Privacy Policy

This Privacy Policy explains how phpMyDEV LLC, an Arizona limited liability company doing business as VoltJS ("Volt," "we," "us"), collects and uses information when you use Volt Hosting at host.voltjs.com and the hosting service (the "Service"). Questions? Email legal@voltjs.com.

1. The short version

• We collect the minimum we need to run the Service: your email, your site content, billing status, and technical/security data.
• We do not sell your personal data and we run no advertising or third-party tracking.
• To stop spam and abuse we use an invisible proof-of-work check instead of a third-party CAPTCHA — so your visitors are never handed off to Google or Cloudflare to be profiled.
• You can export your data and delete your account at any time.

2. Information we collect

Account information

Your email address. We use passwordless "magic-link" login, so we do not store passwords.

Payment information

Paid plans are processed by Stripe. We do not receive or store your full card number — Stripe does. We store your subscription status and Stripe customer/subscription identifiers so we can bill and manage your plan.

Content you create

The websites you build: pages, posts, uploaded media, site settings, and any custom domain names you connect.

WordPress import data

If you migrate a WordPress site, you may provide a WordPress application password or a domain-verification token. An application password is used once to fetch your content and is never stored and never written to logs.

AI feature data

If you enable the optional AI editing add-on, the text and prompts you submit are sent to our AI provider (Anthropic) to generate a response. We store usage counts (token totals) to meter your allowance. AI features are off unless you turn them on.

Technical & security data

To operate the Service and prevent abuse, we process: your IP address; basic browser/device details (user-agent, language); a derived device/network fingerprint (a one-way hash of your network and browser signals, used to enforce free-tier limits and detect abuse — not used to track you across the web); proof-of-work challenge results; and server access logs for host.voltjs.com (request path, timestamp, IP, user-agent, referrer). Session cookies are redacted from our logs.

Cookies

We use a single session cookie to keep you logged in. We do not use third-party advertising or cross-site tracking cookies. Because that cookie is strictly necessary and we set no tracking cookies, no cookie-consent banner is required.

3. How we use information

• To provide, operate, and maintain the Service and your sites.
• To authenticate you (magic-link login) and secure your account.
• To process payments and manage subscriptions (via Stripe).
• To prevent fraud, spam, and abuse — including proof-of-work checks, rate limiting, reputation scoring, and firewall-level blocks — and to enforce our Acceptable Use Policy, including automatically declining prohibited subdomain names at signup.
• To send you transactional and service messages (login links, billing notices, important changes).
• To comply with law and enforce our agreements.

4. What we do not do

We do not sell or rent your personal data. We do not run behavioral advertising. We do not embed third-party CAPTCHAs or ad/analytics trackers that profile your visitors.

5. Subprocessors

We use a small number of vendors ("subprocessors") to run the Service. Each processes personal data only as needed to perform its function, under the data-protection terms in its contract with us:

• DigitalOcean, LLC (USA) — cloud hosting and object storage for your sites and media.
• Stripe, Inc. (USA) — payment processing and subscription billing.
• Zoho Corporation — delivery of transactional email (login links and account notices).
• Anthropic, PBC (USA) — AI model provider, used only if you enable AI features.

International transfers. These providers may process and store data in the United States. Where we transfer the personal data of individuals in the EEA, the UK, or Switzerland to the United States, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses and, where the provider participates, the EU-U.S. Data Privacy Framework.

We keep this list current; the version shown on this page is always the authoritative one.

6. How long we keep it

• Account & content — kept while your account is active. If you close your account, we hold it for a 30-day grace period (during which you can still log in and export), then permanently delete it. Deleting a site removes its content.
• Security logs — retained for a limited period for security and abuse-prevention, then discarded.
• Billing records — retained as required for tax, accounting, and legal purposes.

7. Your rights and choices

You can access and update your information, export your sites from the dashboard, and delete your account at any time. To make any other request, email legal@voltjs.com.

Depending on where you live, you may have additional rights:

• California residents (CCPA/CPRA): the rights to know, access, delete, and correct your personal information, and to not be discriminated against for exercising them. We do not sell or "share" personal information as those terms are defined.
• EU/EEA/UK residents (GDPR): the rights to access, rectify, erase, restrict, port, and object to processing, and to lodge a complaint with your local data-protection authority. Our lawful bases are performance of our contract with you, our legitimate interest in securing and improving the Service, and your consent where required (e.g., AI features) — which you can withdraw at any time.

8. Security

We serve everything over HTTPS, restrict access to systems, and run an active abuse-prevention stack. No online service can promise perfect security, but we work to protect your data and to keep the platform hardened. Please keep access to your email account secure, since it controls login. If a personal-data breach affects you, we will notify you and the relevant authorities as required by applicable law.

9. Children

The Service is not directed to children. You must be at least 18 years old (or the age of majority where you live) to have an account. We do not knowingly collect personal information from children under 13; if you believe a child has provided us data, contact legal@voltjs.com and we will delete it.

10. Sites you publish (controller / processor)

Content you publish through Volt is public. For your account and your use of the Service, we are the data controller. But if you collect personal data from your own visitors (for example, through a contact form), you are the controller of that data and we act as your processor, hosting it on your behalf — so you are responsible for your own privacy notice, lawful basis, and any required consent. If you are a business subject to the GDPR and need a Data Processing Addendum (DPA) covering that processing, contact legal@voltjs.com and we will provide one.

11. Changes to this policy

We may update this policy. We will post the new version here and update the "Last updated" date; for material changes we will provide additional notice.

12. Contact

phpMyDEV LLC (d/b/a VoltJS), Arizona, USA — legal@voltjs.com.