SoloINC
Join the waitlist

Legal

Privacy Policy

DRAFT: attorney review required before publishing. This document is a first pass written for the product and the site as they are built, not legal advice, and not binding until a licensed attorney has reviewed it and it has been formally adopted. The placeholders in brackets are the vendor's to fill.

Effective date: [DATE]

[COMPANY NAME] ("we", "us", "our") makes SoloINC, a console one human uses to run a company of agents on a machine they own. This policy covers four things and says which of them touches your data at all: the website at soloinc.ai, the SoloINC software you install on your own Mac or Windows PC, the Desk and Team apps for Android, and the hosted copy of the Desk you may publish from the software. Questions go to [CONTACT EMAIL].

1. The short version

  • The website stores one thing about you if you ask it to: the email address you put on the waitlist. It sets no cookies and runs no third-party script.
  • The software runs on your machine and sends us nothing. Its telemetry is a local file. Its licence key is verified offline. Its once-a-day update check is a request for public release metadata and can be switched off.
  • The Android apps talk to your own edge account and to GitHub under your own credentials, never to us.
  • The hosted copy of the Desk is encrypted on your machine and stored in your own edge account. We do not operate it and cannot read it.
  • Payments for Pro are taken by Paddle as merchant of record. We never see card numbers.
  • We do not sell personal information and we do not run advertising.

2. The website (soloinc.ai)

The waitlist. If you submit the waitlist form, we store the email address you typed, the date and time, and which form on the site you used. That is the whole record. It is held in Cloudflare Workers KV as one key per address. We use it for one purpose: to write to you when SoloINC is ready for you to install. It is not a newsletter. To be removed, email [CONTACT EMAIL]; you do not need to give a reason.

What the waitlist does not store. We do not store your IP address. The form endpoint limits submissions per day by hashing your IP address together with the date and counting against that hash. The hash is never stored with your email, cannot be reversed to an address, and expires automatically after 24 hours.

Nothing else collected. The site has no account and no cookie. The only other thing it keeps is in your own browser: if you press the light or dark theme toggle, your choice is saved in that browser's local storage, on your device. Clearing your site data removes it.

[Attorney note: confirm whether a waitlist record limited to address, form and timestamp meets consent-record expectations under CAN-SPAM and under GDPR Article 7(1) for EU and UK subscribers.]

No third parties on the page. Fonts, images and scripts are served from our own domain. The pages make no request to any other host.

Hosting logs. The site is served by Cloudflare. [Attorney note: confirm whether Cloudflare's short-lived operational logs of page requests need to be described here.]

3. The software, on your machine

SoloINC is installed and run on a machine you own. We receive nothing from it. Specifically:

  • Telemetry is a local file on your machine. It is written for you to read; nothing in the product uploads it.
  • The update check is a request, once a day, for a public file describing the latest release. It carries what any web request carries and nothing about you or your company. It can be switched off, and when it is off the product makes no request to us at all.
  • The licence key for Pro is a signed statement verified on your machine. There is no activation server and no call home.
  • Your company's records, the ledgers, run records, memos and documents the agents write, live in git repositories on your machine. We have no access to them. If you connect GitHub, copies are pushed to repositories in your own GitHub account.
  • Your Claude Code seat, if you use one, is your own agreement with Anthropic. We never see its credential.
  • Other model providers you connect, whether local engines on your own hardware or metered providers behind the API switch, bill and process under their own terms, with credentials that stay on your machine.
  • Channels you connect to be reached, such as phone push, Telegram, Discord, Slack, email or text messages, carry the briefs and alerts you asked for under those services' own terms. Their credentials are stored on your machine.

The software does not set cookies, does not fingerprint the machine, and does not report usage.

4. The Android apps

Desk reads the encrypted copy of the Desk from your own edge account, opens it with your passphrase on the phone, and answers a card by labelling a GitHub issue in your own repository with a GitHub token you provide. Team signs in to GitHub and talks to nothing else. Neither app sends anything to us.

5. The hosted copy of the Desk

If you publish it, the copy is built on your machine, redacted of anything credential-shaped, encrypted, and uploaded to your own edge account. We do not operate it, we hold no key to it, and we receive nothing from it. Your hosting provider's own privacy policy governs what it processes for you.

6. Payments

Pro is sold through Paddle, the merchant of record. Paddle collects your payment details, billing address and tax information under its own privacy policy and terms; we never see card numbers. From Paddle we receive what we need to issue and support your key: the email address you gave at checkout, the order reference and the plan you bought. We keep that for as long as the key is valid and for the period tax and accounting law require after that.

7. Support email

If you write to [CONTACT EMAIL] or support@soloinc.ai, we keep the message and our reply for as long as needed to answer you and to keep a record of the conversation. Replies may be drafted with the help of software and are sent by a person.

8. Who processes data for us

  • Cloudflare, Inc. hosts the website and stores the waitlist in Workers KV. It processes that data on our behalf.
  • Paddle is the merchant of record for Pro and processes payment data for its own account as the seller of record.
  • The provider that hosts [CONTACT EMAIL] processes support mail on our behalf.

We do not share personal information with anyone else, do not sell it, and do not use it for advertising.

9. Retention

  • Waitlist entries: until we have written to say SoloINC is ready for you, plus a short period to handle bounces and replies, or until you ask to be removed, whichever is first.
  • Order records from Paddle: for the life of the key and the period tax and accounting law require.
  • Support mail: for the life of the conversation and a reasonable period after.

10. Your rights

Wherever you are, you can ask what we hold about you, ask for it to be corrected or deleted, or object to our processing it, by emailing [CONTACT EMAIL]. In practice the answer is usually one waitlist entry, one order record or one support conversation.

  • EU and UK residents (GDPR and UK GDPR): our legal basis for the waitlist is your consent, which you can withdraw at any time; for order records it is the performance of a contract and our legal obligations; for support mail it is our legitimate interest in answering you. You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your supervisory authority.
  • California residents (CCPA and CPRA): you have the right to know, to delete and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined there.

11. Children

The website, the software and the apps are for adults running a business. They are not directed at children and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email [CONTACT EMAIL] and we will delete it.

12. Security

The website is served over HTTPS with a strict content policy that permits no third-party script. The waitlist can be written by the website but not read back by it; reading it requires our own Cloudflare credentials. The software on your machine runs its agents inside the operating system's sandbox and holds its credentials in files only your user can read. No method of storage or transmission is completely secure, and we do not promise that any is.

13. Changes to this policy

We may update this policy. The effective date at the top is the date of the latest revision. A material change to what the website or the software collects will be announced on the site before it takes effect.

14. Contact

[COMPANY NAME], the maker of SoloINC. Questions about this policy or your data: [CONTACT EMAIL].

Other documents: Terms of service · support@soloinc.ai