← Back

This Privacy Policy explains what data Solunce collects, how it's used, and how it's protected. By using Solunce, you agree to the practices described here.

1. What we collect

When you create an account, we collect:

• Email address — used to identify your account and send transactional communications (e.g. verification, Plus key delivery)
• Password — stored as a salted hash (we never store or transmit plaintext passwords)
• Usage data — request counts and model usage, tied to your account for quota enforcement
• Chat history — messages you send are stored server-side to enable cross-device sync. You can delete individual chats or all history at any time.
• API keys — stored as hashed values; only the prefix is shown in the dashboard
• Plus purchase record — if you purchase Solunce Plus via Payhip, we store confirmation that your account is a Plus account. Payment processing (card details, billing info) is handled entirely by Payhip and is subject to their privacy policy. We do not receive or store payment card information.

We do not sell, share, or rent your personal data to third parties for marketing or advertising purposes.

2. Uploaded content

If you attach images, video frames, or text files to a message, that content is transmitted to our AI inference infrastructure to generate a response. Uploaded files are not stored persistently — they are processed in-memory for the duration of the request and discarded. They are not used to train models or reviewed by staff.

3. How we use your data

• To authenticate your account and maintain sessions
• To track usage and enforce per-account limits
• To sync your chat history across devices
• To deliver your Plus license key and verify Plus status
• To respond to support requests
• To detect and prevent abuse of the Service

4. Infrastructure & third parties

Solunce is built on Cloudflare's infrastructure. The following Cloudflare services are in use:

• Cloudflare Workers — serverless API layer; processes all requests including authentication and AI routing. Cloudflare may log request metadata (IP addresses, timestamps) in accordance with their own privacy policy. Solunce does not access or store these logs.
• Cloudflare D1 — database storing accounts, sessions, chats, and usage records
• Cloudflare KV — key-value store for rate limiting and session state
• Cloudflare Pages — static site hosting

AI inference runs on Solunce's self-hosted server. Prompts and conversation context are sent to this server to generate responses and are not retained after the request completes.

Payments are processed by Payhip. We do not have access to your payment card or billing details. Review Payhip's privacy policy for details on how they handle transaction data.

5. Cookies & local storage

Solunce uses localStorage in your browser to store your session token, UI preferences, and cached data. No third-party tracking cookies are used. No advertising or analytics scripts are loaded on the platform.

6. Data retention

Your data is retained as long as your account exists. When you delete your account from the Settings page, all associated data — chats, API keys, usage logs, and account details — is permanently and irreversibly deleted. We do not keep backups of deleted accounts.

7. Your rights

Regardless of where you are located, you have the right to:

• Access — request a copy of the data we hold about you
• Deletion — delete your account and all associated data at any time from Settings
• Correction — update your email address or password from Settings
• Portability — contact us to request an export of your chat history
• Objection / restriction — contact us if you believe your data is being processed unlawfully

EU/EEA residents: We process your data on the basis of contractual necessity (providing the Service) and legitimate interests (preventing abuse). You may lodge a complaint with your local data protection authority if you believe your rights have been violated.

California residents (CCPA): You have the right to know what personal information we collect, the right to delete it, and the right not to be discriminated against for exercising these rights. We do not sell personal information.

8. Security

All data is transmitted over HTTPS/TLS. Passwords are hashed using industry-standard algorithms. API keys are stored as one-way hashes. Despite these measures, no system is 100% secure — use a strong, unique password and keep your API keys private.

9. Children's privacy

Solunce is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top will reflect any changes. Continued use of Solunce after changes constitutes acceptance. Material changes will be communicated via the in-app banner.

---

Questions or data requests? Contact us on Discord or email contact@solunce.com