Privacy Policy

1. Introduction

Osifo Holdings LLC, doing business as Soledgic ("Soledgic," "we," "us," or "our"), respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website at soledgic.com, our APIs, dashboards, and all related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, organization name, and password when you create an account.
• Billing Information: Payment card details, billing address, and tax identification numbers. Payment card information is processed directly by Stripe and is not stored on our servers.
• Business Data: Financial records, transaction data, seller/creator information, ledger entries, and other data you input into the Service.
• Communications: Information you provide when contacting our support team or providing feedback.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, API calls made, timestamps, and interaction patterns.
• Device Information: Browser type, operating system, device type, and screen resolution.
• Network Information: IP address, approximate geographic location, and referring URLs.
• Cookies: Session cookies for authentication and preference cookies for your settings. We do not use third-party advertising cookies.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and manage your subscription
• Send transactional emails (account confirmations, billing receipts, security alerts)
• Provide customer support and respond to inquiries
• Monitor usage to enforce plan limits and detect abuse
• Improve the Service through aggregate analytics
• Comply with legal obligations and enforce our Terms of Service
• Protect against fraud and unauthorized access

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

4.1 Service Providers

We use third-party services to operate the platform:

• Stripe: Payment processing and subscription management. Stripe processes your payment information under their own Privacy Policy.
• Supabase: Database hosting and authentication infrastructure.
• Vercel: Application hosting and content delivery.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such transfer and any changes to this Privacy Policy.

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Secure authentication with session management
• Role-based access controls within organizations
• Regular security monitoring and audit logging
• Rate limiting and abuse prevention on all API endpoints

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your account information and business data for as long as your account is active. After account termination, we retain your data for 30 days to allow for reactivation, after which it may be permanently deleted. We may retain certain information longer as required by law (e.g., financial records, tax-related data).

Aggregate, anonymized data that cannot identify you may be retained indefinitely for analytics and service improvement.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Export: Export your data in a machine-readable format while your account is active.
• Objection: Object to certain processing of your personal information.

To exercise these rights, contact us at support@soledgic.com. We will respond within 30 days.

8. Cookies

We use essential cookies required for the Service to function, including authentication session cookies. These cookies are strictly necessary and cannot be disabled. We do not use cookies for advertising or cross-site tracking.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete it promptly.

10. International Data Transfers

Your information may be processed and stored in the United States, where our service providers operate. By using the Service, you consent to the transfer of your information to the United States. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

12. Contact

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Osifo Holdings LLC (d/b/a Soledgic)
Email: support@soledgic.com