Privacy Policy

Your privacy is important to us. It is our policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website, https://volleyora.com, and other sites we own and operate.

Personal information is any information about you which can be used to identify you. This includes information about you as a person (such as name, address, and date of birth), your devices, payment details, and even information about how you use a website or online service.

In the event our site contains links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy information about how they collect and use personal information. This Privacy Policy does not apply to any of your activities after you leave our site.

This policy is effective as of September 18, 2026

Last updated: September 18, 2026

Information We Collect

Information we collect falls into one of two categories: “voluntarily provided” information and “automatically collected” information.

“Voluntarily provided” information refers to any information you knowingly and actively provide us when using or participating in any of our services and promotions.

“Automatically collected” information refers to any information automatically sent by your devices in the course of accessing our products and services.

Log Data

When you visit our website, our servers may automatically log the standard data provided by your web browser. It may include your device’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details about your visit.

Additionally, if you encounter certain errors while using the site, we may automatically collect data about the error and the circumstances surrounding its occurrence. This data may include technical details about your device, what you were trying to do when the error happened, and other technical information relating to the problem. You may or may not receive notice of such errors, even in the moment they occur, that they have occurred, or what the nature of the error is.

Please be aware that while this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual persons.

Device Data

When you visit our website or interact with our services, we may automatically collect data about your device, such as:

• Device Type
• Operating system

Data we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.

Personal Information

We may ask for personal information – for example, when you submit content to us, when you subscribe to our newsletter, when you register an account or when you contact us, which may include one or more of the following:

• Name
• Email
• Social media profiles
• Account password (stored hashed)
• LinkedIn account identifiers and connection tokens (tokens stored encrypted)
• Prospect data you import or add (names, profile links, headlines, companies, locations, emails, notes, tags)
• LinkedIn conversations and messages synced to your account
• Emails you send through the Service (recipients, subjects, message content, delivery status)
• Gmail address and Google App Password (encrypted), if you enable Gmail sending
• Profile photos of users, prospects and conversation participants
• Affiliate programme details (website, promotion methods, payment contact details)
• Subscription and billing status (payment card details are handled by our checkout provider and never reach us)

The Volleyora Chrome Extension

Volleyora is delivered as a Chrome extension that runs inside your own browser and performs your LinkedIn outreach from your own logged-in LinkedIn session, on your own computer. Our servers do not send LinkedIn messages or connection requests for you, and no outreach happens while your browser is closed. Our servers do run other work in the background: they refresh the LinkedIn sign-in token you granted when connecting your account, download profile images from LinkedIn’s media servers, mark scheduled messages as due for your browser to send, send emails through your connected Gmail account, and process payment notifications.

Chrome Web Store Limited Use

Volleyora’s use of information received through the Chrome extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Data obtained through the extension is used only to provide and improve the prospect, campaign and inbox features you see in the product. It is not sold, not used for advertising, and not transferred to third parties except as needed to run the service, to comply with the law, or with your explicit consent. Humans do not read your data except with your consent, for security or abuse investigation, or where the law requires it. We do not use or transfer any information obtained through the Chrome extension to determine creditworthiness or for lending purposes.

Where any other part of this privacy policy describes a broader use or disclosure, including analytics, market research, business development, direct marketing, or sharing with agents or business partners, that broader use does not apply to information obtained through the Chrome extension. This section governs that information.

Consent and pairing

The extension does not capture, store or send any of your data until you have read the notice on its pairing screen, ticked the box to confirm you understand it, and entered the pairing key from your Settings page. The extension exchanges that key for a session token and does not keep the key itself. Your pairing key stays valid until you regenerate it or sign out. Signing out of the extension clears that key and ends your other sessions, including the web app and any other paired browsers. Sessions expire after 30 days in any case. You can have up to three extension sessions at once, and starting a fourth ends the oldest.

Requests the extension makes to our servers carry your device’s IP address, as any internet request does. We use it to apply rate limits and to protect your account. We also record it in our security log against account events, including signing in, failed sign-in attempts, registration, signing out, creating or revoking an extension session, and regenerating your pairing key, and it is stored with your session record. Our error monitoring is configured not to collect IP addresses.

Prospects you capture

When you capture prospects from a LinkedIn search page, the extension reads what is shown on that page and sends it to your Volleyora account: the person’s name, their LinkedIn profile URL and identifier, their profile photo link, whether LinkedIn shows a Premium badge, and how you are connected to them. From your connections list it sends the same details plus their headline. It does not send their company or location.

On a profile page, the extension creates a prospect only when an email address is extracted, either as a campaign email step or when you use the Extract Email button. In that case it opens the profile in your browser, opens LinkedIn’s own Contact Info panel, and reads the email address only if that person has published one there. It does not guess, derive or buy email addresses, and ordinary capture never collects an email address.

The extension also records the outcome of each campaign step it performs for you, such as whether an invitation was sent, so your campaign reporting is accurate.

Your LinkedIn conversations

After you pair the extension and give the consent described above, and while a LinkedIn tab is open in your browser, the extension automatically syncs your own LinkedIn conversations into your Volleyora account so that you can read, schedule and reply to them there. This includes participant names, their LinkedIn profile identifiers, profile and photo links and headlines, message text, who sent each message and when, and whether a conversation is unread. Syncing stops when you sign out of the extension.

Your LinkedIn session cookies

The extension reads two linkedin.com cookies inside your own browser, only so that requests to LinkedIn are made from your own logged-in session. It reads them; it never writes or deletes them. Cookie values are never sent to our servers or to anyone else, and we never ask for your LinkedIn password.

Data kept on your device

The extension stores your session token, your consent choice, your inbox sync bookmarks, cached conversation and campaign state, and, where a campaign step could not be reported to our server, the outcome of that step, in Chrome’s extension storage on your computer. Undelivered step outcomes are kept for at most seven days, so that a result can be delivered without repeating the action on LinkedIn. Campaign resume state is kept separately for each browser tab and is discarded when that tab closes.

Signing out

Signing out of the extension clears your session and the conversation data cached on your device, and asks our server to end your sessions. Your consent choice and any undelivered step outcomes stay on your device until they are used or expire. Signing out does not delete the prospects, conversations or campaigns already stored in your account, which you can delete in the app at any time.

Legitimate Reasons for Processing Your Personal Information

We only collect and use your personal information when we have a legitimate reason for doing so. In which instance, we only collect personal information that is reasonably necessary to provide our services to you.

Collection and Use of Information

We may collect personal information from you when you do any of the following on our website:

• Register for an account
• Sign up to receive updates from us via email or social media channels
• Use a mobile device or web browser to access our content
• Contact us via email, social media, or on any similar technologies
• When you mention us on social media

We may collect, hold, use, and disclose information for the following purposes, and personal information will not be further processed in a manner that is incompatible with these purposes:

• to provide you with our platform’s core features and services
• to contact and communicate with you
• for analytics, market research, and business development, including to operate and improve our website, associated applications, and associated social media platforms
• to send you marketing and promotional communications. To opt out of these communications, please see “Your rights and controlling your personal information”
• to enable you to access and use our website, associated applications, and associated social media platforms
• for internal record keeping and administrative purposes
• to comply with our legal obligations and resolve any disputes that we may have
• for security and fraud prevention, and to ensure that our sites and apps are safe, secure, and used in line with our terms of use
• for technical assessment, including to operate and improve our app, associated applications, and associated social media platforms

We may combine voluntarily provided and automatically collected personal information with general information or research data we receive from other trusted sources. For example, Our marketing and market research activities may uncover data and insights, which we may combine with information about how visitors use our site to improve our site and your experience on it.

Security of Your Personal Information

When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification.

Although we will do our best to protect the personal information you provide to us, we advise that no method of electronic transmission or storage is 100% secure and no one can guarantee absolute data security.

You are responsible for selecting any password and its overall security strength, ensuring the security of your own information within the bounds of our services. For example, ensuring any passwords associated with accessing your personal information and accounts are secure and confidential.

How Long We Keep Your Personal Information

We keep your personal information only for as long as we need to. This time period may depend on what we are using your information for, in accordance with this privacy policy. For example, if you have provided us with personal information as part of creating an account with us, we may retain this information for the duration your account exists on our system. If your personal information is no longer required for this purpose, we will delete it or make it anonymous by removing all details that identify you.

However, if necessary, we may retain your personal information for our compliance with a legal, accounting, or reporting obligation or for archiving purposes in the public interest, scientific, or historical research purposes or statistical purposes.

Children’s Privacy

We do not aim any of our products or services directly at children under the age of 13 and we do not knowingly collect personal information about children under 13.

Disclosure of Personal Information to Third Parties

We may disclose personal information to:

• a parent, subsidiary or affiliate of our company
• third-party service providers for the purpose of enabling them to provide their services, including (without limitation) IT service providers, data storage, hosting and server providers, analytics, error loggers, maintenance or problem-solving providers, marketing providers, professional advisors, and payment systems operators
• our employees, contractors, and/or related entities
• our existing or potential agents or business partners
• courts, tribunals, and regulatory authorities, in the event of a dispute about goods or services we have provided to you
• courts, tribunals, regulatory authorities, and law enforcement officers, as required by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise, or defend our legal rights
• third parties, including agents or sub-contractors who assist us in providing information, products, services, or direct marketing to you
• third parties to collect and process data
• an entity that buys, or to which we transfer all or substantially all of our assets and business

Third parties we currently use include:

• Google Analytics
• LinkedIn Insight Tag, Google Ads and Meta Pixel (website advertising, only with your consent)
• Mailgun (email delivery)
• Freemius (checkout and payments, when subscriptions open)
• LinkedIn (account connection)
• Google (optional Gmail sending)
• Cloudflare (security and content delivery)
• Sentry (error monitoring)
• Ploi (server management)
• Wordfence (website security)

International Transfers of Personal Information

The personal information we collect is stored and/or processed in Germany, Pakistan, United States of America (the) or where we or our partners, affiliates, and third-party providers maintain facilities.

The countries to which we store, process, or transfer your personal information may not have the same data protection laws as the country in which you initially provided the information. If we transfer your personal information to third parties in other countries: (i) we will perform those transfers in accordance with the requirements of applicable law; and (ii) we will protect the transferred personal information in accordance with this privacy policy.

Your Rights and Controlling Your Personal Information

Your choice: By providing personal information to us, you understand we will collect, hold, use, and disclose your personal information in accordance with this privacy policy. You do not have to provide personal information to us, however, if you do not, it may affect your use of our website or the products and/or services offered on or through it.

Information from third parties: If we receive personal information about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person’s consent to provide the personal information to us.

Marketing permission: If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by contacting us using the details below.

Access: You may request details of the personal information that we hold about you.

Correction: If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, please contact us using the details provided in this privacy policy. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading, or out of date.

Non-discrimination: We will not discriminate against you for exercising any of your rights over your personal information. Unless your personal information is required to provide you with a particular service or offer (for example providing user support), we will not deny you goods or services and/or charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties, or provide you with a different level or quality of goods or services.

Downloading of personal information: We provide a means for you to download the personal information you have shared through our site. Please contact us for more information.

Notification of data breaches: We will comply with laws applicable to us in respect of any data breach.

Complaints: If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. You also have the right to contact a regulatory body or data protection authority in relation to your complaint.

Opt out of communications: You may opt out of receiving communications from us, including marketing and promotional messages, at any time. To do so, use the opt-out facilities provided in the communication. For example, you can click the “unsubscribe” link included in any marketing email we send you, reply “STOP” to any SMS messages we send you, visit https://volleyora.com, or contact us at directly using the contact information provided in this privacy policy. In certain cases, we may request additional information to verify your identity before processing your opt-out request.

Please be aware that even if you opt out of communications, we may still contact you when necessary for non-promotional purposes, including, but not limited to, managing your account, responding to service inquiries, or providing important updates related to your use of our services.

Use of Cookies

We use “cookies” to collect information about you and your activity across our site. A cookie is a small piece of data that our website stores on your computer, and accesses each time you visit, so we can understand how you use our site. This helps us serve you content based on preferences you have specified.

Please refer to our Cookie Policy for more information.

Advertising and Measurement

We advertise our services online. With your consent, our website loads advertising and measurement tags from LinkedIn (the LinkedIn Insight Tag), Google (Google Ads) and Meta (the Meta Pixel). These tags set cookies and send information such as your IP address, browser and device details, the pages you visit on our website, and actions you take such as signing up, so that we can measure how our advertising performs and show our ads to people who have visited our website.

These tags load only after you agree to marketing cookies in our cookie banner. If you do not agree, they are not loaded at all. You can change or withdraw your consent at any time using the Cookie settings link in the footer of any page. LinkedIn, Google and Meta act as separate controllers of the information they receive through these tags and may combine it with information they already hold about you, as described in their own privacy policies and in our Cookie Policy.

We do not use information obtained through the Volleyora Chrome extension, your prospect records or your LinkedIn messages for advertising.

Business Transfers

If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include data, including your personal information, among the assets transferred to any parties who acquire us. Where information obtained through the Chrome extension is involved, we will obtain your explicit consent before it is transferred. You acknowledge that such transfers may occur, and that any parties who acquire us may, to the extent permitted by applicable law, continue to use your personal information according to this policy, which they will be required to assume as it is the basis for any ownership or use rights we have over such information.

Limits of Our Policy

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

Changes to This Policy

At our discretion, we may change our privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will post the changes here at the same link by which you are accessing this privacy policy.

If the changes are significant, or if required by applicable law, we will contact you (based on your selected preferences for communications from us) and all our registered users with the new details and links to the updated or changed policy.

If required by law, we will get your permission or give you the opportunity to opt in to or opt out of, as applicable, any new uses of your personal information.

Additional Disclosures for U.S. States Privacy Law Compliance.

The following section includes provisions that comply with the privacy laws of these states (California, Colorado, Delaware, Florida, Virginia, and Utah) and is applicable only to the residents of those states. Specific references to a particular state (in a heading or in the text) are only a reference to that state’s law and applies only to that state’s residents. Non-state specific language applies to all of the states listed above.

Do Not Track

Some browsers have a “Do Not Track” feature that lets you tell websites that you do not want to have your online activities tracked. At this time, we do not respond to browser “Do Not Track” signals.

We adhere to the standards outlined in this privacy policy, ensuring we collect and process personal information lawfully, fairly, transparently, and with legitimate, legal reasons for doing so.

Cookies and Pixels

At all times, you may decline cookies from our site if your browser permits. Most browsers allow you to activate settings on your browser to refuse the setting of all or some cookies. Accordingly, your ability to limit cookies is based only on your browser’s capabilities. Please refer to the Cookies section of this privacy policy for more information.

California Privacy Laws – CPPA

Under California Civil Code Section 1798.83, if you live in California and your business relationship with us is mainly for personal, family, or household purposes, you may ask us about the information we release to other organizations for their marketing purposes. In accordance with your right to non-discrimination, we may offer you certain financial incentives permitted by the California Consumer Privacy Act, and the California Privacy Rights Act (collectively, CCPA) that can result in different prices, rates, or quality levels for the goods or services we provide. Any CCPA-permitted financial incentive we offer will reasonably relate to the value of your personal information, and we will provide written terms that describe clearly the nature of such an offer. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

Under California Civil Code Section 1798.83, if you live in California and your business relationship with us is mainly for personal, family, or household purposes, you may ask us about the information we release to other organizations for their marketing purposes. To make such a request, please contact us using the details provided in this privacy policy with “Request for California privacy information” in the subject line. You may make this type of request once every calendar year. We will email you a list of categories of personal information we revealed to other organisations for their marketing purposes in the last calendar year, along with their names and addresses. Not all personal information shared in this way is covered by Section 1798.83 of the California Civil Code.

California Notice of Collection

In the past 12 months, we have collected the following categories of personal information enumerated in the CCPA:

• Identifiers, such as name, email address, phone number, account name, IP address, and an ID or number assigned to your account.
• Commercial information, such as products or services history and purchases.
• Internet activity, such as your interactions with our service.
• Audio or visual data, such as photos or videos you share with us or post on the service.
• Employment and education data, such as data you provide when you apply for a job with us.

For more information on information we collect, including the sources we receive information from, review the “Information We Collect” section. We collect and use these categories of personal information for the business purposes described in the “Collection and Use of Information” section, including to provide and manage our Service.

Sharing for Targeted Advertising

When you agree to marketing cookies, the advertising tags described in the Advertising and Measurement section share identifiers and information about your device and your visit with LinkedIn, Google and Meta so that we can measure and target our advertising. Under the laws of the states listed above, this can count as “sharing” or a “sale” of personal information for targeted advertising, even though we receive no money for it. We do not sell your personal information in any other way, and we never share the information we obtain through the Volleyora Chrome extension, your prospect records or your messages for advertising.

You can opt out at any time, and you do not need to give a reason: use the Cookie settings link in the footer of any page to withdraw your consent to marketing cookies. Because we ask for your agreement before these tags load, no sharing takes place unless you have opted in. We do not knowingly sell or share the personal information of anyone under 16.

Right to Know and Delete

You have rights to delete your personal information we collected and know certain information about our data practices in the preceding 12 months. In particular, you have the right to request the following from us:

• The categories of personal information we have collected about you;
• The categories of sources from which the personal information was collected;
• The categories of personal information about you we disclosed for a business purpose or sold;
• The categories of third parties to whom the personal information was disclosed for a business purpose or sold;
• The business or commercial purpose for collecting or selling the personal information; and
• The specific pieces of personal information we have collected about you.

To exercise any of these rights, please contact us using the details provided in this privacy policy.

Shine the Light

In addition to the rights discussed above, you have the right to request information from us regarding the manner in which we share certain personal information as defined by applicable statute with third parties and affiliates for their own direct marketing purposes.

To receive this information, send us a request using the contact details provided in this privacy policy. Requests must include “Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code.

Contact Us

For any questions or concerns regarding your privacy, you may contact us using the following details:

Muhammad Hamza Ali (Volleyora)
support@volleyora.com