Privacy Policy
1. Controller and scope
This policy explains what AppVolt LLC ("Company", "we") processes when you use VoltFound. Florida document number L26000462176. Postal address available on request at hello@voltfound.com; it will be published here once our registered mailbox is in service. Contact: hello@voltfound.com.
2. What we process, and why
(a) Scans: the URL you submit and the fetched page content are processed in memory to produce your report, which is returned to your browser. For free scans, we keep the website address, its score and the date of the last scan, so we can show how the score changed the next time that website is scanned. Anyone who scans the same website later sees that previous score and date. We don't keep the full scan report. We keep this information for up to 12 months. (b) Purchased Fix Packs are stored together with your order so you can re-download them. (c) Rate limiting: your IP address is used in a daily counter that expires automatically after 24 hours. (d) Payments: Stripe processes your payment and shares with us your email address and order details; we never see or store card numbers. (e) Consent records: when you accept our terms at checkout we record the timestamp, accepted document version, language and IP address as legal evidence of consent, linked to your order. (f) Auto-Fix (WordPress plugin): When the plugin requests a fix plan, it sends us your site ID (the non-secret part of your site key), your site's home URL, your WordPress and plugin versions, the name of any SEO plugin it detects, the time of the request, and a signature created from your site key that is valid for 5 minutes. The plugin never sends your site key; we show it to you once, over HTTPS, when you create it, and we do not store it. The plugin does not send your current page titles, descriptions, alt text or other page content. We also see the IP address of the server that hosts your site, as with any web request. We build fix plans from the public pages of your site. We keep your site record (site ID, domain, a keyed fingerprint (hash) of your order email, license key (not your site key), the IDs of the Stripe checkout sessions for your orders, detected SEO plugin, last reported WordPress and plugin versions, key version, record type, status, created, refreshed and expiry times, and, if the connection ended, when and why: disconnect or refund) while your site is connected and delete it 30 days after you disconnect, your license ends or your order is refunded. We keep fix plans for 30 days, and for 90 days only a plan ID, a fingerprint (hash) of the plan and a timestamp, to help resolve disputes. We keep an hourly request counter that does not include your domain and expires after one hour. We do not keep a history of plugin requests. We keep a record of your acceptance of the Auto-Fix Terms (account, domain, terms version, time) for 5 years after you disconnect, as evidence of the agreement. The change log of approved edits, including the WordPress user ID of the approving admin, is stored only in your own WordPress database and is never sent to us. Our hosting provider, Cloudflare, may keep its own technical logs under its own policies. AI-drafted alt text: When Auto-Fix drafts alt text for an image, we send the image to Cloudflare Workers AI, a service of Cloudflare, Inc. that runs the AI model, only to create the draft. Cloudflare processes it under its own terms and policies. (g) Your browser stores your license key and language preference in localStorage. We use no analytics pixels and never sell personal data. Advertising cookies are described in section 2a.
Beta testers: we use the email address you give us only to send you the end-of-test notice and the subscription link; we delete it 30 days after the test ends unless you subscribe, and we do not use it for marketing or anything else.
2a. Advertising cookies
We use Google Ads and Meta (Facebook and Instagram) tags on voltfound.com to measure our ads and to show VoltFound ads to people who visited our site ("remarketing"). These tags may set cookies and send Google and Meta the pages you visit on voltfound.com, your browser, device and IP address, and these events: a page view, the start and end of a scan (with only the name of your site's platform, such as WordPress or Wix), and the start of checkout and a completed purchase (with the order number only). We do not send them the website you scanned, your scan results, your name, your email or payment details.
In the European Economic Area, the United Kingdom, Switzerland, Brazil and California, these tags run only after you choose "Accept". Elsewhere, they run by default, and you can turn them off at any time with "Your privacy choices" at the bottom of every page. We treat a Global Privacy Control (GPC) signal from your browser as a request to turn them off.
In some US states, this may count as "sharing" personal information for targeted advertising; you can opt out as described above. We do not sell personal information. Google and Meta use this data under their own privacy policies.
Advertising. We use Google Ads tags to measure our ads and to show VoltFound ads, on other sites, to people who visited our site. Google may use cookies or similar technology to do this, based on your past visits. These tags follow the regional choices above. You can turn off personalized ads from Google at https://myadcenter.google.com, and learn how Google uses this information at https://policies.google.com/technologies/partner-sites. We keep visitors on our ad lists for up to 90 days.
2b. Email on a results page
If you give us your email on a results page, we use it only to send you one email about that scan. We don't add it to marketing lists, and we delete it after 12 months unless you become a customer.
2e. Failed scans
If a scan fails, we keep a short record of it for 14 days (the page address, the reason, the server's response, the campaign link that brought you, your device type and country) to fix the problem. We do not keep your IP address with it. If you tick the owner box, we also keep that choice, with the date and the wording you agreed to, for 12 months, as a record of your permission.
2f. AI Answer Monitor
AI Answer Monitor. If you turn on the weekly AI Answer Monitor, each week we send 3 standard questions that include your business name, category and city to Google (Gemini API), OpenAI (API), or both. We store the questions, the AI answers and the results, including the names of other businesses the AI mentioned, for up to 400 days so we can show you your history. We email you the result each week until you turn the monitor off. Outside the EEA, Switzerland and the UK, we may use Google's free Gemini service; Google may use those questions and answers to improve its products, and human reviewers at Google may read them.
2g. Campaign tag from our ads
When you arrive from one of our ads, we keep the campaign name from the link (its "utm" tag) in your browser's session storage, so we can count what that campaign led to. It is not linked to you and is deleted when you close the tab. In the European Economic Area, the United Kingdom, Switzerland, Brazil and California, we store it only after you choose "Accept".
3. Processors and third parties
Cloudflare (hosting, storage, Workers AI inference (including AI-drafted alt text), and Turnstile bot protection in invisible mode - see the Cloudflare Turnstile Privacy Addendum at https://www.cloudflare.com/turnstile-privacy-policy/), Stripe (payments). When the relevant features are enabled by the operator: Google PageSpeed API (receives the URL you test), DataForSEO (receives the keywords or queries you submit), OpenAI and Google Gemini (receive the prompts used by AI Visibility). Each processes data under its own terms.
4. Retention summary
Free scans: website address, score and date of the last scan, up to 12 months (the full report is not stored). Rate-limit counters: 24 hours. Job records: up to 30 days. Auto-Fix: site record until 30 days after you disconnect in the VoltFound app, your license ends or your order is refunded; fix plans 30 days; plan ID, hash and time 90 days; hourly request counter 1 hour; record of your acceptance of the Auto-Fix Terms 5 years after you disconnect. We do not store your site key. Orders and consent records: kept for up to 7 years (see below). License keys: retained while relevant for the business relationship and legal evidence.
Order and dispute records: When you open a Fix Pack we record the time you opened it, your IP address and your browser's user-agent, linked to your order. We keep this opening record for up to 540 days so we can answer payment disputes and show what was delivered; we do not use it for marketing, and it is deleted after that period. Your order and consent records — including the IP address recorded at checkout — are kept for up to 7 years so we can meet tax and accounting duties and defend legal claims, then deleted.
5. Your rights
You may request access to or deletion of data linked to your email or orders by writing to hello@voltfound.com. Some records (for example consent evidence and invoicing data) may be retained where the law permits or requires.
6. Security
Traffic is encrypted in transit (TLS). We do not store website passwords, application passwords or Auto-Fix site keys. Access to production systems is limited to the operator.
7. Children
The service is a business tool and is not directed to children under 13. We do not knowingly collect their data.
8. Changes
This policy is versioned; the stamp on this page identifies the version in force. Material changes apply prospectively.
Changes in version 1.17: Section 2(a) now explains that we keep the website address, score and date of the last free scan.
If there is any conflict between this English version and a translation, the English version controls, except where applicable law requires otherwise.