Privacy Policy
Last updated: 2026-05-17
Volley ("we", "us") provides AI missed-call recovery for local businesses. This page explains what we collect, why, and what your rights are.
What we collect
- Phone number — when you submit one through the demo form, or when you receive a call/SMS that gets routed through a business that uses Volley.
- SMS conversation contents — the messages exchanged between you and Volley's AI.
- Caller metadata — call timestamps, the Volley phone number that received the call, qualification fields the AI captures (e.g. service requested, preferred time, name).
- Server logs — IP address, timestamp, and basic request metadata for the demo endpoint, kept short-term to prevent abuse.
Why we collect it
- To reply to missed calls and have a useful conversation with you.
- To send the business owner a structured summary of your inquiry so they can follow up.
- To enforce per-phone rate limits on the public demo.
Who else processes your data
Volley uses these third-party processors:
- Twilio — SMS and voice routing. Twilio sees the phone numbers and message contents we send through it. Their privacy policy: twilio.com/legal/privacy.
- Anthropic — the AI conversation engine. Conversation contents are sent to Anthropic's API to generate replies. anthropic.com/legal/privacy.
- Resend — email delivery for owner notifications and digests. resend.com/legal/privacy-policy.
- Fly.io — application hosting. fly.io/legal/privacy-policy.
- Google — if a business owner connects their Google Calendar, Volleyback accesses the Google Calendar API on their behalf to read availability (free/busy data) and create booking events. We store an OAuth refresh token in our database solely to maintain this connection. We do not read, store, or share any calendar event content beyond what is needed to create the booking event. Business owners can disconnect at any time from their dashboard, which deletes the token from our system. policies.google.com/privacy.
How long we keep it
Lead and message data are kept while a business actively uses Volley plus a reasonable period after for case-study purposes. You can request deletion at any time using the contact below; we'll remove your number, conversation contents, and any captured fields within 30 days.
Your rights
If you're in Canada, the EU/UK, or California, you have the right to access, correct, or delete your personal data, and to object to processing. To exercise any of these, email us at privacy@volleyback.com.
Security
Data is stored encrypted at rest on Fly.io's infrastructure. We don't sell or rent personal data, ever. We don't use your conversations to train AI models.
Changes
If this policy changes meaningfully, we'll update the date above and, where reasonable, notify the business owners using Volley.
Contact
Email: privacy@volleyback.com