Privacy Policy
Last updated 15 September 2026.
Written for the NZ Privacy Act 2020 (13 Information Privacy Principles), with cross-border disclosure (AU storage + US inference) addressed. This Policy covers both website visitors and platform users.
1. Who we are
This Privacy Policy explains how SLATE VENTURES LTD, trading as Volt26 (NZBN 9429053681034), of 21F Gordon Rd, Wanaka 9305, New Zealand ("Volt26", "we", "us") handles personal information.
For B2B customers, where we process personal information on your behalf as a processor, our data processing terms govern and you (the customer) are the agency/controller responsible for that information. Those data processing terms are available to business customers on request.
Privacy Officer: Samantha Rae, privacy@volt26.ai.
2. The personal information we collect
- Account information: name, email, organisation, role, login credentials.
- Content you provide: documents, business data, leads/customers, and other content you upload to or generate in the platform (this may contain personal information about third parties, see §1 re your responsibilities as the agency for that data).
- Usage data: how you interact with the Services (events, feature usage, device/browser metadata), collected via our analytics tools.
- Billing information: billing contact and payment metadata. Card details are handled directly by our payment processor (Stripe); we do not store full card numbers.
- Communications: messages, support requests, and feedback (including in-app feedback, which may capture page metadata and console logs at the time of submission).
3. How we use it
- To provide, operate, secure, and improve the Services.
- To process your inputs through AI agents (see §6).
- To authenticate you and manage your account and billing.
- To respond to support and communicate service information.
- To meet legal obligations.
We collect personal information only for these lawful purposes connected to our functions, consistent with IPP 1–4 of the Privacy Act 2020.
4. Who we share it with (sub-processors)
We share personal information with the service providers ("sub-processors") that help us run the Services, listed and kept current at /subprocessors. Each is bound by obligations no less protective than ours, and we remain responsible for their handling. We do not sell personal information.
5. Cross-border storage and disclosure
Providing the Services involves storing and processing information outside New Zealand:
- Storage of your data on infrastructure located in Australia (AWS Sydney, via Supabase);
- AI inference processed by Anthropic in the United States;
- supporting services in the United States and Australia (see the sub-processor list).
Where we disclose personal information overseas, we take reasonable steps (including contractual protections) to ensure it is subject to comparable safeguards, consistent with IPP 12 of the Privacy Act 2020.
Australian users. Personal information belonging to users in Australia is handled consistently with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), including APP 8 where information is disclosed outside Australia.
6. AI processing
The Services use third-party large language models (Anthropic's Claude) to generate AI output from your inputs.
- Your inputs and outputs are not used to train our own or third-party models.
- Our LLM provider (Anthropic) processes inputs under commercial terms that prohibit training on your data. It keeps inputs and outputs for about 30 days for safety monitoring, and content its safety systems flag for up to 2 years. We have applied for a Zero Data Retention arrangement to shorten this.
- AI output may be inaccurate and is not professional advice, you remain responsible for reviewing it.
7. How long we keep it
We keep personal information for as long as your account is active and as needed to provide the Services, then delete or de-identify it within a reasonable period, unless we must keep it to meet legal obligations.
8. Security
We protect personal information with technical and organisational measures including encryption in transit and at rest, tenant isolation (row-level security), access controls, and audit logging of privileged actions. No system is perfectly secure; we maintain processes to detect and respond to incidents.
9. Your rights
Under the Privacy Act 2020 you may request access to (IPP 6) and correction of (IPP 7) your personal information. To do so, contact our Privacy Officer at privacy@volt26.ai. We will respond as required by law.
If you are in the United States. Whatever your state of residence, you may ask us to tell you what personal information we hold about you, to correct it, or to delete it, and we will not discriminate against you for asking. We do not sell or share personal information, and we do not use it for cross-context behavioural advertising. To exercise any of these rights, contact privacy@volt26.ai.
If you are in Australia. You may request access to and correction of your personal information under the Australian Privacy Principles by contacting privacy@volt26.ai, and you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).
10. Privacy breaches
If a privacy breach occurs that is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required by the Privacy Act 2020.
11. Cookies & analytics
We use cookies and similar technologies for authentication, preferences, and product analytics. See our Cookie Policy for details.
12. Children
The Services are for business users and not directed at anyone under 18.
13. Changes
We may update this Policy; material changes will be notified. The "Last updated" date reflects the current version.
14. Contact & complaints
Questions or complaints: privacy@volt26.ai. You may also complain to the Office of the Privacy Commissioner (privacy.org.nz).