Privacy

Who we are

Vulc is the trading name of ECOMFORWARD LLC, a Delaware limited liability company, operated by Maarten Klijnsma from Amsterdam, the Netherlands. This policy covers vulc.ai. The demo environment runs on a separate domain.

What we collect

When you sign up for the free agent library, we store your name, email, language, business type and monthly revenue range, plus individual download requests. Your access also covers future free releases. A secure, essential cookie remembers this browser for up to 180 days; it contains no contact details. Personal email links restore access on another browser, expire after seven days and work once. Completed website enquiries also receive library access using the details already submitted. Access emails and marketing emails are sent separately through Postmark. The signup notice explains the practical AI email sequence; we record its version and time and preserve existing unsubscribes and pauses. Repeat downloads and recovery do not restart nurture, and unsubscribing does not remove library access. Security request records expire after 30 days, download history after 365 days, and the minimal access profile is kept until you request its deletion. Marketing permission and suppression records are maintained separately. A rotating network-address hash limits abuse. Private form answers and access-link tokens are not sent to website analytics.

To improve our website and forms, we record page visits, section reach, link interactions, time-based engagement, device category and fixed error categories, as well as form views, question progress, eligibility exits, successful submissions and browser-observed booking confirmations in our own Admin using Supabase. Each attempt has a random identifier kept only in page memory. Campaign and ad names or IDs may accompany these events; contact details, form answers, advertising click IDs and calculator values do not. We suppress this measurement when Do Not Track or Global Privacy Control is enabled. Reports cover up to 90 days, and older records are removed as new activity is processed.

Visiting the site: our hosting provider, Vercel, keeps standard server logs to run and secure the site. We also use Vercel Analytics and Speed Insights, which give us aggregate page statistics without tracking you across the web.

When you submit the strategy-call form, we receive your name, email, phone number, business type, niche, role, average monthly revenue range, areas of interest and call intent, plus any optional website, challenge description and other area of interest. We use these details to check eligibility and prepare for your call. Submitting a request does not itself book a call. When you complete a form displaying the marketing notice, your email is added to our marketing sequence. You can unsubscribe from any marketing email.

When you submit a strategy-call or support-review request, we also receive the selected language, the page where your enquiry started, the page you submitted it from, and any campaign identifiers carried with the visit. We use these details to understand your request and prepare the right call. If you choose to attach your support-cost calculation, its inputs are saved with your enquiry. Using the calculator alone does not save that calculation to our sales records.

The form keeps your unfinished answers in memory while you switch between its Dutch and English versions. Refreshing the page clears that draft. Campaign identifiers may be kept for the browser session; the site suppresses this campaign storage when it detects Do Not Track or Global Privacy Control. Your private form answers are not stored in that campaign storage or sent to website analytics.

After your enquiry is saved, we pass an opaque reference to Cal.com alongside the booking name and email so we can link the appointment to the correct enquiry. The reference does not contain your phone number, profit range, answers or calculation. Booking details are linked to your enquiry in our private sales records.

Earlier requests may also contain company, monthly revenue range and currency, investment status, tools, timing and desired-outcome information provided through previous forms. Those historic records remain subject to this notice.

Booking a call: after you qualify, Cal.com processes your name, email and booking answers so we can arrange the session. Sending a request does not book a call.

What we do with it

We use your enquiry to assess how Vulc could help, respond to you and prepare for a possible call. Once you enter your name and a valid email, we save your contact details and subsequent valid answers as you go, even if you leave before submitting or do not qualify. We may contact you about that enquiry. Booking is available only when you report average monthly revenue of at least €30,000 and successfully submit the complete form. Business type, role, interests and call intent do not affect eligibility. Incomplete and non-qualified enquiries are kept separately from completed submissions and do not trigger a Meta conversion. You can correct your answers or contact us about the result. We rely on our legitimate interests in responding to business enquiries and preventing abuse. Forms display a marketing notice beneath the email field. Completing one of those forms adds your email to our marketing sequence, delivered through Postmark. Incomplete forms do not enter this sequence. We record the notice version and submission time; you can unsubscribe using the link in any marketing email or by contacting us.

Your enquiry is stored in our private sales records using Supabase, with Vercel hosting the website and Admin. We also use a pseudonymous identifier derived from your network address to limit repeated submissions. Your form answers are not sent to website analytics. Cal.com handles scheduling when you book, and Google Workspace handles our email correspondence.

Aggregate site statistics help us improve the site. We do not run third-party advertising on this site, and we do not sell or rent your information to anyone.

Optional marketing measurement

With your separate analytics permission, Microsoft Clarity records public-page interactions to create heatmaps and session recordings. It receives browser, device, network and page information, including public campaign tags in the URL, and uses analytics cookies. We mask form and calculator content and stop recording when you begin the enquiry form. We do not send Clarity your form answers, contact details or booking reference. You can decline or withdraw this permission through Marketing privacy in the footer without affecting the form. We store this choice for up to 180 days. Withdrawal stops future collection, but does not undo information already sent. Marked internal test browsers are excluded, apart from explicitly labelled diagnostic recordings.

With your permission, we use Meta Pixel and Conversions API on our customer-support and strategy-call pages to measure advertising performance. Meta may receive page information (including public campaign codes and advertising click IDs in the URL), cookie identifiers, your network address and browser/device information, and may associate this information with a Meta account. We do not include your form answers or support calculation in the events we send.

When an eligible enquiry is fully submitted and successfully saved, we also send Meta a conversion event if you have accepted marketing measurement. Only businesses reporting at least €30,000 average monthly revenue can complete this form, so that conversion signals that this requirement was met. We do not include your individual answers, revenue amount, contact details or booking reference in the event. Selecting an answer or clicking Submit without a confirmed save does not trigger it.

When Cal.com confirms a new booking, we send Meta a separate booked-call event if you accepted marketing measurement before submitting the enquiry. This includes bookings completed on the external Cal.com page within seven days of submission. Browser and server events share an opaque conversion identifier to prevent double-counting. Opening a calendar, choosing a time, rescheduling or cancelling does not create another conversion. We do not send appointment details, the private booking reference, your contact details or your answers. Because the calendar follows the eligible-enquiry form, this event also signals eligibility.

You can accept or decline marketing measurement and still use the website and enquiry form. Change your choice through “Marketing privacy” in the footer. Withdrawal stops future tracking through our integration, including pending server events linked to this browser; it does not undo information already sent. We store your choice and its date in this browser for up to 180 days, and private enquiry references for up to seven days so withdrawal also reaches our server. Server attribution data is cleared after delivery, withdrawal, terminal failure or seven days. If browser storage is unavailable, keep the page open to change the choice for that enquiry, or contact us. Meta’s own privacy and cookie policies explain its processing.

How long we keep it

We keep enquiry and booking records while we assess your request, follow up or work together. Retention also depends on any legal recordkeeping needs. Setting a request aside does not automatically delete it. You can ask us to delete your information using the contact below.

Your rights

Under the GDPR you can ask what we hold about you, have it corrected or deleted, or object to how it is used. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Write to privacy@vulc.ai and we will handle it.

Changes

If this policy changes, the date below changes with it.

Contact

Privacy questions and data requests: privacy@vulc.ai. Questions about how a build is secured: security@vulc.ai.