Privacy Policy

Two different roles: read this first

We handle personal information in two distinct ways, and different parts of this policy apply to each.

Information we handle for ourselves

When you visit vonta.io, request a demo, email us, or sign up as a customer, we decide how your information is used. For that information we are the controller (a “business” under California law).

Information we handle for our customers

Our customers are contracting businesses. They use Vonta to manage records about their customers and prospects, meaning homeowners and property owners. We store and process that information on our customer's instructions, as a processor (a “service provider” under California law). We do not decide how it is used, and we do not sell it.

If a contractor called you using Vonta, that contractor, not Vonta, controls your information. See If a contractor called you below.

What we collect

Information you give us

Demo requests. Your name, business name, phone number, email, and anything you type into the form.
Account information. Name, business name, email, phone, business address, and the details you enter in Settings.
Communications. Emails, texts, and calls with us, including recordings and summaries where we record. We tell you when we do.
Payment information. Handled by our payment processor. We never receive or store full card numbers.

Information we collect automatically

Usage and device data. IP address, browser and device type, pages viewed, timestamps, and actions taken in the app.
Cookies. See Cookies.

We do not knowingly collect information from anyone under 18. Vonta is for businesses.

How we use it

To provide, operate, secure, and support the service
To respond to your demo request or inquiry, including by calling or texting you where you asked us to
To send text messages you opted into: scheduling, reminders, replies. Reply STOP to opt out, HELP for help
To bill you and keep financial records
To send service and administrative messages
To detect, investigate, and prevent fraud, abuse, and security incidents
To comply with the law and enforce our Terms
To improve the service, using aggregated or de-identified information

Purpose limitation. We collect personal information for these specific purposes and do not use it for a materially different, unrelated purpose without telling you and, where required, asking first.

Calls, AI, and recording

Vonta places and answers phone calls using an artificial, automated voice. If you speak with a Vonta assistant you are speaking with software, not a person, and it will tell you so at the start of the call.

When you contact us, we may record calls and generate transcripts and summaries for our business records, where the law permits and after any disclosure the law requires.

When a contractor's Vonta assistant calls you, that contractor decides whether the call is recorded and is responsible for obtaining the consent the law requires. We store the recording on their behalf.

What we never do

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law.
We do not use personal information to make automated decisions that produce legal or similarly significant effects.
We do not run advertising on Vonta, and we do not let anyone pay to reach you through it.

When we share information

We share personal information only with:

Service providers who help us run Vonta, under contracts limiting them to that purpose (listed below)
Our customers, where the information relates to their account
Legal and safety recipients, where required by law or to protect rights and safety
A successor in a merger, acquisition, or sale of assets, subject to this policy

Our providers

These are the companies that process data to help us run Vonta.

Provider	What it does for us
Supabase	Database and file storage
Vercel	Application hosting
Cloudflare	Website hosting and DNS
Twilio	Phone calls and text messages
ElevenLabs	The AI voice assistant
Stripe	Payment processing
Intuit (QuickBooks)	Accounting sync, when you connect it
OpenAI	Reading the numbers out of a measurement report you upload
Google Workspace	Our business email and backups

We update this list as providers change. If you'd like advance notice of changes, email us and we'll add you to the list of people we notify.

SMS and mobile information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and phone numbers collected for SMS consent are not shared with any third party, except service providers acting on our behalf strictly to deliver messages (such as our SMS carrier platform). All other sharing categories exclude mobile opt-in data.

Message frequency varies. Message and data rates may apply. Reply STOP to cancel at any time; reply HELP for help. Carriers are not liable for delayed or undelivered messages. Full details are on our SMS Consent page.

Cookies

We use cookies that are necessary to sign you in and keep the app secure. You can control cookies in your browser, but disabling the necessary ones will break sign-in.

We do not run analytics, advertising, or third-party tracking on this website. There are no tracking pixels, no advertising cookies, and no behavioral profiling. The only cookie the Vonta app sets is the one that keeps you signed in.

Security

We take reasonable measures to protect personal information, including:

Data stored in a managed Postgres database, encrypted at rest and in transit (TLS)
Role-based access, so account owners control who on their team sees what
Database-level access rules that keep one company's customer records separate from another's
Access to production systems limited to people who need it

No system is perfectly secure, and we cannot guarantee absolute security. We do not claim any security certification or audit, and we would rather say that plainly than imply otherwise.

If you are a homeowner or a contractor's customer

Information about you inside Vonta belongs to the contracting business you dealt with. To access, correct, or delete it, or to ask about a recorded call, contact that business directly.

If you contact us instead, we will point you to them, and we will help them respond as our contract with them requires. You can email andrew@vonta.io and we'll pass the request along.

How long we keep things

We keep personal information only as long as it is needed for the purposes above, or as the law requires.

What	How long
Demo requests and inquiries	24 months after last contact, unless you become a customer
Account records	For the life of the account
Customer platform data	For the life of the customer's account, then deleted as described in Terms §6
Financial and tax records	As long as the law requires
Backups	Overwritten on our ordinary backup cycle

Your rights and choices

Depending on where you live, you may have the right to know what we hold about you, get a copy, correct it, delete it, opt out of sale or sharing (we do neither), and not be treated differently for exercising those rights.

To make a request, email andrew@vonta.io. We will verify your identity before acting and respond within the time the law allows. You may use an authorized agent. If we decline your request, you can appeal by replying to our response, and we will review it and explain the outcome.

Changes and contact

We will post changes on this page and update the date at the top. For material changes we will notify you by email or in the app.

Vonta LLC · Clayton, Missouri · andrew@vonta.io · (314) 827-1855