Volve Technologies AS is a software company registered in Norway.
Company registration number: 931997335
Registered address: Holgerslystveien 10 J, 0280 Oslo, Norway
We build AI-powered tender intelligence software for the construction industry. This policy covers how we collect and use personal data where we act as data controller: website visitors, form submissions, demo requests, downloads, ROI calculator submissions, survey responses, marketing contacts, and support communications.
If you have any questions about how we handle your data, please contact us at: privacy@volvetech.com
Where customers upload tender documents, contracts, and related materials to the Volve platform, we act as a data processor on the customer's behalf. That relationship is governed by the customer agreement and our Data Processing Agreement (DPA), not by this policy. The controls, sub-processors, and retention periods that apply to customer content are set out in those agreements.
We collect standard website analytics data including pages visited, time on site, device type, and approximate location using Google Analytics. This helps us understand how people use our website and improve it.
When you submit a contact form, book a demo, download a checklist, complete our ROI calculator, or respond to a survey, we collect your name, email address, company name, and any other information you choose to provide. We use this to respond to your enquiry and, where you have indicated interest, to send you relevant content about Volve.
If you email us, speak to us on a call, or contact us through any other channel including support, we may retain records of that communication. Email communications are handled through Google Workspace.
Platform access, including the account data of users, is governed by the customer agreement and our Data Processing Agreement, made effective through the commercial terms with each customer. This policy does not cover it.
We process your personal data on the following legal grounds under the GDPR:
Legitimate interests - for website analytics, marketing to business contacts, and improving our services based on usage data.
Contract performance - for processing data necessary to manage our commercial relationships.
Consent - where we ask for your permission before sending marketing communications or setting non-essential cookies. You can withdraw consent at any time.
Legal obligation - where we are required to process data to comply with applicable law.
We do not sell your personal data to third parties.
We may share your data with trusted third-party service providers who help us operate our website and manage our commercial relationships. These include:
Google Analytics for website analytics
Google Forms for survey data collection
Google Workspace for email and communication records
HubSpot for managing customer and prospect relationships and email communications
Intercom for support communications
Framer for website hosting
All third-party providers are required to handle your data in accordance with applicable data protection law and our data processing agreements with them.
We may also share data where required by law, regulation, or legal process.
Note: the sub-processors that handle customer content uploaded to the Volve platform are listed in the customer DPA, not in this policy.
Volve is based in Norway, which is part of the European Economic Area (EEA). Some of our third-party service providers, including Google and HubSpot, are based in the United States. Where this is the case, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data.
We retain personal data for the following periods:
Website analytics data: 26 months
Marketing contact data (form submissions, demo requests, calculator and survey submissions): 2 years from last interaction, or until you unsubscribe
Support and communication records: 2 years from last interaction
Our website uses cookies and similar tracking technologies. We use a cookie consent tool that gives you control over which cookies are set when you visit our site.
We use cookies for the following purposes:
Essential cookies - necessary for the website to function. These are set automatically and cannot be disabled.
Analytics cookies - we use Google Analytics to understand how visitors use our site. These are only set with your consent.
Marketing cookies - we use these to track the effectiveness of our campaigns. These are only set with your consent.
You can manage your cookie preferences at any time through your browser settings or via the cookie consent tool on our website.
Under the GDPR you have the following rights in relation to your personal data:
Right to access - you can request a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete data.
Right to erasure - you can ask us to delete your personal data in certain circumstances.
Right to restrict processing - you can ask us to limit how we use your data in certain circumstances.
Right to data portability - you can ask us to provide your data in a structured, machine-readable format.
Right to object - you can object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent - where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at: privacy@volvetech.com
We will respond within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority. In Norway this is Datatilsynet (www.datatilsynet.no).
We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration. We are currently working toward ISO 27001 certification and will update this policy as certifications are achieved.
Our platform and website are not directed at children under the age of 16 and we do not knowingly collect personal data from children.
We may update this privacy policy from time to time. When we do, we will update the date at the top of this page. Where changes are material, we will notify registered users directly by email.