Legal

Privacy Policy

Last updated October 30, 2026. Effective on publication.

The short version

Volley Solutions LLC ("Volley", "we" or "us") builds decision software and Salesforce systems for organizations, many of them ministries and mission organizations. This policy explains what we collect about you, why, and what you can ask us to do with it.

• Our website sets no cookies and loads no advertising or social media trackers. We count visits in aggregate with Vercel Web Analytics, which does not use cookies.
• The contact form sends your name, email address, organization, topic and message to our team by email. The website itself stores none of it.
• We do not sell personal information, and we do not share it for targeted advertising.
• When we build or run systems for a client, such as a Salesforce org, Volley Mirage or Volley Signals, the client decides what happens to that data, and its agreement with us governs it. We act on the client's instructions.
• Where being identified could put someone at risk, our products coarsen locations, keep donor-level data out of Volley Signals, and do not name field staff.
• AI drafts and summarizes. A person approves.
• Write to support@volleysolutions.com to see, correct or delete what we hold about you.

Who we are and what this policy covers

Volley Solutions LLC is based in Golden, Colorado. This policy covers VolleySolutions.com, the Volley app, the prototype previews in our workspace, and the ways you reach us: email, the contact form and booked calls. One section below explains how we handle data in the systems we deliver for clients, which is governed differently.

This policy replaces our policy of October 20, 2020, which was written for an earlier version of our platform. Our Subscriber Agreement and Terms of Use covers the rest of our relationship with you.

What our website measures

The site is hosted by Vercel. It uses Vercel Web Analytics to count page views, the page that referred you, your country, and your browser, operating system and device type, in aggregate. Vercel Web Analytics does not set cookies and does not follow you to other sites, and we do not use it to build a profile of you.

Like any web host, Vercel receives your IP address and browser details with each request and keeps standard server logs for a limited period to run and secure the service. We do not use those logs to identify visitors.

No page on the site loads an advertising network, a social media pixel or a third-party analytics script. Our fonts are served from our own site, not from a font service.

Cookies and what is kept on your device

The website sets no cookies. A few features keep a small value in your own browser's storage. It stays on your device and is not sent to us:

• your light or dark theme choice;
• in the Library preview, your checklist and the view you chose; and
• in the workspace previews, the work email you type at the sign-in screen, kept only for that browser tab. That screen is a prototype, not a real sign-in, and it asks for no password.

Clearing your browsing data removes all of them.

When you contact us

The contact form asks for your name, your email address, your organization (optional), a topic and your message. When you send it, our server passes it to Resend, our transactional email provider, which delivers it to the Volley team's mailbox on Google Workspace. The website does not keep a copy.

To stop automated spam, the form uses a hidden field and a signed time stamp, and our server counts how many messages each IP address has sent in the past hour. That count is held only in the memory of the server handling the request. It is never written to a database, and it is lost whenever that server restarts.

We use what you send to reply to you and to follow up about what you wrote to us about. We do not add you to a mailing list from the contact form or from an email you send us unless you ask us to.

When you book a call

Booking links on our site open Calendly, a scheduling service. Calendly collects your name, your email address and any answers you give, under its own privacy policy, and passes the booking to our calendar on Google Workspace. We use it to hold the meeting and to prepare for it.

The Volley app

The Volley app helps individuals make everyday decisions. Today it runs on a third-party app platform while we build its replacement. To use it you give us your name and email address. What you put into it, such as decisions, criteria, journal entries, voice recordings and answers to the decision-profile interview, is used to provide the app to you: to save your work, to transcribe and analyze what you record, and to show you your results.

Some of those features use the AI model providers described below. We do not sell what you put into the app, and we do not use it for advertising. If you use the app through your organization, your organization's agreement with us says what, if anything, the organization can see.

You can ask us to delete your app account and everything in it at any time.

Client data in the systems we deliver

Most of our work is for organizations: Volley Relate and client Salesforce orgs, Volley Decide, Volley Mirage, Volley Kindling, Volley Signals and related services. In that work the client decides what personal information goes in, why, and for how long. We process it on the client's behalf, under its written agreement with us and any data processing terms in that agreement. In the language of privacy law, the client is the controller or business, and Volley is its processor or service provider.

That data is governed by the client's agreement, not by this policy. If your information is in a system we run for an organization, for example as a donor, partner, staff member or field reporter, please send requests about it to that organization. If you write to us instead, we will pass your request to the organization and help it respond.

Our standing practices in client work are on our Trust page. Client records stay in the client's Salesforce org, under its security model, sharing rules and audit trail; we work inside the org rather than copying data out. Personnel, compensation and donor matters stay out of group sessions and shared examples. Customer stories on our website use only figures our clients have cleared.

People in sensitive places

Many of our clients serve where being identified with a ministry or mission can carry real risk. Our products are built for that:

• Volley Signals coarsens sensitive locations to the country or region, and donor-level data never appears in it.
• Volley Signals does not name field staff. Reports show the partner type only.
• Volley Mirage strips location metadata from photos by default, blurs the faces of minors before anything is published, and tracks consent for every person and every item.
• Nothing from Volley Mirage reaches a donor until a steward at the client organization approves it.

If you believe something we publish or deliver could identify a person who would be put at risk, write to support@volleysolutions.com. We will treat it as urgent.

How we use AI

AI helps our products draft, summarize, transcribe, translate and challenge. People approve. In Volley Decide, AI may propose criteria and challenge reasoning, but people set the decision weights and the math is deterministic, so every recommendation can be explained. In Volley Mirage, a steward approves every item before a donor sees it.

We use AI model providers (Anthropic, OpenAI and Google) through their business APIs. We send them content only to perform a task you or your organization asked for, in the services where those features are in use.

Who else handles information

We use a small number of providers to run our business. Each one handles personal information only to provide its service to us:

• Vercel hosts this website and our web apps and provides the visit counts described above.
• Resend delivers contact form messages.
• Google Workspace runs our email, calendar and documents.
• Calendly handles booked calls.
• A third-party app platform runs the current Volley app.
• Salesforce and Nintex (Skuid) are the platforms our client systems are built on.
• Anthropic, OpenAI and Google provide AI models for AI features.

Which of these touch a client's data depends on the services the client uses. We list the specific subprocessors in every statement of work.

We may also disclose information when a law, court order or other legal process requires it, or where reasonably necessary to protect someone's safety, our rights or the security of our services. If a request concerns a client's data, we will refer it to the client and tell the client, unless the law forbids us to. If Volley is merged, acquired or sells its assets, information may move with the business, subject to the promises in this policy and to any notice the law requires.

Our accounts on other platforms

We publish on LinkedIn, YouTube, Substack and GitHub. Those are other companies' services, and their own terms and privacy policies govern what you do there, including subscribing to our Substack newsletter. This policy does not cover other sites we link to.

Your rights

Depending on where you live, you may have the right to:

• know what personal information we hold about you, and get a copy in a portable form;
• correct it;
• delete it;
• opt out of the sale of your personal information, of targeted advertising, and of profiling that produces legal or similarly significant effects; and
• appeal if we decline your request.

Colorado residents have these rights under the Colorado Privacy Act, and residents of California, Virginia and a growing number of other states have similar ones. We honor these requests from anyone who asks, wherever they live, without first working out whether a particular law applies. We do not sell personal information or use it for targeted advertising or that kind of profiling, so there is nothing to opt out of. If your browser sends a Global Privacy Control signal, we treat it as an opt-out all the same.

To make a request, write to support@volleysolutions.com. We may need to confirm your identity before we act. We will answer within 45 days and tell you if we need more time, as the law allows. If we decline, we will explain why and how to appeal. If you are a Colorado resident and are not satisfied with the result of your appeal, you may contact the Colorado Attorney General.

We will not treat you differently for using any of these rights. If your information is in a system we run for a client, see the section on client data above.

If you are outside the United States

Volley is in the United States. The information we handle is stored and processed in the United States and wherever our providers operate, where the law may protect it less than the law where you live.

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases: our legitimate interest in answering you and running our business (the contact form, booked calls and visit counts); performing a contract with you (the Volley app and paid services); and your consent where we ask for it. In addition to the rights above, you may object to or restrict our processing, withdraw your consent at any time, and complain to your local data protection authority. For a client's data, the client's agreement with us sets out how international transfers are protected.

Children

Our website, the Volley app and our products are not directed to children under 13, and we do not knowingly collect personal information from them. Where the law sets a higher age, such as 16 in parts of Europe, we do not knowingly collect information from younger users without the consent the law requires. If you believe a child has given us information, write to support@volleysolutions.com and we will delete it.

How long we keep things

• Visit counts: kept in aggregate by Vercel. They are not tied to a person, so there is nothing in them to delete on request.
• Spam-prevention counts: held in server memory only, never stored.
• Contact form messages and email: kept as long as we need them to answer you and follow up, and no longer than 24 months after our last exchange, unless they become part of a client engagement or the law requires us to keep them. Resend keeps a delivery log of each message for a limited period under its own retention settings.
• Volley app data: kept while your account is open, and deleted within 90 days after you close your account or ask us to delete it, except where the law requires us to keep something.
• Client data: kept and deleted as the client's agreement says.

Keeping information safe

Volley staff and contractors get the minimum access a task needs, with multi-factor authentication, and access is removed when the work ends. Credentials live only in environment variables on our hosting platform, never in code repositories, documents or email. Our Trust page describes the rest of our controls.

No method of transmission or storage is completely secure, and we cannot promise absolute security. If a breach affects your personal information, we will notify you and the authorities as the law requires, and tell you what happened and what you can do. If a breach affects a client's data, we will notify the client promptly so it can meet its own obligations.

If you find a security problem in our website or services, please tell us at support@volleysolutions.com. We will not take legal action against anyone who reports a problem in good faith and gives us a fair chance to fix it.

How to reach us

Email support@volleysolutions.com. A person reads it. By mail: Volley Solutions LLC, 1100 Johnson Rd #18593, Golden, CO 80402, United States.

When this policy changes

We will update this page when our practices change, and the date at the top will change with it. If a change materially affects how we use information we already hold, we will tell you before it takes effect where we have a way to reach you, and ask for your consent where the law requires it.

What changed

October 30, 2026. Rewritten in full. The 2020 policy described a subscription platform with accounts, payments and information shared between users. This version describes what Volley does today: a website with no cookies, a contact form that sends email, the Volley app, and client systems governed by client agreements. It adds sections on people in sensitive places, AI, state privacy rights and international users. It removes the 2020 terms that extended your permissions to our vendors and released us from liability for disclosures.