SolaFlow ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our document management system and related services.
1. Information We Collect
1.1 Information You Provide
We collect information you provide directly to us, including:
- Account Information: Name, email address, company name, job title, phone number when you create an account
- Documents and Content: Files, documents, and data you upload to the platform
- Communications: Information you provide when contacting our support team
- Payment Information: Billing details for paid subscriptions (processed by secure third-party payment processors)
1.2 Information Collected Automatically
When you use our services, we automatically collect:
- Usage Data: Pages visited, features used, actions taken within the platform
- Device Information: Browser type, operating system, device identifiers
- Log Data: IP address, access times, referring URLs
- Cookies: Session and preference cookies (see Cookie Policy)
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send technical notices, updates, and security alerts
- Respond to your comments, questions, and support requests
- Monitor and analyze usage patterns and trends
- Detect, prevent, and address technical issues and fraud
- Comply with legal obligations
3. Document Data and Your Content
Your documents belong to you. We do not:
- Access your documents except as necessary to provide the service or as required by law
- Sell or share your document content with third parties
- Use your documents for advertising purposes
- Train AI models on your proprietary documents without explicit consent
For self-hosted deployments, your documents never leave your infrastructure.
4. Data Sharing and Disclosure
We may share your information in the following circumstances:
- Service Providers: With vendors who assist in providing our services (hosting, analytics, support)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly authorize sharing
5. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Regular security audits and penetration testing
- Access controls and authentication requirements
- Employee security training and background checks
- Incident response procedures
6. Data Retention
We retain your information for as long as your account is active or as needed to provide services. You can request deletion of your account and associated data at any time. Some information may be retained for legal or legitimate business purposes.
7. Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Portability: Receive your data in a portable format
- Objection: Object to certain processing activities
- Restriction: Request restriction of processing
To exercise these rights, contact us at privacy@solaflow365.com.
8. International Data Transfers
If you are located outside the region where our servers are located, your information may be transferred internationally. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses.
9. Children's Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the services after changes constitutes acceptance.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: privacy@solaflow365.com
- Address: SolaFlow, Beirut, Lebanon
- Contact Form: solaflow365.com/contact
12. GDPR Compliance (For EU Users)
For users in the European Economic Area, we process personal data as a data controller. Our legal bases for processing include:
- Contract performance (providing our services)
- Legitimate interests (improving our services, security)
- Legal obligations (compliance requirements)
- Consent (where specifically obtained)
You may contact our Data Protection Officer at dpo@solaflow365.com.