← Voltius

Last updated: April 23, 2026

Privacy Policy

1. Who we are

Killian Pavy, acting as an individual, is the data controller for information collected through voltius.app and the Voltius application.

Contact: contact@voltius.app

2. Data we collect

We collect only what is necessary to provide the Service:

  • Account data: your email address.
  • Authentication: a derived key — your master password is never transmitted or stored.
  • Billing: handled by Lemon Squeezy. We receive a customer ID and subscription status; we do not store payment card details.
  • Vault data: stored encrypted on our servers. We cannot read its contents.
  • Technical logs: IP address, timestamps, and HTTP request metadata for security and abuse prevention. Retained for 30 days.

3. Legal basis and purpose (GDPR)

PurposeDataLegal basis
Account managementEmail, auth keyContract performance
Payment processingEmail, Lemon Squeezy customer IDContract performance
Security / abuse preventionIP, logsLegitimate interest
Transactional emailsEmailContract performance

4. Data retention

  • Account data: until account deletion, plus 30 days for billing dispute purposes.
  • Encrypted vault: deleted within 30 days of account deletion.
  • Technical logs: 30-day rolling window.
  • Billing records: 10 years (French legal obligation).

5. Data sharing

We do not sell your data. We share it only with:

  • Lemon Squeezy — payment processing (USA; adequacy decision / SCCs apply).
  • Oracle France — server infrastructure.

6. Your rights (GDPR)

As a data subject you have the right to:

  • Access the data we hold about you.
  • Rectify inaccurate data.
  • Erase your data ("right to be forgotten").
  • Port your data in a machine-readable format.
  • Object to processing based on legitimate interest.
  • Restrict processing in certain circumstances.

Exercise your rights by emailing contact@voltius.app. You also have the right to lodge a complaint with the CNIL (French data-protection authority).

7. Security

Vault data is end-to-end encrypted with a key derived from your master password, which is never transmitted. All data in transit is protected by TLS. Our servers never have access to the plaintext contents of your vault.

8. Cookies

The voltius.app website does not use tracking or advertising cookies. The account portal uses session cookies strictly necessary for authentication. No consent banner is required for strictly-necessary cookies under the ePrivacy Directive.

9. Changes

We will notify you of material changes by email at least 14 days in advance.

10. Contact

Data-protection questions: contact@voltius.app