Privacy Policy

Minimal Collection Principle

We collect the minimum data necessary to provide the service.

Free Tier

• Latitude/longitude coordinates (per request, not stored individually)
• IP address (for rate limiting, hashed)

Paid Tier

• Email address (for API key registration)
• Stripe customer ID (for billing)

Dashboard

• Geolocation (only when user grants browser permission)
• Browser language preference
• Anonymous usage analytics

• Provide and improve the Volcash service
• Monitor API usage for billing and abuse prevention
• Generate aggregate statistics only (no individual coordinate tracking)
• Send service notifications (outages, billing)

We do NOT: sell personal data, share location data with advertisers, or track individual user movements.

We DO share data with:

• Stripe: Payment processing only
• Infrastructure providers: For hosting (encrypted in transit and at rest)

Legal Basis for Processing

• Legitimate interest: API rate limiting and abuse prevention
• Contract performance: Providing the API service
• Consent: Geolocation on the dashboard (opt-in)

Your Rights Under GDPR

• Right to Access (Art. 15)
• Right to Rectification (Art. 16)
• Right to Erasure (Art. 17)
• Right to Data Portability (Art. 20)
• Right to Object (Art. 21)
• Right to Restriction (Art. 18)

To exercise any right, email: privacy@volcash.io

• All API communications use HTTPS/TLS
• API keys are hashed in storage (bcrypt)
• Database encrypted at rest
• Regular security audits

The dashboard uses functional cookies only: session management, language preference, PWA functionality.

No third-party tracking cookies are set without explicit consent.

• Privacy inquiries: privacy@volcash.io
• Data deletion requests: privacy@volcash.io