Last updated: September 7, 2026
Volleyora (“we”, “us”) is a LinkedIn outreach tool built and operated by Hamza Ali, its founder. It consists of the website at volleyora.com, a web application, and a Chrome extension. This policy explains what data we process, why, and the choices you have. Questions go to support@volleyora.com.
1. Data we process on this website
Contact form. When you send a message through the contact page we process your name, email address, the topic you pick, and your message. We keep a copy so that a mail delivery problem cannot lose your message, and we use it only to reply to you.
Newsletter. When you subscribe we store your email address, the date and time you subscribed, the page you subscribed from, your IP address, and your browser’s user agent string. The IP address and user agent are kept to detect abuse of the form. You can unsubscribe at any time by emailing us, and we will delete your record.
Server logs. Like every website, our hosting provider records standard request logs (IP address, requested page, time, browser) for security and troubleshooting. These are kept for a short period and are not used to identify visitors.
Fonts. The website loads its typefaces from Google Fonts. Your browser requests the font files directly from Google, which means Google receives your IP address as part of that request. Google’s handling of that request is described in Google’s privacy policy.
Analytics. The website is built to support Google Tag Manager with Consent Mode, which means analytics and advertising storage are denied by default and can only be switched on with your consent. No analytics container is active at the time of this policy, so no analytics data is collected.
2. Data we process in the product
Your account. Email address, name, and password (stored hashed). If you choose to link your LinkedIn account through LinkedIn’s official sign-in, we store the resulting tokens encrypted.
Prospect data you capture. When you use the extension to capture prospects from LinkedIn pages you open, we store what those pages show: name, headline, company, location, profile URL, LinkedIn ID, avatar URL, connection status, and an email address only when the prospect has published one on their LinkedIn contact information. We never guess, generate, or purchase email addresses.
Your LinkedIn conversations. If you use the inbox, the extension syncs your own LinkedIn conversations (participant names and message text) into your Volleyora account so you can read, schedule, and reply there.
Campaign and usage data. Campaigns, templates, tags, scheduled messages, the outcome of each automation action (completed, failed, retried), and daily action counts used to enforce safety limits.
Gmail sending credentials. If you enable email steps, we store the Gmail address and the Google App Password you provide, encrypted at rest. We never ask for your Google account password.
Security logs. Sign-ins and sensitive account actions are recorded with the IP address they came from, so that you and we can investigate suspicious activity.
3. What we deliberately do not collect
- Your LinkedIn password. Never asked for, never stored.
- Your LinkedIn session cookies. The extension reads two linkedin.com cookies inside your own browser only so your own tab can talk to LinkedIn. Cookie values are never transmitted to our servers.
- Browsing activity outside linkedin.com and the Volleyora app.
- Third-party analytics or advertising identifiers inside the extension. The extension contains no analytics SDKs, trackers, or ad code. It communicates with exactly two hosts: linkedin.com, from your own session, and the Volleyora backend.
4. How automation runs
All LinkedIn actions execute in your own browser, on your own IP address, from your own logged-in session. Our servers schedule work and store your data. They never connect to LinkedIn to act on your behalf. The single exception is LinkedIn’s official OAuth endpoint, used only if you choose to link your account for sign-in.
5. How we use data
To provide the product: run the campaigns you build, personalize your templates with prospect fields, sync your inbox, send your email steps through your own Gmail, enforce daily safety limits, and show your dashboard. We also use account data to answer support requests and to send service messages about your account. We do not sell personal data, we do not share it with third parties for their own purposes, and we do not use it for advertising.
6. Your responsibilities for prospect data
You decide which prospects to capture and contact. For that data you act as the data controller and Volleyora processes it on your instructions. You are responsible for having a lawful basis to contact your prospects, for complying with the laws that apply to your outreach (for example the GDPR or CAN-SPAM), and for complying with LinkedIn’s User Agreement, which prohibits automation tools.
7. Service providers
We use a small number of providers to run the service. Each one processes data only to provide its service to us:
- Our hosting provider, which stores the application database and serves this website.
- Google, for Gmail SMTP delivery of the email steps you send from your own account, and for the fonts on this website.
- Sentry, for error monitoring. Error reports are configured to exclude personal data.
- Freemius, which hosts checkout and processes subscription payments. We never see your card number.
8. Storage, security, and retention
Data is stored in our production database. Passwords are hashed. Gmail App Passwords and OAuth tokens are encrypted at rest. API access uses short-scoped bearer tokens, with at most three active devices per account. Data is retained while your account exists. You can delete individual prospects, conversations, or campaigns in the app at any time. To delete your account and all associated data, email us and we will complete the deletion within 30 days. Newsletter and contact form records are deleted on request.
9. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict its processing. You can export your prospect list to CSV from the app at any time. For anything else, write to support@volleyora.com and we will respond within 30 days. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.
10. Children
Volleyora is a business tool and is not directed at anyone under 18. We do not knowingly collect data from children.
11. Changes
We will post changes here and update the date at the top of this page. Material changes will also be announced in the app.
12. Contact
Hamza Ali, founder of Volleyora
support@volleyora.com