Privacy Policy

Last updated: September 22, 2026

What we collect

Vollis is used by independent college admissions consultants to manage their students. On a consultant’s behalf we store the information they enter about their students, including names, email addresses, parent or guardian contact details, application materials, tasks, meeting notes, and documents.

How we use it

We use this information solely to provide the Vollis service to the consultant who entered it: organizing student records, sending reminders, and displaying progress. We do not sell personal information, and we do not use it for advertising.

Google account data

Connecting a Google account is optional. If you connect one, Vollis asks for these permissions and uses them only as described:

Google Drive, file-level access (drive.file). Vollis can only open, create, and update the specific documents you create through Vollis or choose with the Google picker. It cannot see, search, or access anything else in your Drive. We read a linked document’s text and comments so we can save draft history and show drafts side by side.
Google Calendar events (calendar.events). Vollis creates and updates the meeting events you schedule in Vollis, so they appear on your calendar.
Calendar list, read only (calendar.calendarlist.readonly). Vollis lists which calendars your account can see, so you can choose which ones appear in Vollis and which one it writes to. It does not read the contents of calendars you have not chosen.
Your email address (openid, email). Shown in Settings so you can tell which Google account is connected.

Vollis’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, we do not use it for advertising, and we do not use it to train generalized artificial intelligence models. No human reads your Google data except where you have asked us to help with a support request, or where we are required to by law.

Who we share Google user data with

We do not transfer or disclose your Google user data to third parties for purposes other than the ones described in this policy. We share it only with the following, and only to provide the features you use:

People on the same student record. Draft history saved from a linked Google Doc (its text, comments, and suggestions) is visible to the consultant who owns the student record, the student, and the editors or team members that consultant has given access to that student.
People you choose to invite. When you send a document for review, Vollis uses Google Drive to share that one file with the email address you enter. When you schedule a meeting, Google Calendar sends an invitation to the attendees you add.
Our infrastructure providers. Supabase, our database provider, stores the draft history of Google Docs you chose to link, along with your Google connection credentials, encrypted at rest. Vercel, our hosting provider, runs the Vollis servers that read and write it; Vercel does not store it. The data is always encrypted (HTTPS) as it moves between your browser, Vercel, and Supabase.
When required by law. We may disclose data if required to comply with a legal obligation.

We do not share Google user data with anyone else. We do not sell it or transfer it to data brokers or advertisers.

You can disconnect Google at any time in Vollis under Settings, or from your Google account permissions page. Disconnecting in Vollis deletes your stored Google credentials immediately and stops all further access. Draft history already saved from a linked Doc stays with the student’s record until you delete that document in Vollis, which deletes its draft history too, or until you ask us to delete it at developer@vollis.io.

Minors

Vollis stores information about high school students, who may be minors, on behalf of the consultant who works with them and their family. A consultant is responsible for having the appropriate permission from a student and their parent or guardian before entering that student’s information.

Student records and FERPA

Vollis is not a school and is not a recipient of education records from a school. The information in Vollis is provided by the consultant, the student, and their family. FERPA governs schools that receive federal funding, so it does not apply to Vollis directly. Where a consultant works with a school in a role that does place them under FERPA, the consultant remains responsible for meeting those obligations, and we handle the records they store here with the care described in this policy.

Storage and security

Data is stored with our infrastructure providers, encrypted in transit and at rest. Access is limited to the consultant who owns the record, the people that consultant has given access to, and Vollis staff for support and maintenance.

We use a small number of service providers to run Vollis: Supabase for the database, authentication, and file storage; Vercel for hosting; Resend for email; Sentry for error monitoring; and Google, where you have connected an account. They process data on our behalf and are not permitted to use it for their own purposes.

Retention and deletion

We retain information for as long as the consultant maintains their account. A consultant, student, or parent may request deletion of a student’s information by contacting us, and we will remove it within a reasonable period.

Changes to this policy

Vollis is early and still changing. If we make a material change to how we handle your information, we will update the date at the top of this page and tell account holders by email.

Contact

Questions about this policy can be sent to developer@vollis.io. Vollis LLC is a New York limited liability company.

What we collect

Google account data

Connecting a Google account is optional. If you connect one, Vollis asks for these permissions and uses them only as described:

Google Drive, file-level access (drive.file). Vollis can only open, create, and update the specific documents you create through Vollis or choose with the Google picker. It cannot see, search, or access anything else in your Drive. We read a linked document’s text and comments so we can save draft history and show drafts side by side.

Google Calendar events (calendar.events). Vollis creates and updates the meeting events you schedule in Vollis, so they appear on your calendar.

Calendar list, read only (calendar.calendarlist.readonly). Vollis lists which calendars your account can see, so you can choose which ones appear in Vollis and which one it writes to. It does not read the contents of calendars you have not chosen.

Your email address (openid, email). Shown in Settings so you can tell which Google account is connected.

Who we share Google user data with

People on the same student record. Draft history saved from a linked Google Doc (its text, comments, and suggestions) is visible to the consultant who owns the student record, the student, and the editors or team members that consultant has given access to that student.

People you choose to invite. When you send a document for review, Vollis uses Google Drive to share that one file with the email address you enter. When you schedule a meeting, Google Calendar sends an invitation to the attendees you add.

Our infrastructure providers. Supabase, our database provider, stores the draft history of Google Docs you chose to link, along with your Google connection credentials, encrypted at rest. Vercel, our hosting provider, runs the Vollis servers that read and write it; Vercel does not store it. The data is always encrypted (HTTPS) as it moves between your browser, Vercel, and Supabase.

When required by law. We may disclose data if required to comply with a legal obligation.

We do not share Google user data with anyone else. We do not sell it or transfer it to data brokers or advertisers.

Student records and FERPA

Storage and security