Privacy Policy

Effective date: May 1, 2026  ·  Last updated: May 5, 2026

1. What We Collect

1.1 Marketing funnel and waitlist

When you submit your email on the Volli landing page or waitlist, we collect your email address. The form displays the consent line "By adding your email you consent to our Terms and Privacy Policy." That is your consent to receive product updates and launch communications from us. You may unsubscribe from marketing emails at any time using the link in any email we send.

1.2 Account information

To create a Volli account we collect your first name, last name, email address, and a workspace name. We authenticate users via magic links (email-based, passwordless) — no password is stored.

1.3 Business inputs and simulation data

When you use the Volli simulation engine you provide business data: batch yields, ingredient costs, prep hours, shrinkage factors, co-pack minimums, channel pricing, supplier information, and similar food-business operational figures. This data is treated as your confidential business information. We do not sell it, share it with third parties for marketing purposes, or use it to train AI models.

1.4 Chatbot conversations

When you use the Volli chatbot we collect the messages you send, any context you attach (such as simulation outputs or product data you share in the conversation), and session metadata (timestamps, session identifiers). Conversations may be reviewed by Volli staff to improve quality and product features. See Section 5 for how chatbot messages are sent to LLM providers.

1.5 Usage and technical data

We automatically collect your IP address, browser and device type, operating system, pages viewed, actions taken in the product, session duration, and similar usage data. This is used to operate and improve Volli. Usage analytics are processed by PostHog, which Volli operates on its own infrastructure at analytics.volli.ai — this data does not leave Volli's servers.

1.6 Cookies and tracking technologies

We use session cookies (deleted when you close your browser) required to authenticate you and keep your session active, and persistent cookies that remember your preferences. We may use third-party analytics services that set their own cookies to help us understand how visitors use our site. You can configure your browser to refuse cookies; some parts of Volli may not function correctly if you do.

1.7 Google Tag Manager

We use Google Tag Manager (GTM), a tag management service operated by Google LLC, to deploy and manage tracking and analytics scripts on the Volli website and platform. GTM itself does not collect personal data from visitors; it acts as a container that fires the tags we configure.

PII exclusion: Volli configures GTM so that no personally identifiable information (such as names, email addresses, or billing details) is sent to GTM data layers or forwarded to any tag deployed through GTM. Any identifiers passed through GTM are pseudonymous session or device-level identifiers only.

Tags currently deployed via GTM: We currently use GTM to deploy analytics tags (including Google Analytics 4). Each third-party service receiving data through GTM is disclosed in Section 9. We take responsibility for ensuring we have the rights to deploy those tags and that each tag complies with applicable law.

Google's own data collection: Google may collect information about how GTM is used — including which tags are deployed and how the service is accessed — in accordance with Google's Privacy Policy. This usage data does not include your personal content.

EU users — consent: Where required by applicable law (including the EU/UK GDPR and Canada's PIPEDA), non-essential cookies and tracking technologies deployed via GTM are activated only after you provide consent through our cookie consent mechanism. You may withdraw consent at any time by updating your cookie preferences or contacting us at help@syzl.io.

1.8 Payment information

When you subscribe to a paid Volli plan, payment is processed by Helcim. We collect your billing name, billing address, and the last four digits of your card for receipt and account purposes. Full card numbers are never stored by Volli — they are tokenized and held by Helcim. See Section 9 for Helcim's privacy policy link.

2. How We Use Your Information

• To provide and operate the Volli platform, including running simulations and the chatbot.
• To send you product updates, launch announcements, and marketing communications (with your consent, and with an unsubscribe mechanism in every email).
• To send transactional and account messages (magic link emails, account notifications) — these are not marketing and are not subject to opt-out.
• To analyze usage patterns and improve the product.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with applicable law.

3. Simulation Engine Processing

Volli's simulation engine runs deterministic models on the inputs you provide (costs, yields, hours, channels, etc.). These computations run on Volli's infrastructure hosted in Canada (or the United States, depending on our cloud provider's region — see Section 7 for data residency details). Pure simulation runs do not send your business inputs to external AI providers.

Simulation outputs (results, model states, scenario histories) are stored in your Volli account and retained until you delete them or close your account. See Section 8 for the full retention schedule.

4. Chatbot and AI-Generated Content

The Volli chatbot provides conversational interaction and can help interpret simulation results, suggest strategies, and answer questions about your food business. It uses large language model (LLM) providers to generate responses. Real-time chat delivery is powered by Stream Chat — your messages and chat history are transmitted through Stream's infrastructure. See Section 9 for details.

What is sent to providers: Your chatbot messages, any simulation context you share in the conversation, and session identifiers are sent to our LLM provider(s) to generate a response. We do not send your raw business inputs (costs, yields, etc.) to LLM providers unless you explicitly paste them into the chat.

Chatbot conversation history is stored in your Volli account for 90 days, after which it is deleted. You may delete individual conversations or your full history at any time from your account settings.

Human review: Volli staff may review chatbot conversations (anonymized where practicable) to improve response quality and product features. By using the chatbot you consent to this review.

Chatbot outputs are for informational purposes only. They are not a substitute for professional advice (financial, legal, tax, or other). See also our AI Disclaimers.

5. AI Processing and Third-Party Model Providers

Training data statement: No user inputs are used in training AI models by Volli or, to the best of our knowledge under our current provider agreements, by our LLM providers. We verify this against each provider's Data Processing Agreement before any policy change.

Provider retention: Anthropic, Voyage AI, Tavily, and Perplexity do not retain API inputs beyond the duration of the API call under their current API terms (as of the effective date of this policy). Portkey may retain request and response content (including prompts) through its observability features depending on configuration; see Portkey's DPA for retention commitments. Users should review each provider's current privacy policy as these terms may change.

6. Agentic Actions

At the current version of Volli, the platform is advisory only. Volli does not take actions on your behalf — it does not send emails, browse external websites, write to third-party systems, or call external APIs without your direct instruction. All simulation and chatbot outputs are recommendations for you to act on.

If future versions of Volli introduce autonomous actions (e.g., placing orders, posting to platforms), we will update this Policy, provide clear in-product disclosure, and obtain explicit consent before enabling those features.

7. Cross-Border Data Transfer and Data Residency

Volli's servers are hosted in Canada and/or the United States depending on cloud infrastructure configuration. When you use the chatbot, your messages are sent to Anthropic and Voyage AI, both of which are US-based companies. This means chatbot messages may be processed in the United States, where privacy laws differ from those in Canada. Additionally, Google Tag Manager and Google Analytics (both operated by Google LLC, a US-based entity) process pseudonymous usage data in the United States.

Safeguards we rely on for these transfers include: Data Processing Agreements with each provider, contractual commitments that inputs are not retained or used for training, and encryption in transit (TLS) for all API communications.

Pure simulation runs (no chatbot involved) are processed on Volli's own infrastructure and do not leave our servers.

8. Data Retention

We may retain certain data for longer periods where required by law, for fraud prevention, or to resolve disputes.

9. When We Share Your Information

We share personal information only in the following circumstances:

• With AI providers (as described in Section 5) to process chatbot messages, generate embeddings, and perform research.
• With service providers listed below, each under contractual obligations to protect your data and use it only for the services they provide to us.
• For legal compliance — if required by law, court order, or to protect the rights, property, or safety of Volli, our users, or the public.
• In a business transfer — if Volli is acquired, merged, or its assets are sold, your information may transfer to the acquiring entity, which would be bound by this Policy or an equivalent.
• With your consent for any other purpose not described here.

We do not sell your personal information.

10. Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information, including TLS encryption in transit and access controls limiting data access to authorized personnel. No transmission over the internet is completely secure; use Volli at your own risk.

Breach notification: If we discover a breach that creates a real risk of significant harm (per PIPEDA) or a confidentiality incident (per Quebec Law 25), we will notify affected users and the Office of the Privacy Commissioner of Canada within the timelines required by law.

11. Your Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and personal information (subject to legal retention obligations).
• Withdraw consent for processing that relies on consent (e.g., marketing emails) — without affecting the lawfulness of processing before withdrawal.
• Portability — request a machine-readable export of your data.
• Object to processing for direct marketing at any time.

To exercise any right, contact us at help@syzl.io. We will respond within 30 days.

12. Automated Decision-Making

Volli's AI outputs are recommendations for you — pricing guidance, prep-time estimates, margin analysis — not decisions about you (such as eligibility, creditworthiness, or access to services). No decisions about your person or legal status are made exclusively by automated means.

This complies with Quebec Law 25 §12.1. If Volli ever introduces automated decisions about users (not currently planned), we will update this Policy, provide advance notice, and implement meaningful human review mechanisms.

13. Quebec Residents (Loi 25)

If you are a resident of Quebec, you have rights under Loi modernisant des dispositions législatives en matière de protection des renseignements personnels (Law 25), including the rights described in Section 11.

Privacy Officer: Adrian Savin, Syzl Inc. — help@syzl.io.

Tracking and profiling: We collect usage data (§8.1 disclosure). The purpose is to operate and improve the Volli product, not to create profiles for automated decisions about users.

Children under 14: We do not knowingly collect personal information from children under 14 without parental consent, in accordance with Quebec Law 25.

14. Children's Privacy

Volli is not directed at children. We do not knowingly collect personal information from anyone under 16 years of age (or under 14 for Quebec residents, per Law 25). If you believe we have inadvertently collected information from a child, please contact us at help@syzl.io and we will delete it promptly.

15. US Residents (CCPA / CPRA)

If Volli is offered to users in California or other US states with privacy legislation (Colorado, Virginia, Connecticut, Utah), you may have additional rights including: the right to know what personal information is collected about you; the right to delete; the right to correct; the right to opt out of the sale or sharing of personal information (we do not sell personal information); and the right to non-discrimination for exercising privacy rights.

To exercise these rights, contact us at help@syzl.io.

16. Marketing Emails (CASL)

If you submit your email on the Volli landing page or waitlist, you provide express consent under Canada's Anti-Spam Legislation (CASL) to receive commercial electronic messages from Syzl Inc. about Volli. Every marketing email includes an unsubscribe link. Unsubscribe requests are honored within 10 business days.

17. General

17.1 Governing law

This Policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein. Volli complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec Law 25.

17.2 Changes to this Policy

We may update this Policy from time to time. Material changes will be posted at volli.ai/privacy and, where appropriate, communicated by email. Continued use of Volli after changes are posted constitutes acceptance of the updated Policy.

17.3 Third-party links

Volli may contain links to third-party websites. We are not responsible for the privacy practices of those sites. Review their policies before submitting personal information.

18. Contact Us

See also: Volli AI Disclaimers  ·  Terms of Service