Privacy Policy
Effective Date: 13/12/2025
Last Updated: 13/12/202
1. Introduction
Jontavo (referred to as "we," "us," or "our") operates the website https://www.voliflow.com. We respect your privacy and are committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights concerning that information, particularly in compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Who is the Data Controller?
The data controller responsible for the collection, use, and disclosure of personal information under this Privacy Policy is:
- Company Name: Jontavo LLC
- Email: support@voliflow.com
3. Data We Collect and Why We Collect It
We collect two main types of data: Information you provide to us and Information collected automatically.
A. Information You Provide (Newsletter/Waitlist Registration)
| Data Category | Data Elements Collected | Purpose of Processing | Legal Basis (GDPR) |
|---|---|---|---|
| Contact Data | Email Address | To send you our email updates, newsletters, and promotional content. | Consent (Art. 6(1)(a) GDPR), clearly obtained via the double opt-in process. |
| Consent Data | IP Address, Date/Time of Subscription and Confirmation | To prove that you willingly consented to join our list (Proof of Consent). | Legal Obligation (Art. 6(1)(c) GDPR) and Legitimate Interest (Art. 6(1)(f) GDPR) for dispute resolution. |
B. Information Collected Automatically (Website Activity)
| Data Category | Data Elements Collected | Purpose of Processing | Legal Basis (GDPR) |
|---|---|---|---|
| Usage Data | IP Address (anonymized), Browser Type, Device Type, Operating System, Pages Visited, Time Spent, Referrer URL. | To analyze website performance, user demographics, and general visitor activity to improve the website. | Consent (Art. 6(1)(a) GDPR) via the use of cookies/tracking (required for Google Analytics). |
4. How We Share Your Information (Third-Party Processors)
We use third-party service providers to help us run our website and services. These parties are acting as Data Processors (or Service Providers under CCPA) on our behalf and are legally bound to protect your data.
A. Email Marketing: Brevo (formerly Sendinblue)
- Purpose: To manage our email subscriber list, host our registration form, and send our double opt-in confirmation and marketing emails.
- Data Shared: Email Address, Subscription Date/Time, Email Activity (opens and clicks).
- GDPR Compliance: We have a Data Processing Agreement (DPA) with Brevo to ensure your data is handled securely and in compliance with GDPR.
- Brevo's Policy: Brevo's use of information is governed by the Brevo Privacy Policy.
B. Website Analytics: Google Analytics
- Purpose: To track and report website traffic, analyze user behavior, and understand user demographics (location, interests).
- Data Shared: Pseudonymized IP address, cookie identifiers, usage data.
- Opt-Out: You can opt-out of Google Analytics tracking by installing Google's opt-out browser add-on: Google Analytics Opt-Out
- Google's Policy: Google's use of information is governed by the Google Privacy Policy.
5. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies (like those used by Google Analytics) to track activity and hold certain information.
- What are cookies? Cookies are small data files stored on your device that often include an anonymous unique identifier.
- Types: We use Performance Cookies (Google Analytics) to help us analyze how visitors use the site.
6. Data Retention
We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy:
- Marketing Data (Email): We retain your email address until you unsubscribe (withdraw consent). Once you unsubscribe, your data will be securely deleted or anonymized within [e.g., 30 days].
- Analytics Data (Google Analytics): Data is retained according to the retention settings configured in Google Analytics (usually between 14 months and 50 months).
7. Your Data Protection Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
- The Right to Access: You can request a copy of the personal data we hold about you.
- The Right to Rectification: You can request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- The Right to Erasure ('Right to be Forgotten'): You can request that we delete your personal data, under certain conditions.
- The Right to Restrict Processing: You can request that we restrict the processing of your personal data, under certain conditions.
- The Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you.
- The Right to Withdraw Consent: Where we rely on your consent (e.g., for email marketing), you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at support@voliflow.com.
8. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top.