1. The Short Version

We don't sell your data. We don't track your behavior. We don't serve ads. Your documents are yours.

We only collect what's necessary to run the service and keep you logged in. That's it.

2. What We Collect

The data we collect depends on how you create your account:

Method Data Collected Why
Email Registration Username, email address, password (hashed) Account creation and authentication
Google OAuth First name, last name, email address Account creation and display name

Your password is never stored in plain text. It is securely hashed before being saved to our database. We cannot see or recover your password.

When using Google OAuth, we only request basic profile information. We do not access your Google Drive, contacts, calendar, or any other Google service data.

3. What We Don't Collect

To be completely clear about what we do not do:

We do not track your clicks, mouse movements, or browsing behavior.

We do not use analytics tools that profile your activity.

We do not read, scan, or analyze the contents of your documents.

We do not build advertising profiles or share data with advertisers.

We do not sell, rent, or trade your personal information to any third party.

4. Cookies

We use cookies strictly to keep you logged in and maintain your session. That's it.

Cookie Purpose Duration
Session cookie Keeps you logged in so you don't have to sign in every page load Until you log out or it expires
CSRF token Prevents cross-site request forgery attacks on forms Per session

We do not use tracking cookies, advertising cookies, or any third-party cookies. No cookie data is shared with or accessible to external services.

5. Your Documents & Content

Any documents, projects, and content you create on Solara Docs belong to you. We store them securely to provide the service, but we do not read, analyze, scan, or use your content for any purpose other than displaying it back to you and your authorized collaborators.

Your document data is never used for training AI models, generating analytics, or any other secondary purpose.

6. Payment Information

All payments are processed through Stripe. We do not store your credit card number, expiry date, or CVC on our servers. Stripe handles all payment data securely in compliance with PCI DSS standards.

The only payment-related information we store is your subscription tier and billing status so we know which features to enable for your account.

7. Data Storage & Security

Your data is stored on secure servers with encrypted connections (SSL/TLS). We take reasonable measures to protect your information from unauthorized access, alteration, or destruction.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Data Deletion

You can delete your account at any time from your account settings. When you delete your account:

Your personal information (username, email) is permanently deleted.

Your documents and projects are permanently deleted.

Your subscription is cancelled immediately.

All data is removed from our systems within 30 days.

9. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

Access — Request a copy of the personal data we hold about you.

Rectification — Request correction of inaccurate personal data.

Erasure — Request deletion of your personal data (right to be forgotten).

Portability — Request your data in a portable format.

Objection — Object to certain processing of your data.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Changes to This Policy

We may update this privacy policy from time to time. When we make significant changes, we will notify you via email or through a notice on the platform. Continued use of the service after changes are posted constitutes your acceptance of the updated policy.

11. Contact

If you have questions about this privacy policy or how we handle your data, reach us at [email protected].