Privacy Policy
Privacy first: we state plainly what data we process and why, who can access it and how you can exercise your rights.
Last updated: 14 October 2026
Türkçe sürüm1. Scope
This policy applies to the VOLTR service (CRM, Live Chat, Call Center, ERP, WhatsApp and Telegram modules) provided through our website voltr.cc, our application voltr.online and the live chat window embedded in our customers' websites (voltr.world).
In this policy, "customer" means a company that uses VOLTR, "user" means a customer's employee who signs in to VOLTR, and "end person" means anyone a customer communicates with via live chat, phone, WhatsApp or Telegram, and visitors to a customer's website.
2. Data controller and our role
VOLTR is the data controller for: visitors and demo requests on our website, the live chat on our website, and customer and user accounts. VOLTR is operated by a company established in Montenegro; personal data is processed in accordance with Montenegrin data protection law and, where applicable, the EU General Data Protection Regulation (GDPR). You can reach us at [email protected].
For data that our customers enter into or collect through VOLTR (CRM records, chats, calls, WhatsApp and Telegram conversations, ERP records), the relevant customer is the data controller. VOLTR acts as a data processor, processing such data only on the customer's instructions and only to provide the service. Please direct requests about such data to the relevant company first; if you contact us, we will forward your request to that company and help carry it out.
3. Data we process
- Account data: name, email address, password hash (the password itself is never stored), optional profile photo and live chat display name, two-factor authentication secret (encrypted), language and theme preferences.
- Session and security records: IP address and browser information of signed-in devices, last activity time, start and end of an administrator viewing a user's screen ("view as"), call recording access logs, system error logs.
- Demo and contact requests: name, company, email, phone, number of employees, modules of interest, message, the page the form was sent from, IP address and browser information.
- Website visitors (voltr.cc): with our own cookieless measurement tool, VOLTR Analytics — pages viewed, referrer and campaign tags, country and city, device type, browser, operating system, language and screen width, page speed measurements. Your IP address and browser user-agent string are not stored; a visit is counted only through a one-way digest that changes every day, and no cookie or identifier is written to your browser.
- Live chat visitors: an anonymous visitor ID stored in the browser, IP address, country as reported by the network infrastructure, browser, operating system and device type, pages visited and referrer, chat messages and attachments, information entered in the pre-chat form (e.g. name, email, phone), chat rating.
- Call center: calling and called numbers, time and duration of calls, outcome codes and notes, call recordings when enabled by the customer.
- WhatsApp and Telegram: incoming and outgoing messages and files via the number, bot or account the customer connects, the person's WhatsApp number or Telegram user ID, profile name and other information they share.
- CRM and ERP: company, contact, deal, ticket, quote, invoice, payment and account records entered by the customer.
4. Purposes and legal bases
- Providing the service, managing accounts and performing our contract with the customer: performance of a contract (GDPR art. 6(1)(b)).
- Account security, preventing abuse and fixing errors: legitimate interest (art. 6(1)(f)) and legal obligation (art. 6(1)(c)).
- Measuring, without cookies, how many people visit the website, from which sources and which pages: legitimate interest (art. 6(1)(f)).
- Responding to your demo or quote request: pre-contractual steps (art. 6(1)(b)) and legitimate interest (art. 6(1)(f)).
- Complying with legal obligations and lawful requests from competent authorities: legal obligation (art. 6(1)(c)).
- Processing based on your consent (art. 6(1)(a)): you may withdraw your consent at any time; withdrawal does not affect processing carried out before it.
- Analytics and marketing cookies on the website: your consent (art. 6(1)(a)) — nothing is loaded unless you accept in the cookie banner.
- Preventing abuse of our forms with Google reCAPTCHA: legitimate interest (art. 6(1)(f)).
We never use our customers' or end persons' data for advertising or marketing, never build marketing profiles from it and never sell data.
6. Hosting on your own servers
If you prefer, you can host VOLTR and your database entirely on your own servers; in that case your data never reaches us. You decide on the infrastructure, where the data is kept and who can access it.
7. Retention periods
- Live chat conversations, attachments and visitors' personal fields: deleted when the retention period set by the customer expires (counted from the chat's closing); if no period is set, kept until the customer deletes them or closes its account. After deletion, metrics that identify no one (such as waiting time and ratings) remain for reporting.
- Records of pages visited by chat visitors: 90 days.
- Call recordings: the file is deleted when the retention period (365 days by default) expires; the call record remains.
- Webhook delivery logs and system error logs: 30 days. Expired session records: cleared after 30 days.
- Account and customer data: for the term of the contract. When a company account is deleted, the company's database is permanently deleted with all its data.
- Demo requests: for as long as needed to evaluate your request and stay in touch with you.
Records subject to a legal retention obligation are kept until that period ends.
9. Security
- Each company's data lives in its own database; companies cannot see each other's data.
- Permissions start with the role and end with the person; columns hidden in tables are never included in server responses.
- Two-factor authentication and session management; passwords are stored only as hashes.
- For roles with number masking, phone numbers are removed from responses; listening to call recordings requires a separate permission and every access is logged.
- Chat attachments open only via signed, time-limited links; PBX and webhook credentials are stored encrypted and never returned in responses.
- All connections are encrypted end to end with TLS (browser ↔ network layer ↔ server).
10. Your rights
You have the following rights regarding your personal data:
- to access your data and obtain a copy of it;
- to have inaccurate or incomplete data corrected;
- to have your data erased;
- to restrict processing;
- to receive your data in a structured, commonly used format and have it transmitted to another controller (portability);
- to object to processing based on legitimate interest;
- to withdraw your consent at any time where processing is based on consent.
You may lodge a complaint with the Montenegrin Agency for Personal Data Protection and Free Access to Information (Agencija za zaštitu ličnih podataka i slobodan pristup informacijama — AZLP). If you are in the European Union or the European Economic Area, your rights under the GDPR and your right to complain to the data protection authority of your own country remain unaffected; if you are in Türkiye, your rights under art. 11 of the Turkish Personal Data Protection Law No. 6698 (KVKK) remain unaffected.
You can send your request by email to [email protected]. We may ask for additional information to verify your identity. We respond to requests within 30 days at the latest. If a request concerns data of one of our customers, it is forwarded to that company.
11. Changes
When we update this policy, we publish the new text on this page and change the "Last updated" date.
12. Contact
VOLTR · Email: [email protected]