
If you host your own site or app through Sites, you are the data controller for any personal data that site collects (e.g. contact forms, user accounts). Voltzzflow acts as a processor/infrastructure provider for that data — we don't access or use it for our own purposes. Details and a Data Processing Agreement template are in the Terms of Service.
Sites section in the Terms of ServiceProviders and subprocessors
The complete list of companies that touch your data, why, and where they're located. We update this whenever a provider changes.
| Provider | Role | Location |
|---|---|---|
| Hetzner Online GmbH | Server and database hosting, and the hosting engine behind Sites | Germany (EU) |
| Cloudflare, Inc. | File storage (R2), CDN, DDoS protection, and default domains for hosted Sites | Global network |
| Netopia Payments | Card payment processing (Romanian customers) | Romania (EU) |
| Oblio.eu | Invoicing and e-Invoice (e-Factura) | Romania (EU) |
| Stripe, Inc. | Card payment processing (international customers) | USA — certified under the EU-U.S. Data Privacy Framework |
| Google LLC (Gmail) | Transactional email delivery (password resets, invites, notifications) | USA — certified under the EU-U.S. Data Privacy Framework |
| Google LLC (Firebase) | SMS phone verification, for Free accounts using Sites | USA — certified under the EU-U.S. Data Privacy Framework |
| GitHub, Inc. (Microsoft) | Access to the private source code of customers who connect a repository, for automatic deploys via Sites | USA — certified under the EU-U.S. Data Privacy Framework |
| Microsoft Corporation (Clarity) | Visitor behavior analytics on the Voltzzflow site, consent-gated only | USA — certified under the EU-U.S. Data Privacy Framework |
| Google LLC (Analytics) | Traffic analytics on the Voltzzflow site, consent-gated only | USA — certified under the EU-U.S. Data Privacy Framework |
| Meta Platforms, Inc. | Conversion pixel on the Voltzzflow site, consent-gated only | USA — certified under the EU-U.S. Data Privacy Framework |
| Trustpilot A/S | Reviews widget, consent-gated only | Denmark (EU) |
Need something for compliance?
If your bank or compliance team has follow-up questions — or you need a signed Data Processing Agreement (DPA) — write to us directly. We usually reply the same business day.
Email us about compliance