Privacy policy
How Volath handles personal data on this website, in the customer area and in the desktop app, and the rights you have over it.
Last updated: 12 October 2026.
Who is responsible
The data controller is Leandro Rafael Borba dos Santos Cerqueira, taxpayer number (NIF) 244391394, Rua de São Pedro, N15 5ºET, email [email protected].
This policy covers three things: this website, the customer area where you manage licenses and orders, and the Volath desktop app when it talks to our license server. For any privacy question or request, write to [email protected].
Data we collect
Contact form: the name, email address, company, plan of interest and message you type. We use them only to reply to you.
Customer account: your name, email address and a password stored only as a one-way hash. If you turn them on, two-factor authentication and passkeys store the secrets and public keys needed to verify you.
Billing details: the name, country, address, postal code, city and VAT number you give us so that we can issue invoices.
Orders and licenses: which plan you ordered, the amount, the dates, the invoice and the license keys linked to your account.
License checks from the desktop app: the license key, a random installation identifier generated by the app, the app version, the number of active users in the app and the time of each check. Our server also sees the IP address of the request, as every server does. We do not receive your tickets, code, repositories or AI conversations: those stay on your computer.
Emails we send you about your account: order confirmations, license delivery, invoices, renewal reminders and security messages.
Analytics: only if analytics is enabled on this site and you accept the cookie notice, usage statistics are collected through the analytics provider. Without your consent no analytics script is loaded.
Why we process data and on what basis
To create your account, process your orders, issue and manage your licenses and deliver the product: performance of a contract with you (or steps you ask for before one).
To issue invoices and keep accounting records: a legal obligation under tax and accounting law.
To check licenses, keep the service secure, prevent abuse and sharing of keys beyond the plan limits, and to reply to your messages: our legitimate interest in running and protecting the service.
To measure how the website is used: your consent, which you can withdraw at any time.
How long we keep data
Account and license data: while your account exists and your license is valid, and afterwards only as long as needed to handle claims.
Invoices and accounting records: 10 years, as required by Portuguese tax law, even if you delete your account.
Contact messages: up to 12 months after the conversation ends.
License check records and server logs: up to 12 months.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format and, where processing rests on consent, to withdraw it at any time. To use any of them, write to [email protected]. We answer within one month.
You can also lodge a complaint with the supervisory authority: in Portugal, the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt, or the authority of the country where you live.
Providing your data is needed to create an account and place an order; without it we cannot provide the service. Contact and analytics data are optional.
Security
Passwords are stored hashed, connections are encrypted, license answers are cryptographically signed and access to the systems is limited to what is needed. No system is perfectly secure; if a breach affects your data we will notify you and the authority as the law requires.
Changes to this policy
We update this policy when what we do changes. The date above shows the last update; for significant changes we also tell account holders by email. Last updated: 12 October 2026.