Privacy Policy

1. Information We Collect

Volttus collects the following information when you use our document processing services:

• Email Address: Required to deliver processed documents and service communications
• Uploaded Documents: Invoices, bills of lading, purchase orders, and other business documents you submit for processing
• Business Information: Company name, industry, and use case provided during demo requests
• Technical Data: IP address, browser type, and access logs for security purposes

2. Canadian Data Residency & PIPEDA Compliance

Volttus is compliant with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal privacy law.

3. Document Processing & Data Retention

We use OpenAI's API for intelligent data extraction. Here's how your documents are handled:

• Processing: Documents are analyzed in-memory to extract structured data
• Zero Retention: Original documents are permanently deleted immediately after extraction
• Output Delivery: Only the extracted structured data is emailed to you
• No Training: Your documents are NOT used to train AI models
• Human Access: No human ever views your uploaded documents

4. How We Use Your Information

We use your information solely for:

• Processing your documents and delivering results
• Responding to your demo and consultation requests
• Sending service-related emails (e.g., processing confirmations)
• Improving our service quality and security
• Compliance with legal obligations

We do not sell, rent, or share your data with third parties for marketing purposes.

5. Your Rights Under PIPEDA

You have the right to:

• Access: Request a copy of your personal data we hold
• Correction: Request correction of inaccurate or incomplete data
• Withdraw Consent: Withdraw consent for data processing (subject to legal/contractual restrictions)
• Complaint: File a complaint with our Privacy Officer or the Privacy Commissioner of Canada

6. Data Security

We implement industry-standard security measures:

• SSL/TLS encryption for data in transit
• AES-256 encryption for data at rest
• Secure authentication and access controls
• Regular security audits and penetration testing
• ISO 27001-compliant infrastructure (AWS Canada Central)

7. Cookies & Tracking

We use minimal tracking to understand website usage:

• Essential Cookies: Required for website functionality
• Analytics: Privacy-focused analytics (no personal data collection)
• No Marketing Pixels: We do not use Facebook Pixel, Google Ads, or similar tracking

8. Children's Privacy

Our services are intended for business use only and are not directed to children under 18. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated via email and prominent website notice.

10. Contact Our Privacy Officer

For privacy inquiries, data access requests, or PIPEDA-related questions: