Privacy Policy
Last updated: July 24, 2026
This Privacy Policy explains how Volto collects, uses, stores, shares and deletes personal data when providing its AI Worker platform, including communications managed through WhatsApp and other channels.
1. Scope and data controller
Volto LLC is responsible for the personal data used to operate Volto accounts, the platform and its integrations.
When a Volto business customer uses the platform to communicate with its own customers, that business determines the purpose of the communication and Volto processes conversation data on its instructions. Volto remains responsible for complying with the Meta Platform Terms regarding data received through its app.
2. Data we process
Account and business information
We process names, email addresses, login credentials, business information, service configuration and billing records. Payment card information is processed by our payment provider and is not stored in full by Volto.
WhatsApp and Meta Platform Data
When a business connects its WhatsApp Business Account, Volto may process the following data according to the permissions granted by that business:
- WhatsApp Business Account identifiers, business phone numbers, business profile information, message templates, QR code information, webhook subscriptions and account analytics.
- A WhatsApp user's phone number, profile name and other contact information the user or connected business provides.
- Incoming and outgoing message content, attachments and media needed to provide the messaging service.
- Message identifiers, timestamps, delivery and read status, conversation events and webhook metadata.
Customer content and connected sources
Business customers may provide documents, instructions, knowledge bases and data from connected services. We process this content only to configure and operate the AI Workers and workflows requested by the customer.
Usage and technical data
We process IP addresses, browser and device information, security events, error logs and service usage metrics to operate, protect and improve the platform.
3. How we use data
- Connect and manage WhatsApp Business Accounts, phone numbers, templates, webhook subscriptions, connection status and account analytics.
- Receive customer messages and send automated or human responses on behalf of the connected business.
- Provide conversation context to the configured AI Worker, route conversations, execute customer-authorized workflows and preserve conversation history.
- Provide support, maintain the service, manage billing and measure service performance.
- Authenticate users, prevent fraud and abuse, investigate incidents and comply with applicable law.
Volto does not sell Meta Platform Data and does not use WhatsApp message content for its own advertising. We process Meta Platform Data only to provide the services requested by the connected business and as described in this Policy.
4. Service providers and disclosures
We disclose only the data needed for the following providers and recipients to perform their services:
- Amazon Web Services provides hosting, serverless processing, storage, databases, logs and related infrastructure in the United States.
- Vercel AI Gateway may route AI model requests and responses when enabled for the configured AI Worker.
- OpenAI and Anthropic may process message text and the context required to generate a response, depending on the model selected by the business customer.
- Stripe processes payment and billing information for paid services.
- The business customer that connected the WhatsApp account can access conversations and customer data associated with its own account.
- We may disclose information when required by law, a valid legal process or to protect users, Volto and the public.
Service providers may process data only to provide the contracted service, under confidentiality and security obligations. They may not use Meta Platform Data for their own independent purposes.
5. Data retention
We retain account data while the Volto account is active. WhatsApp configuration and conversation data are retained while needed to provide the service or for the period agreed with, or instructed by, the business customer. Disconnected WhatsApp assets are no longer used to collect new data.
After a verified deletion request is approved, we delete the relevant data from active systems within 30 calendar days unless a legal obligation requires longer retention. Residual copies in encrypted backups are removed through the normal backup lifecycle, no later than 90 days, and are not used for other purposes.
6. Your rights
Depending on applicable law and our role in the processing, you may have the following rights:
- Request access to or a copy of your personal data.
- Correct inaccurate or incomplete information.
- Request deletion of your account, messages or other personal data.
- Object to or restrict certain processing and request portability where applicable.
7. How to request data deletion
Submit the data deletion request form or email support@volto.dev.
Include the email address associated with your Volto account. If your request concerns a WhatsApp conversation, also identify the relevant phone number and the business you contacted. Do not send passwords or access tokens.
We may request reasonable information to verify your identity and determine the data covered by the request. WhatsApp end users may also contact the business they communicated with. We acknowledge and process verified requests within 30 calendar days, subject to applicable legal exceptions.
8. Data security
We use technical and organizational safeguards designed to protect data from unauthorized access, loss, alteration or disclosure, including encryption in transit and at rest, access controls and operational monitoring. No system can guarantee absolute security.
9. International transfers
Volto and its service providers may process data in the United States and other countries where they operate. We use contractual and technical safeguards required by applicable law for international transfers.
10. Changes to this Policy
We may update this Policy to reflect changes in the service, providers or legal requirements. We will publish the updated date and provide additional notice when a change materially affects how personal data is processed.
11. Contact
Volto LLC
1209 Mountain Road PL NE, Ste R
Albuquerque, NM 87102
United States