Privacy Policy

This policy describes how the Volobox website (the "Site") handles your information. It covers this marketing website only. Use of the Volobox product itself is governed by the agreement you or your company signs with us, which includes its own data processing terms.

Who we are

Volobox is built by Volosoft. For anything related to this policy, contact us at [email protected].

Information we process

• Demo requests: your name, work email, company, team size, and the optional message you write. Submissions are emailed to our sales inbox so we can schedule and prepare your demo.
• Communications: if you write to us directly, we process the contact details and contents of the correspondence needed to answer you.
• Website and security data: our hosting and content-delivery providers process ordinary request data such as your IP address, requested URL, browser headers, timestamps, and security signals. Limited application and infrastructure logs may also be created to deliver, secure, and troubleshoot the Site.
• Usage statistics: we measure how the Site is used with Plausible and Google Analytics 4. Together they collect page paths, referrers, browser, operating system, device type, approximate location derived from the IP address, engagement metrics such as time on page and scroll depth, and similar interaction signals (for example outbound-link clicks, file downloads, video plays and how far a video was watched, and generic form submission events). They do not receive the values you type into the demo form.
• Account sign-in: if you choose to sign in, our identity service processes your account details and OpenID Connect authentication data, including session and refresh tokens.

Cookies and tracking

The Site does not use advertising cookies, and we do not sell personal information to advertisers or use analytics to follow you across unrelated third-party sites for advertising. For usage statistics we use two services:

• Plausible: a cookieless analytics service. Plausible does not use cookies, browser storage, or a persistent identifier. It processes the IP address and user agent received with a request to produce a daily identifier, then discards the raw values. It does not use the information to follow you across sites or build a personal profile.
• Google Analytics 4: uses cookies and similar identifiers to distinguish visits, measure traffic and engagement, and attribute how visitors find the Site. Google may process this information in accordance with its own terms and privacy policy as our analytics provider.

The Site also uses the following functional browser storage:

• Theme preference: your light/dark choice is kept in your browser's local storage. It never leaves your device.
• Sign-in: when you ask to sign in to an existing Volobox account, authentication is handled by our identity server using OpenID Connect. The identity server uses session cookies on the authentication domain, and the Site stores the configuration and refresh token needed to maintain your requested session in local storage. Browsing the Site does not require an account or initialize this authentication storage.

Purposes and legal bases

• We process demo requests and correspondence to take steps you request before entering a contract and for our legitimate interest in responding to business enquiries.
• We process request data and logs for our legitimate interests in delivering, protecting, preventing abuse of, and troubleshooting the Site.
• We use Plausible and Google Analytics for our legitimate interest in understanding and improving the Site. Plausible provides cookieless aggregate statistics; Google Analytics provides more detailed usage measurement that may rely on cookies and identifiers.
• We process authentication data to provide the sign-in service you request, perform our agreements with account holders, and protect accounts.

Service providers and transfers

We use service providers only where needed to operate the Site. These include Cloudflare for content delivery and security, Plausible and Google Analytics for usage statistics, Postmark for delivery of demo-request emails, and our hosting and identity-service providers. They process information on our instructions or under their own applicable legal obligations.

Some providers may process information outside your country. Where applicable law requires it, we use an adequacy decision, contractual safeguards, or another lawful transfer mechanism. We do not sell personal information, share it with advertisers, or add demo requesters to unrelated marketing lists.

Retention and deletion

We keep demo requests and correspondence while the conversation is active and afterward only for as long as reasonably needed for follow-up, legal, accounting, or security purposes. Operational logs and rate-limit records are retained only as needed to operate and protect the Site. Plausible rotates its daily visitor identifier every 24 hours and retains aggregate statistics. Google Analytics retains measurement data according to the retention settings configured for our property and Google's applicable policies. Authentication storage remains until you sign out, the session expires or is revoked, or you clear your browser storage.

Your rights

Depending on the law that applies to you, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may also complain to your local data-protection authority. Email [email protected] to exercise a right or ask a privacy question. We may need to verify your identity before completing a request.

Changes to this policy

If we change how the Site handles data, we will update this page and the date at the top.