Privacy Policy

1. What we collect

Account details: your name, email, phone and password (stored only as a one-way hash).

Business records your organization adds: clients, contacts, contracts, time, invoices, payments, expenses and documents.

Activity and security data: sign-ins, the IP address and device used, and an audit trail of changes. When you accept these documents or sign an agreement we record the version, time, IP address and device.

2. Why we use it

To provide the service: signing you in, showing your organization its records, sending the emails you trigger (invitations, sign-in codes, invoices) and keeping an audit trail.

To keep it secure: rate limiting, detecting abuse, and investigating incidents.

We don't sell personal data or use your organization's records for advertising.

3. Who can see it

People in your organization, according to their role. Client portal users see only their own client's records.

Service providers that host and run Solara for us (hosting, database, file storage, email delivery, error reporting), bound to use it only for that.

Authorities, where the law requires it.

4. How long we keep it

Business records stay while your organization uses Solara and for as long as it needs them afterwards. Audit and acceptance records are kept as evidence of what happened. Backups roll off on a fixed schedule.

5. Your choices

You can update your profile in Settings. To access, correct or delete personal data held for an organization, ask that organization's Owner, or contact us.

6. Contact

Privacy questions: legal@solara.app.