Volley photographs the inside of your home and the things you own. We built it knowing that, so this policy is short, plain, and honest — what we collect, where it goes, and how to make all of it disappear.
Volley runs on a small set of services, each doing one job:
That's the whole list. We don't sell your data, we don't show ads, and nobody browses your closet.
Volley lets you connect with people you already know, by invite only. Connecting is not sharing, and we keep those two things far apart on purpose.
Connecting happens when you send someone an invite link and she accepts, or she sends you one and you do. From then on, each of you can see the other's first name, once she's added one, and how many pieces are in her closet — a number, not the pieces. Nothing else crosses between two connected accounts.
Sharing a piece is a switch you flip — one piece at a time, one person at a time, off until you turn it on. A piece you share shows that friend its clean cutout image and its basic tags (its name, category, and color). It never shows her the original photo you took, what it cost, or when you've worn it. You can't share with someone you aren't connected to — the database refuses, not just the app — and nothing is ever suggested or nudged toward sharing. Unsharing takes effect the moment you flip the switch back.
Lending is a second switch on top of sharing — a shared piece can't be borrowed unless you also mark it lendable. A friend asks; you say yes or no; you always get the last word. Only the two of you can see a borrow, from request to home again. Another friend browsing may see that a piece is out, but never with whom. At each step — the ask, the yes or no, the return — we send the person waiting a short email, so nothing is ever silently lost.
Disconnecting removes the link and everything that rode on it in the same stroke — your first name and your count leave her side, every share between you is revoked, and any open borrow request is cancelled, all at once.
There is no public feed and no browsing anyone's wardrobe uninvited. You can only be connected to someone holding an invite you created, or whose invite you accepted — and an invite is single-use and expires after a week.
Two of those services touch your actual photos. Here is exactly what they do with them — and, just as important, what they don't.
Photoroom lifts your piece off its background. Photos sent through its API aren't saved on Photoroom's servers, and its terms don't allow your images to be used to train a model.
Anthropic (Claude) looks at one photo at a time and suggests tags — is this a blazer, what color, which season. By default, Anthropic does not use anything sent through its API to train its models, and deletes those inputs and outputs from its systems within 30 days. Nothing you shoot becomes training data for an AI.
The AI only ever suggests. You confirm or fix every tag, and your correction is the final word — so your closet fills with your judgment, not a machine's guess.
Your photos reach these two services only to be processed in the moment, only for your closet. They're never used to build anyone else's, and never sold or handed on beyond the one job they do here.
Volley photographs private spaces, so security isn't an afterthought — it's built into how the data is stored and reached.
Besides your camera, Volley gives you two more ways to add a piece — and both take only the garment, nothing else.
add+…@onvolley.com) that works only for your account. Forward an order
email to it and Claude reads that email once, to pull out the garments —
their name, image, price, and brand. Everything else — card numbers, your address,
order and tracking numbers, who sent it, the rest of the message — is
discarded in the same pass and never stored. We keep the garment
lines; we do not keep the email. Only your account's address can forward — a receipt
forwarded by anyone else is refused.Both doors only ever create pieces you own — Volley is your closet, never a wishlist — and you confirm every draft before it lands.
For as long as you have an account. Delete a photo and it's gone from storage, not just hidden. Waitlist emails are kept only until launch-note duty is done, then removed.
In the app: settings → delete my account. This is a real deletion, and it cascades — your photos and their cleaned-up copies are removed from storage, your closet records are erased, your friend connections are removed from both sides, any invites you sent or accepted are deleted, every share you granted or received disappears with them, your borrow history goes too, and your analytics identity is deleted. What remains is a line of anonymous accounting (that an account once spent two cents of processing) with nothing connecting it to you.
Write to [email protected]. A person reads it.