Privacy Policy - voluntasOS

Introduction

At voluntasOS ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our consent management platform and related services.

As a consent management platform, we understand the importance of transparency and user control over personal data. We apply the same principles to our own data practices that we enable for our customers.

Information We Collect

Account Information

When you create a voluntasOS account, we collect:

Full name
Email address
Organization name
Phone number (optional)
Password (encrypted)

Usage Information

When you use our platform, we automatically collect:

IP address and device information
Browser type and version
Pages visited and features used
Time and date of visits
Referring website addresses

Customer Widget Data

When visitors interact with voluntasOS widgets deployed on your website:

Consent preferences (cookie categories accepted/declined)
Remediation script acceptance status
Widget interaction timestamps
Basic device and browser information (for display purposes only)

Note: This data belongs to our customers (website owners), and we process it on their behalf as a data processor.

How We Use Your Information

We use the information we collect to:

Provide and maintain our services - Process your account registration, authenticate users, and deliver platform features
Improve our platform - Analyze usage patterns to enhance functionality and user experience
Communicate with you - Send service updates, security alerts, and respond to inquiries
Ensure security - Detect and prevent fraud, abuse, and security incidents
Comply with legal obligations - Respond to legal requests and enforce our terms
Process billing - Handle subscription payments and manage your account status

Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers

We work with trusted third-party service providers who assist us in operating our platform, including:

Cloud hosting providers (server infrastructure)
Payment processors (Stripe for billing)
Email service providers (for transactional emails)
Analytics services (aggregated usage data only)

These providers are contractually obligated to protect your data and may only use it to provide services to us.

Legal Requirements

We may disclose your information if required by law, such as:

To comply with court orders or legal processes
To respond to government requests
To protect our rights, property, or safety
To prevent fraud or security threats

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

Encryption in transit (TLS/SSL) and at rest
Secure password hashing (bcrypt)
Regular security audits and updates
Access controls and authentication
Database backups and disaster recovery

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Your Privacy Rights

Depending on your location, you may have the following rights:

Access and Portability

You can access and export your account data at any time through your dashboard.

Correction

You can update your account information in your profile settings.

Deletion

You can request deletion of your account and associated data. Contact us at privacy@voluntasos.com. Note that we may retain certain information for legal compliance.

Objection and Restriction

You can object to certain data processing or request restriction of processing.

Withdraw Consent

Where we rely on your consent, you can withdraw it at any time.

GDPR Rights (EU/EEA Residents)

If you are in the European Economic Area, you have additional rights under GDPR, including the right to lodge a complaint with a supervisory authority.

CCPA Rights (California Residents)

California residents have specific rights under the California Consumer Privacy Act. We do not sell personal information.

Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

Account data: Retained while your account is active, plus 30 days after account closure
Usage logs: Retained for 90 days for security and analytics purposes
Billing records: Retained for 7 years for tax and accounting compliance
Widget consent data: Retained according to customer configuration (typically 12-24 months)

Cookies and Tracking

We use essential cookies to:

Maintain your login session
Remember your preferences
Ensure platform security

We do not use third-party advertising cookies or tracking pixels. We do not sell data to advertisers.

International Data Transfers

voluntasOS is operated in the United States. If you are accessing our services from outside the U.S., your information will be transferred to and processed in the United States. We ensure appropriate safeguards are in place for international transfers.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Posting the updated policy on this page
Updating the "Last Updated" date
Sending an email notification for significant changes

Your continued use of voluntasOS after changes take effect constitutes acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@voluntasos.com
Contact Form: Contact Us
Mail: voluntasOS Privacy Team