1. The short version
VolaIndex collects only what we need to run the Service and improve it. We don't sell your data, and we don't aggregate supplier quotes across customers. The pricing data your team submits is visible only to your own organization — never combined with other customers' quotes to produce a shared benchmark. We use a small number of trusted vendors (database hosting, transactional email, AI inference) to operate. You can ask us to delete your account at any time.
1a. Our position on cross-customer data sharing
Some pricing platforms pool customer-submitted quotes into aggregated, anonymized benchmarks. VolaIndex does not.When your team submits a supplier quote, that quote contributes to your own org's view only — your team's own median, percentile range, and outlier flags. It does not flow into any cross-customer aggregate, anonymized or otherwise.
The comparison we surface is your team's pricing vs. the public-market modeled spot— computed from public-data sources (Census, EIA, FRED, USDA, Oil Price API) that we paid no customer to produce. That's the only "outside the org" data we put next to your quotes.
1b. We don't dig through your book
Your account data and the prices your team submits are yours. We don't review, analyze, or comb through them in depth.The only time anyone at VolaIndex looks closely at your org's data is when you're seeing a discrepancy we need to fix or address— a quote that looks off, a benchmark that isn't rendering, a number you're questioning. Outside of that, your book sits untouched.
We're not here to mine your pricing for any purpose other than the one you came for: helping your team make better business decisions against the public market. Your data powers your own benchmarks and your own brief — nothing else.
2. What we collect
Account data.Your email address, the name you provide on signup or invite, and any organization you're associated with.
Usage data. Pages you visit, watchlist commodities you favorite, Vola chat messages you send, and metadata about your sessions (timestamps, IP address, browser user-agent). The Vola usage log records each AI-call you make for quota and cost tracking.
Submitted content. Topic requests (commodity, optional note, email) and supplier-quote submissions, when you opt to share them.
Email engagement. Open and click events on the weekly Monday brief, tracked through our email vendor. Used to confirm delivery and gauge which sections earn attention.
We do notcollect: payment-card numbers (we don't process payments directly yet), location data beyond IP, contacts from your address book, or anything from your device sensors.
3. How we use it
- To deliver the Service: render the dashboard, send the weekly brief, respond to Vola queries, honor watchlist preferences.
- To improve the Service: identify which signals resonate, surface coverage gaps, calibrate AI quotas against actual usage.
- To communicate with you: invitation emails, brief delivery, replies to topic requests, security or billing notices.
- To meet legal obligations and enforce these terms.
We do not use your supplier-quote data outside your own org.Your team's submissions are not shared with, aggregated with, anonymized into, or otherwise exposed to other customers — directly or indirectly.
We don't use your data to train external AI models. When Vola processes your chat messages, the content is sent to Anthropic for inference under their commercial terms, which prohibit training use on API data.
4. Who we share it with
A small set of operating vendors who help run the Service:
- Supabase— database, authentication, and session storage.
- Vercel— web hosting, edge delivery, and access logs.
- Resend— transactional and brief email delivery (handles your email address and delivery metadata).
- Anthropic— AI inference for the Vola conversational interface and brief synthesis.
- Cloudflare— DNS and infrastructure edge services for the volaindex.com domain.
Each vendor processes data only to provide its service to us. We don't sell, rent, or trade your personal information to advertisers or data brokers.
We may disclose data if compelled by valid legal process, to enforce our Terms, or to protect the rights, safety, and property of VolaIndex, our users, or the public.
5. How long we keep it
Account and usage data is retained for the life of your account plus a reasonable buffer for legal and operational continuity (currently 12 months after account closure). Topic requests and supplier-quote submissions are retained indefinitely as part of the Service's historical record, unless you ask us to delete them. Brief email engagement is retained for 24 months.
6. Security
Data in transit is encrypted via TLS. Database connections use credentialed pooler sessions. Admin access is restricted to authorized VolaIndex personnel. No system is perfectly secure; if you suspect your account has been accessed without authorization, email vola@volaindex.com immediately.
7. Your rights
You can:
- Access the personal data we have about you.
- Correct inaccurate data.
- Request deletion of your account and associated personal data.
- Export your watchlist, topic-request history, and Vola chat history.
- Object to or restrict certain processing.
- Lodge a complaint with a data-protection authority where applicable.
To exercise any of these, email vola@volaindex.com. We'll respond within 30 days.
8. Cookies and tracking
We use a small number of essential cookies and similar technologies:
- Session cookies issued by Supabase authentication to keep you signed in.
- Preference cookies for things like your watchlist and last-viewed dashboard tab.
We don't use advertising cookies, cross-site tracking pixels, or analytics that build behavioral profiles across sites. The weekly brief email contains standard open/click tracking pixels that you can suppress with the “view in browser” option in any email client.
9. Children
VolaIndex is not directed to anyone under 18 and we don't knowingly collect data from minors. If you think we have, email us and we'll delete it.
10. International users
VolaIndex is operated from the United States. By using the Service from outside the U.S., you consent to having your data transferred to and processed in the U.S., which may have different privacy laws than your country.
11. Changes to this policy
We'll update this policy when our practices change. Material changes will be announced through the Service or by email. Continued use after the effective date constitutes acceptance of the updated policy.
12. Contact
Questions about this policy or about how your data is handled? Email vola@volaindex.com.