Privacy Policy

This Privacy Policy explains how VoilaPage collects, uses, and discloses information about you. It applies when you use our websites, applications, and other online products and services that link to this Privacy Policy, contact our support team, or otherwise interact with us.

We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of this policy and, in some cases, we may provide you with additional notice. We encourage you to review this Privacy Policy regularly to stay informed about our information practices.

1. Collection of Information

Information You Provide to Us

We collect information you provide directly to us. For example, you share information directly with us when you create an account, submit a website for cloning, provide editing instructions via chat, or otherwise communicate with us. The types of personal information we may collect include your name, email address, profile picture (via Google OAuth), and any other information you choose to provide. When you purchase our setup service, we collect additional information to deliver the service: your phone number (for service coordination and delivery), your current website URL, any special instructions for the website design, and if applicable for domain transfer, your current domain registrar or web agency's name and contact email.

Information We Collect Automatically

When you use our Services, we automatically collect certain information, including:

  • Activity Information: We collect information about your activity on our Services, such as projects created, edit requests made, and pages visited.
  • Device and Usage Information: We collect information about how you access our Services, including data about the device and network you use, such as your IP address, browser type, operating system, and app version.
  • Cookies and Similar Technologies: We use cookies and similar tracking technologies to maintain your session and improve our Services. Our session cookies are httpOnly and secure.

VoilaNote Review Data

When you use a VoilaNote review page (by scanning a QR code or clicking a review link), we collect: your star rating, the review tags you select, any free-text comments you provide, the AI-generated review text, your browser language preference, and a cryptographic hash of your IP address (used solely for rate limiting — we do not store raw IP addresses). This data is associated with the business's review campaign, not with any personal account.

Information from Third-Party Sources

We obtain information from third-party sources. If you create or log into your account through Google OAuth, we will have access to certain information from Google, such as your name, email address, and profile picture, in accordance with Google's authorization procedures.

Website Content

When you use our cloning service, we access and download the content of the website URL you provide. This content is processed within isolated sandboxed environments and stored in a code repository for hosting purposes. We do not use your website content for any purpose other than providing the Services to you.

2. Use of Information

We use the information we collect to provide, maintain, and improve our Services. Specifically, we use it to:

  • Create and maintain your account
  • Process your website cloning and editing requests
  • Host and deploy your website on a .voilapage.com subdomain
  • Send you technical notices, security alerts, and support messages
  • Respond to your comments and questions and provide customer service
  • Monitor and analyze trends, usage, and activities in connection with our Services
  • Detect, investigate, and prevent security incidents and fraudulent or illegal activity
  • Debug and repair errors in our Services
  • Comply with our legal and financial obligations
  • Coordinating domain transfers with your current registrar or web agency (with your explicit authorization)
  • Contacting you by phone to deliver and finalize your website setup
  • Identifying your session for analytics purposes (email address associated with your Umami analytics session when logged in)

3. Sharing of Information

We share personal information in the following circumstances:

  • Service Providers: We share information with vendors and service providers that perform services for us, including hosting (Vercel), code storage (GitHub), AI processing (Anthropic), and sandboxed execution environments (E2B).
  • Legal Requirements: We may disclose personal information if we believe that disclosure is required by applicable law or legal process, including lawful requests by public authorities.
  • Protection of Rights: We may share personal information if we believe it is necessary to protect the rights, property, and safety of us, our users, or others.
  • Business Transfers: We may share personal information in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
  • Domain Registrars or Web Agencies: If you provide your current agency's contact information for domain transfer purposes, we may share relevant information with them solely for the purpose of completing the domain transfer, and only with your explicit authorization.

We do not sell your personal information to third parties.

4. Your Choices

Account Information

You may access, correct, delete, and export your account information at any time by logging into the Services and navigating to your account settings. If you choose to delete your account, we will delete your account data within 14 days.

Cookies

Most web browsers are set to accept cookies by default. If you prefer, you can usually adjust your browser settings to remove or reject browser cookies. Please note that removing or rejecting cookies may affect the availability and functionality of our Services, particularly authentication.

Communications

You may opt out of receiving promotional communications from us by following the instructions in those communications. If you opt out, we may still send you administrative emails, such as those about your account or our ongoing business relations.

5. Legal Basis for Processing (EEA/UK)

When we process your personal data, we do so in reliance on the following lawful bases:

  • Legitimate Interest: To operate our business, provide and improve our Services, conduct analytics, and communicate with you.
  • Contract Performance: To provide you with the Services you have subscribed to.
  • Legal Obligation: To comply with our legal obligations.
  • Consent: When you have given us consent to process your data (e.g., for promotional communications). You may withdraw consent at any time.

6. Data Retention

We store personal data associated with your account for as long as your account remains active. If you close your account, we will delete your account data within 14 days. We store other personal data for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.

VoilaNote review submission data (ratings, tags, generated review text) is retained for the duration of the business owner's VoilaNote subscription plus 90 days after cancellation, after which it may be deleted. Hashed IP addresses used for rate limiting are retained for the same period.

7. Data Subject Requests

Subject to certain limitations, you have the right to request access to the personal data we hold about you and to receive your data in a portable format, the right to ask that your personal data be corrected or erased, and the right to object to or request that we restrict certain processing. To exercise your rights, please contact us at fabien@voilapage.com.

8. Data Security

We take reasonable measures to protect your personal information from unauthorized access, use, or disclosure. These measures include encrypted sessions (HTTPS), httpOnly secure cookies, isolated sandboxed environments for processing, and security headers on all responses. However, no method of transmission over the Internet or electronic storage is 100% secure.

9. International Data Transfers

Our Services may involve the transfer of your data to servers located outside of France and the European Economic Area, including to the United States (where some of our service providers are based). We ensure that appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at fabien@voilapage.com.

Privacy Policy — VoilaPage