Privacy Policy

Effective: on publication · Last updated: 13 October 2026

voltaflow LLC ("voltaflow," "we," "us") respects your privacy. This Policy explains what personal information we collect through voltaflow.com (the "Site") and in our business, how we use, share, and transfer it, and the rights you have. voltaflow is a Wyoming, USA limited liability company and is the controller of this information. The Site and our services are for businesses and professionals (B2B) and are not directed to children.

Where we operate. We currently provide services to, and handle requests under the laws of, the United States, Canada, Mexico, and Australia. We are not yet set up to offer services to UK or EU/EEA data subjects; if that changes, we will appoint a UK/EU representative and update this Policy. If you are in the UK or EU and contact us, we will still handle your request reasonably.

1. Who is responsible

• Controller: voltaflow LLC, 1021 E Lincolnway, Cheyenne, Wyoming 82001, USA. For Mexican data subjects, voltaflow LLC is the responsable.

• Privacy contact / Privacy Officer: the Privacy Officer, privacy@voltaflow.com (general: hello@voltaflow.com).

2. Information we collect

a. You provide: information you choose to send us by email or WhatsApp, such as your name, business contact details, company, project needs, messages, and attachments. The public Site opens your email app or WhatsApp; it does not submit a contact form or produce an automated estimate. Opening a link does not send a message: you decide what to send. Please do not send sensitive or health information.

Quotations and payments: separately shared quotation or payment links may process the information needed to review a proposal, accept it, or complete a payment. Those existing flows are separate from the Site's public contact links.

WhatsApp: if you message us on WhatsApp at +1 (646) 637-5611 — including through the Site's links, which open a WhatsApp chat with your request already written — or we follow up with you there at the number you gave us, we receive your WhatsApp name/profile, your phone number, and the messages and content we exchange.

b. Automatically: hosting and security services process technical request information such as IP address and device/browser details. With your analytics consent, Google Analytics / Google Tag Manager, Vercel Web Analytics, and Vercel Speed Insights measure pages, device/browser categories, site interactions, and performance. Contact events describe the selected service or project, language, and action location; they do not include the message text, email address, phone number, or full WhatsApp link. See our Cookie Policy.

We do not intentionally collect sensitive/special-category information through the Site.

3. Categories of personal information (CCPA/CPRA)

We do not sell personal information for money. The current Site has no advertising or retargeting pixels. Your opt-out controls and privacy rights remain available in §7.

4. Sources

Directly from you (including when you message us on WhatsApp); automatically from your device; and from our hosting and consent-gated analytics providers.

5. Purposes and legal bases

• Respond to inquiries, prepare quotations, deliver services — to take steps you request / our legitimate business interests. (Mexico: primary purpose — no consent needed.)
• Operate, secure, and improve the Site — legitimate interests.
• Analytics — with your consent. (Mexico: secondary purpose — you may opt out.)
• Marketing / advertising — only where applicable and with your consent. The current Site has no advertising or retargeting pixels. (Mexico: secondary purpose — you may opt out.)
• Comply with law; establish/defend claims — legal obligation / legitimate interests.

6. Cookies, analytics, advertising

Strictly necessary storage remembers your language and consent choices. Analytics runs only with your consent on the public Site, and you can change or withdraw consent at any time. Google Analytics may use cookies; Vercel Web Analytics and Speed Insights use measurement without analytics cookies. The current Site does not install advertising or retargeting pixels. Details: Cookie Policy.

7. Your choices: opt out of sale/sharing & targeted advertising

• "Do Not Sell or Share My Personal Information" — use the Site-footer link or the cookie controls.
• Global Privacy Control (GPC) — we honor recognized opt-out signals and confirm when applied.
• You can also block cookies in your browser.

8. How we share personal information

• Site providers: website hosting and delivery (Vercel); consent-gated measurement (Google Analytics / Google Tag Manager, Vercel Web Analytics, Vercel Speed Insights).
• Separate quotation/payment flows: existing database and protected processing (Supabase), transactional email (Resend), bot/spam protection where enabled for those flows (Cloudflare Turnstile), and the payment provider shown in the relevant payment flow. These are not needed to open the public WhatsApp or email contact links.
• Inquiry follow-up: Connver can organize communications and their campaign source when a messaging channel is connected and receipt has been confirmed. Opening the website's WhatsApp link alone does not establish that an inquiry was received or recorded in Connver. Each provider receives only the data needed for its function.
• Messaging (WhatsApp): when you contact us on WhatsApp, or we follow up with you there, the messages are transmitted through WhatsApp (WhatsApp LLC, a Meta Platforms company), which processes them under its own terms and privacy policy. We use what we exchange with you there to respond to your request and provide our services and, where needed, for the legal purposes in §5.
• Our contractors who build and maintain software do not access this website/marketing personal data; their agreements restrict them to code/infrastructure.
• Legal / corporate: to comply with law, respond to lawful requests, protect rights/safety, or in a merger or asset sale.

We require providers to protect personal information and use it only to serve us.

9. International transfers and access

We are a US company and our providers are primarily in the United States, so your personal information is stored and processed in the United States. In addition, authorized voltaflow personnel (including our management) may access it from outside the United States (including Mexico/LATAM). These countries may have different data-protection laws.

• Canada / Quebec: transfers/communications outside Quebec are subject to a privacy impact assessment and a written agreement.
• Australia: we remain accountable under APP 8 for overseas recipients.
• Mexico: see §12.

10. Data retention

Inquiry/contact data, including WhatsApp conversations: up to 24 months after our last interaction. Analytics: per the provider's configured retention settings. Longer where law or disputes require. Then we delete or de-identify.

11. Your privacy rights by region

United States (California CCPA/CPRA & other states). Rights to know/access, delete, correct, opt out of sale/sharing (§7), and limit sensitive PI; no discrimination for exercising them; several states add an appeal right. Submit to privacy@voltaflow.com; we verify via the information you provide; authorized agents may act with proof.

Canada (PIPEDA / Quebec Law 25). Rights to access and correction, withdraw consent, and (Quebec) de-indexing and portability. Complaints to our Privacy Officer, and to the OPC or the Quebec CAI.

Australia (Privacy Act / APPs). Rights to access (APP 12) and correction (APP 13), and to opt out of direct marketing (APP 7). Complaints to our Privacy contact and, if unresolved, the OAIC.

Mexico (LFPDPPP). ARCO rights, revoke consent, limit use/disclosure, and accept/refuse transfers (§12). Submit to the responsable at privacy@voltaflow.com; we respond within the legal timeframe (max 20 days to communicate the determination). The Spanish aviso de privacidad governs for data subjects in Mexico.

We respond within the time limits applicable to your region (generally within 30 days; Mexico per §12).

12. Notice for Mexican data subjects (resumen — see the Spanish aviso de privacidad)

• Responsable: voltaflow LLC, 1021 E Lincolnway, Cheyenne, WY 82001, USA.
• Purposes: §5. Primary purposes need no consent; secondary purposes (analytics, marketing) — you may opt out at privacy@voltaflow.com or via the cookie banner.
• Transfers: your data is stored in the US and may be accessed by voltaflow personnel outside Mexico; by using the Site and not objecting, you accept this transfer — express any objection at privacy@voltaflow.com.
• ARCO / revocation / limiting use: as in §11; authority: Secretaría Anticorrupción y Buen Gobierno (Transparencia para el Pueblo). The complete aviso de privacidad in Spanish is published separately.

13. Automated decision-making

The public Site does not generate automated project estimates. Service pricing and scope are reviewed with you and set out in a separate proposal or agreement.

14. Security & changes

We use reasonable administrative, technical, and organizational safeguards appropriate to the data's sensitivity; no method is 100% secure. We may update this Policy and will post a new "Last updated" date and, where required, notify you or seek renewed consent.

15. Contact & supervisory authorities

privacy@voltaflow.com · hello@voltaflow.com · voltaflow LLC, 1021 E Lincolnway, Cheyenne, WY 82001, USA. You may also complain to: the California Privacy Protection Agency / Attorney General (California), the OPC / Quebec CAI (Canada), the OAIC (Australia), or the Secretaría Anticorrupción y Buen Gobierno (Mexico).