Privacy Policy

We use your information to:

• Provide our services: Display dashboards, generate analytics, process correlations
• Process payments: Charge subscriptions, issue invoices, prevent fraud
• Improve our product: Analyze usage patterns, identify bugs, develop new features
• Communicate with you: Send service updates, respond to support requests
• Ensure security: Detect abuse, prevent unauthorized access, maintain audit logs
• Comply with law: Meet legal obligations, respond to lawful requests

We implement industry-leading security measures:

• Encryption at rest: AES-256 encryption for all stored data
• Encryption in transit: TLS 1.3 for all data transmission
• Infrastructure: Hosted on SOC 2 Type II compliant providers (Vercel, Railway, Supabase)
• Access controls: Role-based access, principle of least privilege
• Audit logging: Comprehensive logs of all data access and modifications
• Backups: Automated daily backups with point-in-time recovery
• Monitoring: 24/7 security monitoring and alerting

When you connect third-party services, we access only the data you authorize:

OAuth tokens are stored encrypted and can be revoked at any time from Settings → Integrations.

We share your data only in these limited circumstances:

• Service providers: Trusted partners who help us operate:
  • Stripe (payments)
  • Vercel (hosting)
  • Supabase (database)
  • Railway (infrastructure)
  • PostHog (analytics)
  • Sentry (error tracking)
  • Resend (email)
• Legal requirements: When required by law or to protect rights and safety
• Business transfers: In the event of a merger or acquisition (with notice)
• With your consent: When you explicitly authorize sharing

All service providers are contractually obligated to protect your data and use it only as directed by us. See our Data Processing Agreement for details.

Depending on your location, you have the following rights regarding your personal data:

California residents: You have additional rights under CCPA including the right to know what personal information is collected, sold, or disclosed, and the right to opt-out of the sale of personal information. We do not sell personal information.

We use cookies and similar technologies for:

• Essential cookies: Authentication, security, preferences
• Analytics cookies: Understanding usage patterns (PostHog)
• Error tracking: Identifying and fixing bugs (Sentry)

You can manage your cookie preferences at any time using our cookie consent banner or by visiting Cookie Settings.

For detailed information about each cookie we use, see our Cookie Policy.

We retain your data for as long as necessary to provide our services:

After account deletion, we retain anonymized aggregate data for analytics purposes.

We're based in the United States but serve customers globally. When we transfer data internationally, we ensure appropriate safeguards:

• EU-US Data Privacy Framework: We comply with the EU-US DPF for transfers from the EU
• Standard Contractual Clauses: We use EU-approved SCCs with all sub-processors
• Supplementary measures: Additional technical and organizational safeguards

For EU customers requiring data residency, contact us about our EU data center options.

Solinth is a business tool not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@solinth.com.

We may update this policy from time to time. For significant changes:

• We'll notify you via email at least 30 days in advance
• We'll display a prominent notice in the app
• We'll update the "Last updated" date at the top
• For material changes affecting your rights, we may require re-consent

Continued use after changes constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your rights:

For GDPR inquiries from EU residents, you may also contact your local data protection authority.