Skip to content
Privacy

Privacy policy.

Last updated: September 28, 2026.

At Volto, we take the protection of your personal data seriously. This page explains, in line with the GDPR and the French Data Protection Act:

  • what data we collect
  • why
  • for how long
  • what your rights are

1. Who is responsible?

The data controller is:

DMR DANS MA RUE
SAS with share capital of €2,000
Allée du Levant, 34970 Lattes, France
SIREN 891 920 936 · Companies Register Montpellier

Contact: [email protected]

2. Data collected

We collect no data automatically while you browse.

We only collect data you voluntarily submit through the contact form:

  • First and last name
  • Business email
  • Phone (optional)
  • Firm name
  • Team size
  • Message

3. Why this data?

We use this data to:

  • respond to your requests
  • schedule a demo
  • engage in commercial discussions
  • comply with our legal obligations

We do no intrusive advertising.

4. Legal basis

Processing is based on:

  • Legitimate interest: responding to your requests
  • Pre-contractual / contractual: service-related exchanges
  • Consent: for sending commercial electronic communications when required by law
  • Legal obligation: accounting and tax obligations

5. Retention period

  • Prospects: 3 years after last contact
  • Customers: contract duration + 5 years
  • Accounting data: 10 years
  • GDPR requests: 6 years

6. Who has access to the data?

Your data is only accessible to:

  • internal teams (sales, support, technical)
  • our technical service providers

Examples:

  • Hosting: Scaleway (France)
  • Email delivery: technical providers

7. Hosting and transfers

All data is:

  • hosted in France
  • processed within the European Union

No transfer outside the EU is performed.

8. Cookies & analytics

The volto.fr website uses Matomo Analytics in anonymized mode to measure its audience. This setup is compliant with French CNIL recommendations for consent exemption (deliberation no. 2020-091).

Concretely, on volto.fr:

  • no tracking cookie is set on your browser
  • your IP address is anonymized (the last 2 octets are masked before storage)
  • no user identifier (User ID, Visitor ID) is kept between visits
  • your browser's Do Not Track directive is respected
  • data is hosted at o2switch (France), never transferred outside the EU
  • no advertising, no third-party tracking, no social pixels

→ No consent is required for analytics.

You can opt out of this anonymous analytics at any time by enabling "Do Not Track" in your browser, or write to us at [email protected] to exercise your GDPR rights (access, rectification, deletion).

The only other technical resources loaded are Google Fonts (Inter typography), necessary to display the site and which use no cookies.

9. Volto platform: Google Calendar connection

Users of the Volto platform (app.volto.fr) may choose to connect their Google account so that the sales appointments they create in Volto automatically appear in their Google Calendar. This connection is optional and only happens at the user's initiative.

Google data we access:

  • the email address of the connected Google account, to show the user which account is linked
  • creating, updating and deleting the calendar events that correspond to appointments created in Volto ("calendar.events" scope)

Volto does not read your other calendar events and does not access your emails, contacts or files. The only data sent to Google Calendar is that of your Volto appointments (title, date, location, video link, company, notes, reminders).

Storage and security: we only store the Google account email address, a long-lived access token ("refresh token") encrypted with AES-256, and the technical identifiers of the events we create. This data is hosted in the European Union and is never shared, sold, or used for advertising or to train artificial intelligence models.

Revocation: you can disconnect Google Calendar at any time from the Calendar page in Volto (the token is then revoked and deleted), or from myaccount.google.com/permissions. Events already created remain in your calendar. Deleting your Volto account deletes this data.

Volto's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

10. Security

We implement:

  • HTTPS / TLS
  • secure hosting
  • access control
  • regular backups

11. Your rights

You can at any time:

  • access your data
  • correct it
  • request its deletion
  • object to its processing
  • request its portability
  • restrict processing
  • set instructions about your data after death

Contact: [email protected]
Reply within 1 month maximum.

12. Complaint

You can lodge a complaint with the French data protection authority (CNIL):

cnil.fr
3 place de Fontenoy, 75007 Paris

13. Changes

This policy may evolve. The update date is shown at the top of the page.