New: the AI Agent now understands any question

Last updated: 11 octombrie 2026

Privacy Policy

This policy explains what data Voltzzflow collects, why, and your rights under the GDPR (EU Regulation 2016/679).

Data controller

Voltzzflow (Suciu Constantin-Alexandru Persoana Fizica Autorizata, CUI 49730652, registered at Str. Monumentului nr. 67, Sat Olteni, Com. Bujoreni, Jud. Valcea) is the controller of data processed through the platform. For any data request, write to [email protected].

What we collect

Account data: name, email, password (stored hashed).

Business data you enter: clients, projects, tasks, issues, documents, invoices and uploaded files.

Phone number, only if you add it for SMS verification (required for hosting sites on the Free plan).

Minimal technical data: IP address and security logs to prevent abuse.

If you use the Sites feature: the code, files and traffic of the sites you host — see the dedicated Sites section in the Terms of Service for how this data is handled.

Purposes and legal basis

Providing the service (performance of a contract).

Security and fraud prevention, including phone verification for site hosting (legitimate interest).

Billing and legal obligations (legal obligation).

Optional traffic analytics (Microsoft Clarity, Google Analytics, Meta Pixel), only with your explicit consent (consent) — see the Cookie Policy.

We never use your data for third-party advertising and never sell it.

Storage and security

Data is strictly isolated per organization. Integration secrets are encrypted, files are served via signed URLs, and sensitive actions are recorded in an audit log.

Data retention

We keep data while your account is active. On account deletion, data is removed within a reasonable period, except where law requires retention (e.g. invoices).

Processors and international transfer

We use providers for hosting, payments (Netopia, Stripe), invoicing (Oblio), phone verification (Google Firebase), email delivery (Google), source code access for Sites (GitHub) and, only with your consent, traffic analytics (Microsoft Clarity, Google Analytics, Meta Pixel) and reviews (Trustpilot). The complete, up-to-date list, with each provider's role and location, is on the Data Residency page.

Some of these providers are based in the USA. Data is transferred to them only when they are certified under the EU-U.S. Data Privacy Framework, a mechanism recognized by the European Commission as providing an adequate level of protection.

Your rights (GDPR)

You have the right to access, rectification, erasure, restriction, portability and objection. You can withdraw consent anytime and lodge a complaint with your supervisory authority.

To exercise your rights, write to [email protected].