Privacy Policy

Voltuno is the controller for the personal data described in this policy. Questions can be sent to [email protected].

• Company number / VAT: BE1040700528
• Contact: [email protected]

The Provider is not a controller subject to a legal obligation to appoint a data protection officer (DPO) within the meaning of Article 37 GDPR, and has therefore not appointed one. For any questions about personal data, please use the email address above.

Depending on how you use Voltuno, we process the following categories of personal data:

• Identification data: surname, first name, email address, phone number (when you submit a contact request or register).
• Business data: company name, VAT number and address (when purchasing a paid plan).
• Billing and payment data: billing address and payment references (processed by our payment partners; we do not store full card details).
• Technical data: IP address, browser type, device type, operating system, language preference.
• App usage data: error reports, anonymous feature statistics for stability and improvement.
• Project content: schematics, plans and metadata that you create or save in the Voltuno editor.

We process your data for the following purposes, each on a valid legal basis under Article 6.1 GDPR:

• Performance of the subscription agreement (Art. 6.1.b GDPR): creating an account, providing access to the web app, customer support, invoicing and collection.
• Legal obligations (Art. 6.1.c GDPR): accounting obligations, tax obligations, responding to legal requests.
• Legitimate interest (Art. 6.1.f GDPR): error analysis, fraud prevention, security of our infrastructure, anonymous statistics for product improvement.
• Consent (Art. 6.1.a GDPR): commercial newsletters and marketing communications. You may withdraw your consent at any time.

We never sell your data. We share it only with service providers who help us deliver our services (hosting, payment providers, email delivery, error monitoring). Our application and stored data are hosted on DigitalOcean cloud infrastructure located in a data centre in Amsterdam (the Netherlands), within the European Union. These service providers act on our behalf and provide appropriate safeguards.

In principle, we process your personal data within the European Economic Area (EEA). Where a processor or service provider processes data outside the EEA, we ensure that this takes place under an adequate level of protection as required by the GDPR. This may be through an adequacy decision of the European Commission, the Commission's Standard Contractual Clauses (SCCs), or binding corporate rules (BCRs). On simple request to [email protected], we will provide more information on the safeguards applied.

• Account data: up to 1 year after cancellation of your subscription, subject to legal retention obligations.
• Billing data: 7 years (Belgian accounting legislation).
• Contact requests: maximum 2 years after your last contact.
• Error reports and logs: 90 days.

You have the following rights regarding your personal data:

• Right of access to the data we process about you.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure when there is no longer a valid reason to retain it.
• Right to restriction of processing.
• Right to portability in a structured, commonly used format.
• Right to object to processing based on legitimate interest.
• Right to withdraw your consent at any time.

To exercise these rights, send a request to [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Data Protection Authority, Drukpersstraat 35, 1000 Brussels ([email protected]).

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or alteration. Connections to our website are encrypted via TLS. Access to production systems is limited to authorised personnel.

Our website uses a few essential cookies for session and language preferences. For more information, please refer to our cookie policy.

Our Service is not specifically aimed at children under the age of 16. If you are under 16, you may only use the Service under the supervision or with the consent of a parent or guardian. Should we establish that we have unintentionally processed personal data of a child under the age of 13 without valid consent, we will delete it upon first request.

We may update this privacy policy when our services or applicable law change. The date of the most recent update appears at the top of this page. Significant changes will be communicated by email or in the web app.

For questions about this privacy policy, you can reach us at [email protected].