Privacy Policy
What personal data Soli.So processes, why, who receives it, how long it is kept, and your rights.
Last updated: 4 November 2026.
Who is responsible
Soli.So is the controller of the personal data described here; the company details are at the foot of this page. Write to info@soli.so about anything on it.
What we process, and why
Your account details — your email address, your password (stored only as a hash and never as the password itself) or a link to the sign-in provider you chose, your language and time zone, and the devices you asked us to remember. The content you create and upload and your conversation with the assistant, including audio you dictate or a video's soundtrack turned into text. The social accounts you connect and the results of what is published through them. Your subscription and usage records. If you connect an AI assistant of your own, a record of which one acted for you and when; you can disconnect it on your profile page. And ordinary technical records of errors and security events. We process them to provide the service you signed up for, to keep it secure and working, to improve it, to bill it, and to meet our legal obligations. An email address is needed to have an account; the rest you provide by using the service.
Legal bases
Performance of our contract with you (the service, publishing, billing); our legitimate interest in a secure, working and affordable service and in improving it (technical and usage records, rate limits, backups); your consent where something is optional and we ask for it, which you can withdraw at any time; and our legal obligations (invoices and accounting).
Who receives it
We do not sell personal data and we share none for advertising. Providers process it for us, only on our instructions, under the data-protection terms of their contracts with us, and only what their task needs:
- AI model providers
- A social-media publishing service
- Stripe — payments and invoicing; card details never reach this application, they stay with Stripe
- A cloud storage provider — uploads and encrypted backups
- A transactional email service
- A speech-to-text provider
- A web-search data provider
- Hosting and infrastructure providers
Some of them are established in the United States or elsewhere outside the European Economic Area; those transfers rest on the safeguards in the provider's terms — the European Commission's standard contractual clauses or an adequacy decision. Beyond that we disclose personal data only where the law requires it.
How long we keep it
For as long as you use the service, within these limits: content 90 days after its date; texts you give a brand to keep, and what the service learns of your way of working, while that brand exists; edit histories 12 months; statistics, usage and technical records 12 months; the in-app activity log 6 months; older conversation messages 14 days (the newest, and a short summary of earlier ones, stay while their chat exists); encrypted backups 14 days; an account whose email address is never confirmed 30 days; a brand unused for 12 months with no connected account is removed. Files and texts you give the service are kept for 90 days after they were last used, then deleted. You can ask the chat to forget any of them sooner. Deleting your account erases everything at once; invoices stay for the period accounting law requires, and posts already published remain on the networks.
Cookies
The public pages use no analytics, advertising or tracking. Signed in, the app sets only the cookies it needs to work — your session, a security token and, if you choose, a remembered device; the public site sets one cookie for your language choice.
Other people's data you enter
Names and handles you add for mentions are other people's data; add them only with a legitimate reason. We use them solely to write and resolve mentions, and they are deleted with the entry, the brand or your account.
Automated decisions
We make no decisions about you by automated means alone, and we build no profiles of you for advertising or for automated decisions. The AI drafts your content and nothing is published until you approve it. What you write is used only for your brand and to improve the service, and no model is trained on it.
Your rights
You can ask for access to your personal data, its rectification or erasure, restriction of or objection to its processing, and its portability, and you can withdraw consent at any time. Most of this you can do in the app yourself, including deleting your account from your profile page. For anything else write to info@soli.so; we answer within one month. You can also complain to the data-protection supervisory authority where you live or work.
Changes
The current version, with the date it last changed, is always on this page. If we ever want to use your personal data for a genuinely new purpose, we will tell you before we do.
Company details
The formal details of the company that acts as controller:
- Controller — Soliso MB, a small partnership (mažoji bendrija) registered in the Republic of Lithuania
- Registered address — Tiltų g. 19, LT-91249 Klaipėda, Lithuania
- Company registration number — 308006691
- Data-protection contact — info@soli.so
- Supervisory authority — the State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija), or the authority of the EU country you live in