Privacy Policy

Information We Collect

We may collect the following categories of information:

• Account information: your name, email address, password hash, profile photo, account membership, connected sign-in provider, and communication preferences.
• Billing information: subscription status, plan, Stripe customer and subscription identifiers, invoices, and transaction history. Stripe processes payment card details; we do not store complete card numbers.
• Registry information: encrypted private package registry credentials, credential digests, permitted packages, request timing, usage totals, and the paths requested from the registry.
• Support information: messages and other information you choose to provide when contacting us.
• Technical information: IP address, browser and device details, timestamps, requested pages, referring pages, diagnostic data, and security events.

Google Sign-In

Google sign-in is optional. If you choose it, Google provides your name, email address, profile photo, Google account identifier, and the authentication details needed to maintain the connection. We use this information only to identify you, create or sign in to your Solid Objects Pro account, secure the sign-in process, and display your connected account. Solid Objects Pro does not request access to Gmail, Google Drive, contacts, calendars, or other Google services.

How We Collect Information

We collect information directly from you when you register, purchase a subscription, manage an account, download a private package, or contact support. We also collect technical information automatically from your browser, our application, and infrastructure, and receive billing information from Stripe.

How We Use Information

We use personal information to:

• create and secure accounts and authenticate registry requests;
• process subscriptions, provision software access, and provide billing support;
• operate, monitor, troubleshoot, protect, and improve the website and private registry;
• respond to support requests and send transactional or service-related messages;
• send major product announcements to mailing-list subscribers;
• measure site usage when analytics consent has been granted;
• detect fraud, abuse, security incidents, and violations of our terms or software licences; and
• comply with legal, tax, accounting, and regulatory obligations.

Password signups can leave the mailing-list checkbox unchecked. New accounts created with GitHub or Google are automatically added to the major announcements mailing list. You may ask [email protected] to remove your subscription at any time.

Cookies and Analytics

We use essential cookies for authentication, security, account selection, and other features necessary to operate the service. We also use local browser storage to remember your analytics preference.

Google Analytics helps us understand aggregate site usage. Its script is not loaded and no analytics event is sent until you select "Accept" in the analytics notice. You can reject optional analytics or clear your browser storage and cookies at any time. Browser settings may also let you block cookies, although essential features may then stop working.

How We Disclose Information

We disclose information only as reasonably necessary to operate the service, complete a transaction, protect rights and safety, or comply with law. Recipients may include:

• Stripe, for payment processing, subscriptions, invoicing, tax features, and fraud prevention;
• Google Analytics, when you consent to optional analytics;
• hosting, data storage, email delivery, security, and professional service providers acting on our behalf;
• courts, regulators, law enforcement, or other parties when legally required or necessary to protect rights and safety; and
• a buyer or successor in connection with a merger, financing, acquisition, reorganization, or sale of assets.

We do not sell personal information.

Legal Bases

Where data protection law requires a legal basis, we process information as necessary to perform our contract with you, comply with legal obligations, pursue legitimate interests such as operating and securing the service, and act with your consent where applicable. You may withdraw consent for future processing at any time, without affecting prior lawful processing.

Retention and Security

We retain personal information only as long as reasonably necessary for the purposes described here, including providing an active account, maintaining transaction and licence records, resolving disputes, enforcing agreements, and meeting legal obligations. Retention periods vary by data type and obligation. When information is no longer required, we delete or de-identify it.

We use administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for protecting your password and registry credentials.

International Transfers

We and our service providers may process information in the United States and other countries. Where required, we use legally recognized safeguards for international transfers. Privacy laws in those countries may differ from the laws where you live.

Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal information, and to appeal a decision about a request. You may also have the right to lodge a complaint with a data protection authority.

To exercise a privacy right, email us using the address below. We may need to verify your identity before completing a request. We will not discriminate against you for exercising an applicable privacy right. Certain information may be retained or excluded where permitted by law, including transaction, security, fraud-prevention, and legal records.

Children's Privacy

The service is intended for adults and businesses. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it where appropriate.

Changes to This Policy

We may update this policy to reflect changes to the service, our practices, or applicable law. We will publish the current version here and update the effective date. If a change is material, we will provide additional notice when required by law.

Contact Us

Questions, complaints, and privacy requests may be sent to [email protected].