Vollsite Privacy Policy

Updated 20 October 2026

Vollsite is provided by Regz (regz.in). For privacy questions, access requests, corrections or deletion requests, contact svtcontactus@gmail.com. This policy explains the Vollsite iPhone app, its account and publishing services, and the platform services on websites created with Vollsite. A website owner is responsible for their own published content and their use of visitor inquiries.

Your choices

You can create, edit, preview and export a draft on your iPhone without an account. Signing in enables account services. Syncing or publishing sends the selected draft to our servers. Optional AI, purchases, custom domains and Google connections operate only when configured and when you use them. An unavailable feature does not require you to share data with its provider.

Custom details start private. Private details can be stored in your synced account draft, but are excluded from published pages and AI proposal requests. Review all text, photos, links and selected languages before publishing. Public content can be viewed, downloaded, copied and indexed by others. Unpublishing cannot remove copies already made by visitors or search engines.

Information we handle

Why we use information

We use information to save and recover your work, authenticate accounts, render and publish websites, process inquiries, operate optional features, validate subscriptions, prevent abuse, diagnose failures and respond to support or privacy requests. We associate account content and subscription status with your account to provide these functions. We do not sell personal information or use it for targeted advertising. The app includes no advertising or cross-app advertising tracking SDK.

Providers and optional features

Our connected service architecture uses Supabase for accounts and database storage; Cloudflare for application hosting, queues, website/image storage, delivery and custom-domain HTTPS; Apple and RevenueCat for subscriptions; and Resend for transactional email. Providers process information needed to deliver their services under their own applicable terms and privacy policies. For example, notification email tells a website owner that an inquiry is available but does not include the visitor's message. The account-verification email service necessarily processes your sign-in address.

If you request an AI proposal, we send OpenAI the relevant website text, approved public details and instructions. Private custom fields are excluded. Proposals require your review before application or publication. We request that generated responses not be stored as API response objects; this setting is not a promise that the provider keeps no operational or security records. Manual editing and translation remain available without AI. No AI request is made when someone simply views your published website. AI is currently available only in restricted testing, subject to a shared testing budget.

If you connect Google Search Console, we request the permission needed to submit your sitemap and inspect indexing status for the website you authorize. We access property permissions, sitemap/submission information and indexed-version status. We store the property identifier, status/check timestamps and an encrypted refresh token to perform subsequent checks. We do not access Gmail, Drive files or unrelated Google content. We use Google data only for this visible website-management feature, not advertising, profiling, sale or model training. Vollsite's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable. Disconnect Google in the app to stop future access and remove the stored token; you can also revoke authorization through your Google account's third-party connection settings. If remote revocation fails, removal from Vollsite still stops our scheduled use. Google determines whether and when to index a site.

External links to booking tools, social profiles and other websites lead to independently operated services. Their handling of information is governed by their policies.

Storage and retention

Local drafts remain on the iPhone until you delete them or remove app data. Synced website drafts and stored versions remain until you delete them. You can delete an old stored version when it is not live or publishing. Images no longer referenced by a server draft or stored version become eligible for deletion after 24 hours; a scheduled cleanup removes them. Keeping an old version can therefore retain its images.

The service's scheduled retention rules remove inquiries after 180 days, custom-project requests after 365 days, usage reservations and daily request counts after 90 days, expired rate-limit records after one hour, and reviewed abuse reports and billing event deduplication records after 365 days. Open abuse investigations and necessary security records may be retained while the matter remains unresolved. Maintenance failures can delay removal; access remains restricted while a failure is resolved.

Account deletion first stops public serving, removes domain and Google connections and attempts website/image cleanup before deleting the authentication account and cascading account records. An interrupted cleanup may require retry or support. The app also removes synced local drafts that belong to the deleted account; unrelated unsynced local drafts remain under your control. Apple subscription cancellation is separate: use Apple's subscription settings to cancel renewal. Apple and payment providers may retain transaction records under their own obligations.

Restricted backups and provider operational logs may retain earlier copies until their applicable retention period ends. The production backup schedule, storage regions and provider log retention have not yet been configured in this pre-release build; those details must be disclosed before public service launch. Deleted information must not be restored to active use except as necessary for recovery with deletion requests reapplied. Contact us for the retention arrangements applicable to your deployment or request.

Security and international processing

We use authenticated access controls, owner-scoped database rules, HTTPS for connected services, Keychain storage for app sessions, encrypted Google refresh tokens and restricted server credentials. No security method eliminates every risk. Service providers may process information in countries other than yours. Applicable protections and provider agreements must be maintained for the regions where the service is offered.

Access, export, correction and deletion

You can edit content, export a website, export account data, unpublish a website, disconnect Google and delete your account from the app. You can also contact svtcontactus@gmail.com. We may need proportionate verification of account ownership before providing data or acting on a request; do not send passwords. Depending on your location, you may also have rights to object to or restrict processing, withdraw consent for optional features, receive portable data or complain to a relevant privacy authority. We will handle requests under applicable law.

Vollsite is designed for people managing business or portfolio websites and is not directed to children. Do not use it to collect children's sensitive information. Contact us if you believe a child has provided information that should be removed.

Changes and contact

We will update the date above when this policy changes and provide additional notice or obtain renewed authorization when required for a material change. Questions and requests: Regz — svtcontactus@gmail.com.