Privacy
Privacy Policy
Who we are
This Privacy Policy explains how ThinkWell Labs, LLC ("we", "us"), a Wyoming limited liability company, collects and uses information when you use the Volavue website (volavue.fyi) and the structured decision-review service offered through it ("Service").
Privacy contact: volavue@volavue.fyi.
What we collect
- Intake answers. If you complete the intake form, the answers you enter (name, email and your responses to up to five structured questions about your decision) are stored in your browser using
sessionStorageand handed off to the booking page when you submit. They are not posted to any server we operate. When you complete a booking with Cal.com, they are saved as part of that booking record. - Scheduling information. When you book a session through our scheduling provider (Cal.com), your booking is created in Cal.com's systems. We access it there to prepare for and deliver your session.
- Payment information. When you pay for a session, payment is handled by Stripe. We do not see or store card details. We receive only the confirmation that a payment was made.
- Technical information. Our CDN/edge provider (Cloudflare) and static host (GitHub Pages) may log request information (IP address, user-agent, request URL, timestamp) for the purposes of serving the site, security and abuse prevention.
We do not use our own analytics that set cookies. We do not sell or share personal information for advertising purposes.
Why we use it
- To allow you to schedule and pay for a session.
- To prepare for and deliver the structured decision-review session you have booked.
- To provide and secure the website and the Service.
- To comply with our legal obligations.
Legal bases (EEA and UK visitors)
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
- Performance of a contract — to deliver the session you have booked.
- Legitimate interests — to operate, secure and improve the website and Service, balanced against your rights.
- Consent — for non-essential cookies set by embeds on the booking page, and for any optional communications.
- Legal obligation — where we are required to retain or disclose information by law.
Sharing — who else handles your information
We use the following providers ("processors") to deliver the Service. Each operates under its own contractual and security commitments.
- Cal.com (scheduling and intake content) — cal.com/privacy
- Stripe, Inc. (payment processing) — stripe.com/privacy
- Cloudflare, Inc. (DNS, CDN, security) — cloudflare.com/privacypolicy
- GitHub, Inc. (static site hosting via GitHub Pages) — GitHub privacy statement
International transfers
Our processors may transfer and process information outside your country of residence, including in the United States. Where required, transfers are protected by appropriate safeguards under applicable law (for example, Standard Contractual Clauses).
How long we keep it
We retain your intake answers and booking record only for as long as needed to prepare for and deliver your session and the resulting output, and then for a short period to address follow-up. After that, the booking and its notes are deleted from Cal.com. Payment records are retained by Stripe in line with their own terms and applicable tax/regulatory rules.
Default retention target: 60 days after session delivery.
Your rights
Depending on where you live, you may have the right to:
- Request access to the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your information.
- Object to or restrict certain processing.
- Withdraw consent (where we rely on consent).
- Lodge a complaint with your local supervisory authority.
California residents: the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives California residents specific rights to know, delete, correct and limit the use of personal information. We do not sell or share personal information for cross-context behavioural advertising.
To exercise any of these rights, email volavue@volavue.fyi.
Children
The Service is for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has used the Service, please contact us so we can delete the information.
Security
We hold as little information ourselves as possible. The website is a static site with no server-side database under our control: information you submit either stays in your browser or is recorded with one of our processors, each of whom maintains its own security programme. Access to our processor dashboards is protected with multi-factor authentication.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date above. For material changes, we will use reasonable means to notify you.
Contact
Privacy questions or requests: volavue@volavue.fyi.