Privacy Policy

1. Introduction

SoloKit ("we," "us," or "our") operates the website located at solokit.store (the "Site"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our Site, create an account, purchase digital products, or otherwise interact with our services.

By accessing or using the Site, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Site.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: When you create an account, we collect your email address and password (or authentication credentials if you sign in via Google OAuth).
• Payment information: When you make a purchase, payment details (credit card number, billing address) are collected and processed directly by our payment processor, Stripe. We do not store your full credit card number on our servers.
• Communications: If you contact us via email, we collect your name, email address, and the content of your message.
• Newsletter: If you subscribe to our newsletter, we collect your email address.

2.2 Information Collected Automatically

• Usage data: We collect information about how you access and use the Site, including your IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits.
• Cookies and similar technologies: We use essential cookies to maintain your session and authentication state. We may also use analytics cookies to understand how visitors interact with the Site.
• Error tracking: We use Sentry to monitor and diagnose technical errors. Sentry may collect device information, browser metadata, and anonymized usage data when an error occurs.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Process transactions, deliver digital products, and send purchase confirmations
• Manage subscriptions, including billing, renewals, and cancellations
• Provide customer support and respond to your inquiries
• Send transactional emails (order confirmations, download links, password resets)
• Send marketing communications (only if you have opted in; you may unsubscribe at any time)
• Monitor, diagnose, and fix technical issues and errors
• Detect, prevent, and address fraud or other illegal activity
• Analyze usage patterns to improve the Site and our products
• Comply with legal obligations

4. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Performance of a contract: Processing necessary to fulfill your purchases and deliver digital products.
• Legitimate interests: Processing for fraud prevention, security, analytics, and improving our services, where these interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, such as subscribing to our newsletter. You may withdraw consent at any time.
• Legal obligation: Processing necessary to comply with applicable laws and regulations.

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only with the following categories of third parties, and only to the extent necessary to operate our services:

• Stripe: Payment processing. Stripe's privacy policy is available at stripe.com/privacy.
• Supabase: Database hosting and authentication. Supabase's privacy policy is available at supabase.com/privacy.
• Resend: Transactional and marketing email delivery.
• Sentry: Error monitoring and diagnostics.
• Vercel: Website hosting and content delivery.
• Legal compliance: We may disclose your information if required to do so by law, or in the good-faith belief that such action is necessary to comply with legal process, protect our rights, or ensure the safety of our users.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. We also retain information as necessary to comply with our legal obligations (e.g., tax and accounting records), resolve disputes, and enforce our agreements.

If you request deletion of your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL)
• Row-level security (RLS) on all database tables
• Secure, time-limited download tokens for digital products
• No storage of full payment card details on our servers (handled entirely by Stripe)

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Data portability: Request a machine-readable copy of your data.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw your consent at any time.

To exercise any of these rights, please contact us at contact@solokit.store. We will respond within 30 days.

9. Cookies

We use the following categories of cookies:

• Strictly necessary cookies: Required for authentication, session management, and security. These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with the Site. You may opt out of analytics cookies through your browser settings.

We do not use advertising or third-party tracking cookies.

10. International Data Transfers

Our service providers may process your data in countries other than your own. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

The Site is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Site after any changes constitutes acceptance of the revised policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

SoloKit
Email: contact@solokit.store