Solo ("we," "our," or "the Service") is a business management platform for solopreneurs, freelancers, and independent workers. This Privacy Policy explains how we collect, use, store, and protect your information.
1. Information We Collect
1.1 Information You Provide
- Account information (email address, name)
- Business information (business name, type, settings)
- Client and project data you enter into the Service
- Invoice and financial information
- Communications with our support team
1.2 Information Collected Automatically
- Usage data and analytics (pages visited, features used)
- Device information and browser type
- IP address
- Cookies and similar technologies for session management
2. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Process transactions and send related information
- Send administrative messages and service updates
- Respond to your comments and questions
- Analyze usage to improve the Service
- Power AI features with your business data (with your consent)
3. Data Storage and Security
Your data is stored securely on Supabase infrastructure (hosted on AWS) with encryption at rest and in transit. We implement the following security measures:
- TLS 1.2+ encryption for all data transmission
- AES-256 encryption for data at rest
- Access controls and authentication via Supabase Auth
- Regular security audits
4. Data Sharing
We do not sell your personal information. We may share data with:
- Infrastructure providers who assist in operating the Service (Supabase for database hosting, Stripe for payment processing, Vercel for application hosting) — only as necessary to provide the Service
- AI providers for processing AI features (via OpenRouter) — your business data may be sent to AI models to generate insights, but is not used to train those models
- Legal authorities when required by law, subpoena, or court order
4A. Third-Party Integrations
When you connect third-party services to Solo, we share limited data with those services to enable the integration:
Payment Processing
- Stripe: Invoice amounts, client email, payment details (via Stripe-hosted forms)
Accounting
- QuickBooks (Intuit): Invoice data, line items, client names, payment records
Scheduling
- Google Calendar: Event titles, times, attendee emails
- Calendly: Booking events, invitee names and emails
Productivity
- Notion: Page content you explicitly link, project names/statuses (when sync enabled)
E-Commerce
- Etsy: Order data, buyer names (read-only — Solo never modifies your shop)
For each integration:
- You authorize via the provider's OAuth consent screen
- Solo only accesses data within your authorized scopes
- You can disconnect at any time from Settings > Integrations
- OAuth credentials are encrypted at rest using AES-256-GCM
- Disconnecting revokes Solo's access; previously synced data remains unless you delete it
5. AI Features and Your Data
Our AI features analyze your business data to provide insights and assistance. Your data is processed securely and is not used to train AI models. AI interactions are logged for quality assurance and troubleshooting purposes. AI-generated content should be reviewed before acting on it.
6. Your Rights and Data Controls
You have the right to:
- Access your personal data stored in Solo
- Correct inaccurate data
- Delete your account and associated data
- Export your data
- Opt out of marketing communications
6.1 Account Deletion
Upon account deletion, all your data — including business data and AI interaction logs — will be permanently deleted within 30 days, except where we are required to retain it for legal or regulatory purposes.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide services. Upon account deletion, we delete your data within 30 days, except where retention is required by law.
8. Cookies
We use cookies and similar technologies to maintain sessions, remember preferences, and analyze usage. You can control cookies through your browser settings.
9. Children's Privacy
The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16.
10. International Data Transfers
Your data may be transferred to and processed in the United States or other countries where our infrastructure providers operate. We ensure appropriate safeguards are in place for such transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through the Service. The "Effective date" at the top of this page indicates when the policy was last revised.
12. Contact Us
If you have questions about this Privacy Policy or your data, contact us at privacy@soloit.app