Last updated: 11 octombrie 2026
Privacy Policy
This policy explains what data Voltzzflow collects, why, and your rights under the GDPR (EU Regulation 2016/679).
Data controller
Voltzzflow (Suciu Constantin-Alexandru Persoana Fizica Autorizata, CUI 49730652, registered at Str. Monumentului nr. 67, Sat Olteni, Com. Bujoreni, Jud. Valcea) is the controller of data processed through the platform. For any data request, write to [email protected].
What we collect
Account data: name, email, password (stored hashed).
Business data you enter: clients, projects, tasks, issues, documents, invoices and uploaded files.
Phone number, only if you add it for SMS verification (required for hosting sites on the Free plan).
Minimal technical data: IP address and security logs to prevent abuse.
If you use the Sites feature: the code, files and traffic of the sites you host — see the dedicated Sites section in the Terms of Service for how this data is handled.
Purposes and legal basis
Providing the service (performance of a contract).
Security and fraud prevention, including phone verification for site hosting (legitimate interest).
Billing and legal obligations (legal obligation).
Optional traffic analytics (Microsoft Clarity, Google Analytics, Meta Pixel), only with your explicit consent (consent) — see the Cookie Policy.
We never use your data for third-party advertising and never sell it.
Storage and security
Data is strictly isolated per organization. Integration secrets are encrypted, files are served via signed URLs, and sensitive actions are recorded in an audit log.
Data retention
We keep data while your account is active. On account deletion, data is removed within a reasonable period, except where law requires retention (e.g. invoices).
Processors and international transfer
We use providers for hosting, payments (Netopia, Stripe), invoicing (Oblio), phone verification (Google Firebase), email delivery (Google), source code access for Sites (GitHub) and, only with your consent, traffic analytics (Microsoft Clarity, Google Analytics, Meta Pixel) and reviews (Trustpilot). The complete, up-to-date list, with each provider's role and location, is on the Data Residency page.
Some of these providers are based in the USA. Data is transferred to them only when they are certified under the EU-U.S. Data Privacy Framework, a mechanism recognized by the European Commission as providing an adequate level of protection.
Your rights (GDPR)
You have the right to access, rectification, erasure, restriction, portability and objection. You can withdraw consent anytime and lodge a complaint with your supervisory authority.
To exercise your rights, write to [email protected].