Skip to content
See how it works

Home Privacy

Privacy at Volio

Last updated

This notice covers usevolio.com, Volio's website. It says what we collect, why, who handles it for us, and what you can ask of us.

Who we are. Volio is run by Volio, Greece. Write to us at hello@usevolio.com.

What we collect

When you start a plan, we collect what you give us:

  • your email address, the plan you picked and how you pay (monthly or yearly), in the plan's form;
  • on the payment page that follows, run by our payment processor: your card, your billing address, your business name and, if you give one, your VAT number. We receive these details, except the card number, and keep them with your subscription;
  • if you claimed a place on its page first, that you claimed it.

If you saved your venue's spot on our earlier waitlist, we keep what you typed in: your email address, your venue's name and kind, and which button on which page you used.

With a sign-up we keep how you reached the site on that visit: the page you landed on, the site that sent you (the referrer), any campaign tags in the link you followed (utm_source, utm_medium, utm_campaign, utm_content, utm_term), an ad click id if the link had one (gclid, gbraid, wbraid from Google, fbclid from Meta, ttclid from TikTok, msclkid from Microsoft), and, if an AI assistant sent you, which one (ChatGPT, Perplexity, Copilot, Gemini or Claude).

We use this to run your plan and invoice you, to write to you about it, and to learn which pages and campaigns bring venues to Volio. We don't sell it. To measure our ads on Facebook and Instagram, our server tells Meta when you sign up, and if one of our TikTok ads sent you, it tells TikTok too (see Meta and TikTok below).

When you visit any page, we count the visit: the page's address, the site that sent you, campaign tags and ad click ids in the address, which assistant sent you if one did, your browser and device type, your approximate location (country and city, worked out from your IP address), the time you spent on the page, and which of our buttons you used (for example opening a plan, or using one of our free tools).

Session recordings. On a visit we may record how you use the page: what it showed, where you scrolled, moved the pointer, tapped and clicked. What you type into a field is hidden and never recorded. We watch these to find where the site confuses people or breaks. Like everything else, the recording is kept in the page's memory, not on your device.

No cookies. The site sets no cookies and writes nothing to your browser's lasting storage (no localStorage). PostHog and DataFast each keep a random visit ID in the tab's session storage, which your browser deletes when you close the tab, so a new tab or a later visit gets a new ID and we can't follow you from visit to visit. Umami, our visit counter, combines your IP address, your browser's user agent and a value that changes every month into a one-way code, and keeps only the code. That's also why there is no cookie banner.

Prices. To show the prices of your country, the site asks our own server which country your IP address is in. That answer is used to pick the price list and is not stored.

Who handles it for us

  • Our payment processor takes your card on its own payment page, charges your plan and makes its invoices. It handles your card under its own privacy notice.
  • PostHog (analytics and the earlier waitlist), on its EU servers (eu.posthog.com). It keeps only a random visit ID in the tab's session storage. Events go through our own address (usevolio.com/relay) on their way to PostHog. PostHog Inc. acts as our processor.
  • Umami (visit counts, cloud.umami.is). It sets no cookies. Umami Software, Inc. acts as our processor.
  • DataFast (which channels bring visits and sign-ups, datafa.st), in its cookieless mode: no cookies, only a random visit ID in the tab's session storage. DataFast acts as our processor.
  • Google Analytics (visits and sign-ups, for our Google ads), with every consent denied: it sets no cookies and sends only cookieless pings, from which Google estimates visits. Google Ireland Limited acts as our processor.
  • Google Ads (measuring our Google ads), only if you tick the optional box by the sign-up's email: our server may then tell Google of your sign-up, with your email address as a one-way code (SHA-256) and Google's ad click id (gclid, gbraid or wbraid) if the link you followed had one, so Google can count which ads bring sign-ups; left unticked, Google is told nothing. Google Ireland Limited acts as our processor.
  • Meta (measuring our ads on Facebook and Instagram, through its Conversions API). Nothing of Meta's runs in your browser: no pixel, no cookie. When you send the plan's form, and again when your plan starts, our server sends Meta: your email address as a one-way code (SHA-256), never as text; the IP address and browser of that visit; Meta's ad click id (fbclid) if the link you followed had one, and when you arrived; one-way codes of our customer id and the visit id; the page; and for a plan that started, its price. Meta matches this with its ads, to count which ones bring sign-ups and to show our ads to people more likely to sign up. Meta Platforms Ireland Limited acts as our processor.
  • TikTok (measuring our ads on TikTok, through its Events API), only if one of our TikTok ads sent you: the link you followed had TikTok's ad click id (ttclid). Nothing of TikTok's runs in your browser: no pixel, no cookie. When you send the plan's form or the partners' form, and again when your plan starts, our server then sends TikTok: your email address as a one-way code (SHA-256), never as text; the IP address and browser of that visit; TikTok's ad click id; one-way codes of our customer id and the visit id; the page; and for a plan that started, its price. TikTok matches this with its ads, to count which ones bring sign-ups and to show our ads to people more likely to sign up. If no TikTok ad sent you, TikTok is told nothing. TikTok Technology Limited acts as our processor.
  • DigitalOcean hosts the site and the price lookup on servers in Frankfurt. Its servers see your IP address to answer your browser.

We use no advertising pixels and no social media trackers in your browser. What Meta and TikTok learn of a sign-up, our server sends, as above.

How long we keep it

  • Your plan's details and invoices: while you have a venue with us, then for as long as the law requires us to keep invoices.
  • Waitlist entries: until you ask us to delete yours. We haven't set an automatic deletion date.
  • The IP address and browser of a visit that went on to the payment page: at most 4 days on our server, to tell Meta (and TikTok, if its ad sent you) when the plan starts.
  • Session recordings: 30 days, then PostHog deletes them.
  • Visit counts: for as long as our PostHog and Umami plans keep them. We haven't set a shorter period.

What you can ask

You can ask to see what we hold about you, to correct it, to delete it, or to stop us using it, and to get a copy of it. Write to hello@usevolio.com from the address you signed up with. If you're in the EU or the UK and think we've got it wrong, you can also complain to your data protection authority.

Changes

If what we collect changes, we update this page and the date at the top before the change goes live.

English