Privacy Policy

The Volaryx service is operated by Ondřej Hubáček, Company ID (IČO): 07371578, VAT ID (DIČ): CZ9612011750, registered office at Františka Metelce 174, 391 75 Malšice, Czech Republic (the “Operator”). Contact for personal data matters: info@volaryx.com.

The Operator acts in two roles:

• Controller — for the data of the service’s users (companies and businesses that have created an account; the “User”).
• Processor — for data that the User’s customers enter into the calculator. The controller of that data is the User (the operator of the calculator that the customer requests a print quote from); the terms of processing are set out in the data processing agreement in section 8 of this policy.

a) Data of Users (we are the controller):

• Account and billing — e-mail, company name, Company ID, VAT ID, address. Purpose: account administration, providing the service, invoicing and fulfilling tax obligations. Legal basis: performance of a contract and legal obligations.
• Account settings and content — price lists, text, logo, received quote requests. Purpose: providing the service. Legal basis: performance of a contract.
• Payment data — processed by the payment gateway (Stripe); the Operator does not have access to card numbers. Legal basis: performance of a contract and legal obligations (accounting).
• Operational and technical logs — records of errors and service operation (may include an IP address and technical device information). Purpose: security, detecting and fixing faults. Legal basis: legitimate interest in reliable and secure operation.
• Service e-mails — messages necessary for account operation (registration confirmation, password reset, subscription and quote-request notifications). Legal basis: performance of a contract; these cannot be unsubscribed from.
• Product news — occasional e-mails about news, improvements and tips for using Volaryx are sent to registered Users on the basis of legitimate interest (they concern the service the User already uses), always with a one-click unsubscribe option in every e-mail.
• Mail (e-mail client in the admin) — if the User enables this feature, Volaryx connects to their mailbox through the sub-processor Unipile. E-mail content (received and sent messages) is not permanently stored in our database — it is reloaded directly from the User's mailbox each time it is opened and held only temporarily in the browser's memory. Purpose: enabling communication with customers directly from the admin. Legal basis: performance of a contract.

b) Data of the User’s customers (we are the processor): name, e-mail, phone number, billing and delivery address, optionally a Company ID/VAT ID, and the content of the quote request including uploaded files (3D models and attachments). Purpose: passing on and handling the quote request with the chosen User. The purpose and duration of processing is decided by the User as controller; the customer should direct questions and requests primarily to the User.

• Account data — for the duration of the account. After the account is cancelled, a 30-day grace period applies (the cancellation can be reversed), after which the account data is permanently and irreversibly deleted.
• Accounting and tax records — for the period required by applicable law.
• Quote requests and their attachments — the quote record itself (without the uploaded files) stays in the User’s dashboard for the period determined by the User as controller (at most until the User deletes the quote request or the User’s account ends). The uploaded files (3D models and attachments) are automatically deleted from storage after 14 to 365 days from submission, depending on the User’s subscription plan (a higher plan keeps files longer).
• Temporary calculator files (price-calculation inputs that were not submitted as a quote request) — deleted automatically shortly after the calculation, typically within 48 hours.
• Operational and error logs — for a limited period necessary for security and troubleshooting, then deleted automatically.

We do not sell your data to anyone. To operate the service we use vetted subprocessors that process data according to our instructions:

• Supabase — database, authentication and file storage (servers in the EU, Frankfurt).
• Vercel — application hosting.
• Stripe — payment processing and subscription billing.
• Resend — sending e-mails.
• Fly.io — technical calculation of 3D model parameters (servers in the EU, Frankfurt).
• Sentry — application error monitoring (servers in the EU).
• PostHog — product analytics and measurement of journeys through the service under a random identifier or the company’s technical ID (servers in the EU).
• Better Stack — service availability monitoring (no access to customer data).
• Unipile — technical mediation of access to the User's mailbox for the Mail feature (see section 2a); we do not permanently store e-mail content.

Some subprocessors may process data outside the EU/EEA (in particular the USA); in such cases the transfer is safeguarded by an EU Commission adequacy decision (the EU–U.S. Data Privacy Framework) or standard contractual clauses. We may also disclose data to public authorities where required by law.

Data is transmitted encrypted (HTTPS), access is controlled at the level of individual accounts (each User sees only their own data), secret values are never stored in the browser, and the database is backed up regularly. The Operator’s access to Users’ accounts is limited to necessary administration and support and is logged.

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing based on legitimate interest. We handle requests sent to info@volaryx.com without undue delay, and no later than within one month.

You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz), or with the data protection authority in your own EU member state.

If you are a customer of one of our Users (you requested a print quote through their calculator), please direct your requests primarily to them as the controller of your data; we are happy to help them handle it.

We only use technical cookies that are necessary for logging in and for the service to function. Details are available in the Cookie Policy.

This section constitutes a data processing agreement under Article 28 GDPR between the User (controller) and the Operator (processor). It is entered into upon acceptance of the Terms of Service and lasts for the duration of the account.

• Subject-matter and nature of processing: storing, displaying and transmitting data that the controller’s customers enter into the calculator and quote-request form (categories of data as described in section 2(b); data subjects = the controller’s customers), for the purpose of receiving and handling the quote request.
• Instructions: the processor processes data solely to operate the service within the scope of this policy; the controller’s documented instruction is the use and configuration of the service.
• Confidentiality and security: the processor maintains confidentiality and adopts the technical and organisational measures described in section 5.
• Sub-processors: the controller grants general authorisation to engage the subprocessors listed in section 4. The processor will give prior notice of any change to that list (by e-mail or in the administration panel); the controller may terminate this agreement for that reason by cancelling their account.
• Assistance: the processor assists the controller with handling data subject requests and fulfilling security and breach-notification obligations; the processor will notify the controller of a security breach without undue delay after becoming aware of it.
• Deletion: once the account ends, the processor deletes the data in accordance with section 3, unless the law requires it to be retained further.
• Demonstrating compliance: the processor will provide the controller, upon request, with information necessary to demonstrate compliance with the obligations under this agreement.

We may update this policy, in particular when subprocessors, service features, or applicable law change. We will notify Users of material changes by e-mail or in the administration panel. The current version is always available on this page.