Privacy Policy

Our two roles: controller and processor

For information about our own visitors, account holders, and billing — for example when a dealer, installer (EPC), or sales rep signs up, or when someone browses volnova.app — we act as a "controller": we decide how and why that information is used, and this Policy governs it.

For information that our business customers load into or capture through the platform about their own leads and homeowners (names, contact details, project and site information, call/message content, and similar), we act as a "processor" (a "service provider" under U.S. state law) on that customer's behalf. The customer — the dealer or installer you did business with — is the controller of that information and is responsible for its collection and for responding to privacy requests about it. If you are a homeowner or prospect and want to access, correct, or delete information a business holds about you, please contact that business directly; we will assist our customer as required by our agreement with them.

Information we collect

Depending on how you interact with the Service, we may collect:

• Account and business information: your name, business/organization name, email address, phone number, role, and login credentials.
• Billing and payout information: subscription plan, transaction history, and the payment/bank details needed to charge subscriptions and route payouts. Card and bank numbers are collected and stored by our payment processor (Stripe) — we do not store full card or bank account numbers on our own systems.
• Customer Data you provide as a controller: if you are a customer, the lead, homeowner, contact, project, proposal, and pipeline data you input or import. We process this on your behalf (see "Our two roles").
• Communications content: the calls, text messages, emails, chats, and support tickets sent or received through the platform, including recordings, transcripts, and AI-generated drafts and summaries, used to deliver the messaging features and power the AI assistants.
• Install-network data: for installers (EPCs), your service areas (states/counties), capabilities, availability, ratings, and confidential pricing (redline and install-only rates) used to match and route projects.
• Usage, device, and log data: IP address, browser and device information, pages viewed, actions taken, and timestamps — including records used to document communications consent.
• Information from third parties: for example phone-number and Do-Not-Call verification results from data providers, and information from integrations you connect.

How we use information

• Provide, operate, maintain, secure, and improve the Service.
• Create and administer accounts and authenticate users.
• Process subscriptions and the platform transaction fee, and facilitate payouts to dealers, reps, and installers.
• Match and route projects across the install network based on coverage, capability, availability, ratings, and pricing.
• Power communications and AI features — placing/receiving calls and messages you initiate, transcribing and summarizing them, and drafting responses for your review.
• Provide customer support and respond to your requests.
• Detect, prevent, and address fraud, abuse, security incidents, and technical issues.
• Comply with legal obligations, enforce our Terms, and establish or defend legal claims.
• Send you service, security, and administrative notices, and — where permitted — communications about our own products.

Artificial intelligence and automated features

The Service includes AI-assisted features, such as voice, SMS, and email assistants and design/proposal tools. To provide these, communications and related content may be processed by us and by trusted AI sub-processors. AI outputs can be inaccurate or incomplete and are intended to be reviewed by a human before use; they are not professional, legal, financial, engineering, or tax advice, and design outputs are estimates, not guarantees.

We do not sell your content, and we do not permit our AI sub-processors to use customer content to train their general-purpose models except as necessary to provide the Service or as otherwise agreed with you. We may use aggregated and de-identified data (which does not identify you or any individual) to operate and improve the Service.

Text messaging (SMS/MMS) and consent

If you opt in to text messages — whether from us or through a customer's use of the platform — you may receive messages such as appointment reminders, confirmations, follow-ups, account notifications, and occasional offers. Message frequency varies. Message and data rates may apply. Reply STOP to cancel or HELP for help at any time. Consent to receive texts is not a condition of any purchase.

No mobile information (including opt-in and consent data) is sold, and it is not shared with third parties or affiliates for their own marketing or promotional purposes. It is used only to deliver the communications you or our customer have configured, and shared with communications providers solely to send those messages on our or our customer's behalf.

Cookies and similar technologies

We use cookies and similar technologies that are necessary to sign you in, keep your session secure, remember preferences, and understand how the Service is used so we can improve it. You can control cookies through your browser settings; disabling some cookies may affect functionality. volnova.app is not designed to respond to browser "Do Not Track" signals; where required, we honor recognized opt-out preference signals as described under "Your rights and choices."

How we share information

We share information only as described here. We do not sell personal information.

• Sub-processors and service providers: vendors that host and operate the Service and perform functions on our behalf (see "Sub-processors"), under contracts that limit their use of the information.
• Within the install network: when a project is routed, the business contact and project details needed to fulfill it are shared between the dealer and the matched installer. Confidential installer pricing is disclosed only to the platform and the specific dealer a job is quoted to — never to competing organizations. Only aggregate benchmarks (not any org's individual pricing) are ever shown to others.
• Payments and payouts: our payment processor (Stripe) to process subscriptions and route funds. Your use of payouts is also subject to Stripe's terms.
• At your direction: with integrations, lenders, or other parties you choose to connect or engage.
• Legal, safety, and rights: to comply with law, regulation, legal process, or governmental request, and to protect the rights, property, and safety of Volnova, our customers, and others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

Sub-processors

We rely on a limited set of sub-processors to deliver the Service, which currently include providers for: payment processing and payouts (Stripe); voice and SMS communications (Telnyx); AI processing (Anthropic); transactional email delivery; phone/Do-Not-Call data verification; and cloud hosting and infrastructure.

The categories above reflect our current providers; the specific list may change as the Service evolves. A current list of sub-processors is available on request at privacy@volnova.app.

Data retention

We retain personal information for as long as your account is active and as needed to provide the Service, and thereafter as necessary to comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Consent and communications records are retained as needed to demonstrate compliance.

For Customer Data we process on a customer's behalf, we retain, return, or delete it in accordance with our agreement with that customer, typically deleting or de-identifying it within a reasonable period after account termination, subject to any legal retention requirements.

Security

We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit, access controls, and least-privilege practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and for configuring your account and users appropriately.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of your personal information, and to opt out of certain processing. You can also unsubscribe from marketing emails using the link in those messages, and reply STOP to opt out of texts.

California residents have rights under the CCPA/CPRA, including to know, delete, and correct personal information, and to opt out of "sale" or "sharing" of personal information and of targeted advertising. We do not sell personal information and do not share it for cross-context behavioral advertising. Residents of other U.S. states with comparable laws have similar rights. We do not discriminate against you for exercising these rights.

To exercise rights with respect to information for which we are the controller, contact us at privacy@volnova.app; we will verify your request as required by law. If your request concerns information a business customer controls (for example, a homeowner's information a dealer holds), please contact that business — as the controller, it is responsible for responding, and we will support it as required.

International users

The Service is operated in the United States and is intended for users in the United States. If you access it from outside the U.S., you understand your information will be processed in the United States, where data-protection laws may differ from those in your location.

Children's privacy

The Service is a business tool intended for use by adults (18+) and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

Third-party sites and services

The Service may link to or interoperate with third-party sites and services (for example, financing/lender portals and payment providers). We are not responsible for their content or privacy practices; their own terms and policies govern your use of them.

Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will provide notice as appropriate — for example, by posting the updated Policy here with a new date or by notifying you through the Service. Your continued use of the Service after the effective date means you accept the updated Policy.

Contact us

If you have questions or requests regarding this Policy or your information, contact us at privacy@volnova.app, or by mail at Volnova, c/o Sales Team Toolbox LLC, 75 E 3rd St. STE #7, Sheridan, WY 82801.