Privacy Policy

Effective: on publication · Last updated: 19 June 2026

voltaflow LLC ("voltaflow," "we," "us") respects your privacy. This Policy explains what personal information we collect through voltaflow.com (the "Site") and in our business, how we use, share, and transfer it, and the rights you have. voltaflow is a Wyoming, USA limited liability company and is the controller of this information. The Site and our services are for businesses and professionals (B2B) and are not directed to children.

Where we operate. We currently provide services to, and handle requests under the laws of, the United States, Canada, Mexico, and Australia. We are not yet set up to offer services to UK or EU/EEA data subjects; if that changes, we will appoint a UK/EU representative and update this Policy. If you are in the UK or EU and contact us, we will still handle your request reasonably.

1. Who is responsible

• Controller: voltaflow LLC, 1021 E Lincolnway, Cheyenne, Wyoming 82001, USA (registered-agent address; substitute a preferred contact address if desired). For Mexican data subjects, voltaflow LLC is the responsable.
• Privacy contact / Privacy Officer: the Privacy Officer, privacy@voltaflow.com (general: hello@voltaflow.com).

2. Information we collect

a. You provide: contact / "Book a strategy call" form — name, business email, company, role, message; "AI estimate" inputs (please don't enter sensitive or health information); and your communications with us. b. Automatically: IP address, device/browser type, pages viewed, referring URLs and similar usage data; via cookies and similar technologies, including Google Analytics and the Meta Pixel and LinkedIn Insight Tag. See our Cookie Policy.

We do not intentionally collect sensitive/special-category information through the Site.

3. Categories of personal information (CCPA/CPRA)

We do not sell personal information for money. Our use of advertising cookies/pixels may be "selling"/"sharing" under US state laws — opt out in §7.

4. Sources

Directly from you; automatically from your device; and from our analytics/advertising providers.

5. Purposes and legal bases

• Respond to inquiries, provide estimates, deliver services — to take steps you request / our legitimate business interests. (Mexico: primary purpose — no consent needed.)
• Operate, secure, and improve the Site — legitimate interests.
• Analytics — with your consent. (Mexico: secondary purpose — you may opt out.)
• Marketing / advertising (incl. retargeting) — with your consent. (Mexico: secondary purpose — you may opt out.)
• Comply with law; establish/defend claims — legal obligation / legitimate interests.

6. Cookies, analytics, advertising

Strictly necessary cookies are always on. Analytics and advertising cookies load only with your consent; non-essential cookies don't fire until you accept them, and you can change or withdraw consent anytime. Advertising cookies share online identifiers with Meta and LinkedIn for measurement and retargeting. Details: Cookie Policy.

7. Your choices: opt out of sale/sharing & targeted advertising

• "Do Not Sell or Share My Personal Information" — use the Site-footer link or the cookie controls.
• Global Privacy Control (GPC) — we honor recognized opt-out signals and confirm when applied.
• You can also block cookies in your browser.

8. How we share personal information

• Service providers / processors: cloud hosting (AWS / Google Cloud / Microsoft Azure), analytics (Google), advertising/measurement (Meta, LinkedIn), and our email/CRM provider [provider — to confirm].
• Our contractors who build and maintain software do not access this website/marketing personal data; their agreements restrict them to code/infrastructure.
• Legal / corporate: to comply with law, respond to lawful requests, protect rights/safety, or in a merger or asset sale.

We require providers to protect personal information and use it only to serve us.

9. International transfers and access

We are a US company and our providers are primarily in the United States, so your personal information is stored and processed in the United States. In addition, authorized voltaflow personnel (including our management) may access it from outside the United States (including Mexico/LATAM). These countries may have different data-protection laws.

• Canada / Quebec: transfers/communications outside Quebec are subject to a privacy impact assessment and a written agreement.
• Australia: we remain accountable under APP 8 for overseas recipients.
• Mexico: see §12.

10. Data retention

Inquiry/contact data: up to 24 months after our last interaction. Analytics/advertising: per the provider's retention settings (e.g., ~14 months). Longer where law or disputes require. Then we delete or de-identify.

11. Your privacy rights by region

United States (California CCPA/CPRA & other states). Rights to know/access, delete, correct, opt out of sale/sharing (§7), and limit sensitive PI; no discrimination for exercising them; several states add an appeal right. Submit to privacy@voltaflow.com; we verify via the information you provide; authorized agents may act with proof.

Canada (PIPEDA / Quebec Law 25). Rights to access and correction, withdraw consent, and (Quebec) de-indexing and portability. Complaints to our Privacy Officer, and to the OPC or the Quebec CAI.

Australia (Privacy Act / APPs). Rights to access (APP 12) and correction (APP 13), and to opt out of direct marketing (APP 7). Complaints to our Privacy contact and, if unresolved, the OAIC.

Mexico (LFPDPPP). ARCO rights, revoke consent, limit use/disclosure, and accept/refuse transfers (§12). Submit to the responsable at privacy@voltaflow.com; we respond within the legal timeframe (max 20 days to communicate the determination). The Spanish aviso de privacidad governs for data subjects in Mexico.

We respond within the time limits applicable to your region (generally within 30 days; Mexico per §12).

12. Notice for Mexican data subjects (resumen — see the Spanish aviso de privacidad)

• Responsable: voltaflow LLC, 1021 E Lincolnway, Cheyenne, WY 82001, USA.
• Purposes: §5. Primary purposes need no consent; secondary purposes (analytics, marketing) — you may opt out at privacy@voltaflow.com or via the cookie banner.
• Transfers: your data is stored in the US and may be accessed by voltaflow personnel outside Mexico; by using the Site and not objecting, you accept this transfer — express any objection at privacy@voltaflow.com.
• ARCO / revocation / limiting use: as in §11; authority: Secretaría Anticorrupción y Buen Gobierno (Transparencia para el Pueblo). The complete aviso de privacidad in Spanish is published separately.

13. Automated decision-making

The "AI estimate" tool gives a non-binding indicative range reviewed by a person before any proposal; it is not a solely automated decision with legal or similarly significant effects.

14. Security & changes

We use reasonable administrative, technical, and organizational safeguards appropriate to the data's sensitivity; no method is 100% secure. We may update this Policy and will post a new "Last updated" date and, where required, notify you or seek renewed consent.

15. Contact & supervisory authorities

privacy@voltaflow.com · hello@voltaflow.com · voltaflow LLC, 1021 E Lincolnway, Cheyenne, WY 82001, USA. You may also complain to: the California Privacy Protection Agency / Attorney General (California), the OPC / Quebec CAI (Canada), the OAIC (Australia), or the Secretaría Anticorrupción y Buen Gobierno (Mexico).

Final v1.0 — 2026-06-19. Pending attorney review. UK/EU deferred until a representative is appointed. Confirm privacy@ mailbox and the email/CRM provider before publishing.