Privacy Policy

1. What We Collect

When you create an account: email address, name, profile picture, and organization details.

We also collect usage and analytics data (pages visited, session duration, referring URLs) to understand how the product is used.

When you connect third-party services, we collect only what's needed for each integration:

Google Services

Other Integrations

We also store OAuth tokens (encrypted at rest) to maintain your connections, and any files you upload (images, documents, videos — no executables or SVGs).

2. How We Use It

• Provide the service: send emails, create calendar events, sync sheets, manage contacts.
• Display your connected data inside Sollo.
• Authenticate your identity and maintain session security.
• Send account notifications and respond to support requests.
• Track email campaign performance (opens, clicks, unsubscribes) for your analytics.

3. Who We Share It With

We do not sell or rent your data. We share it only with the service providers below, and only the minimum necessary for each to function:

Each provider has their own privacy policy and security practices. We have data processing agreements in place where required.

We don't use user integration data to train, fine-tune, or improve any AI or machine learning models. When user data is processed by AI services, it is solely to respond to your real-time requests within Sollo.

4. Google API Services & Limited Use

Sollo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request access to data necessary for features you actively use.
• Google user data is never used for advertising purposes.
• We do not send Google user data to AI providers for the purpose of training, fine-tuning, or improving any AI or machine learning model. Any Google user data passed to AI services is processed solely to generate real-time responses to your requests within Sollo.
• Google user data is not shared with third parties except as described in this policy.
• We provide clear disclosure of how data is used before requesting access.

5. Data Retention & Deletion

We retain your data for as long as your account is active. To delete data:

• Disconnect integrations from the Integrations page — this immediately deletes associated tokens and connection data, including any stored IMAP or database credentials.
• Email privacy@sollo.so to request full account deletion.

Contact records imported before disconnection are retained until you request account deletion. Logs are kept for up to 90 days for security purposes.

6. Security

• All data encrypted in transit via TLS/SSL.
• Sensitive data (OAuth tokens, IMAP credentials, database credentials) encrypted at rest.
• Credentials and tokens are never logged or exposed in API responses.
• Access to user data restricted to authorized personnel.

7. Your Rights

You may at any time: access, correct, or delete your personal data; disconnect any integration; export your data; or revoke Google access via your Google Account settings.

If you are located in the European Economic Area, UK, or California, you may have additional rights under applicable law (including GDPR and CCPA), such as the right to object to or restrict certain processing.

Contact us at privacy@sollo.so to exercise any of these rights.

8. Changes & Contact

We may update this policy and will post the new version here with an updated date.

For questions: privacy@sollo.so or sollo.so