Privacy Policy

Who we are

Soltyx ("we", "us") is a content management and publishing platform at soltyx.app. It lets businesses manage their website content, bookings, courses, offers and social media publishing from one dashboard. For any privacy question, contact dmisi98@gmail.com.

What we collect

• Account data: your name, email address and a hashed password (or your Google account identifier if you sign in with Google).
• Content you create: blog posts, pages, images, videos, courses, offers, quizzes and social media posts you compose or schedule.
• Connected account data: when you connect a third-party account (Google Calendar, Stripe, Facebook, Instagram, X, TikTok), we store the account's name, handle, avatar and the access tokens the platform issues. We receive only what you authorise on the platform's own consent screen.
• Your customers' data: if you use bookings, payments, courses or forms, we store the details your customers submit (name, email, booking times, purchases) on your behalf.

How we use it

Solely to provide the service: authenticating you, storing and serving your content, publishing posts to social networks you have connected at the times you choose, processing bookings and payments, and sending transactional email (confirmations, receipts, password resets). We do not sell personal data, use it for advertising, or share it with third parties beyond the service providers listed below.

Social publishing specifically

When you connect a Facebook Page, Instagram account, X account or TikTok account, we store the OAuth tokens the platform issues - encrypted at rest (AES-256-GCM) - and use them for exactly one purpose: publishing the posts you compose, when you tell us to. We do not read your messages, followers, feeds or analytics. You can disconnect any account at any time from the dashboard (Social > Connections), which deletes its tokens immediately; you can also revoke Soltyx's access from the platform's own settings.

Service providers

We rely on a small set of processors to run the service: Vercel (hosting), Neon (database), Stripe (payments), Resend (transactional email), and the platforms you choose to connect (Google, Meta, X, TikTok). Each receives only the data needed for its function.

Retention and security

We keep data while your account is active. OAuth tokens and passwords are encrypted or hashed at rest; access to production systems is restricted; all traffic is TLS-encrypted. Disconnecting an integration deletes its tokens at once; published-post history (without tokens) is kept so your records remain intact.

Data deletion

You can delete your data as follows:

• A connected social account: dashboard > Social > Connections > Disconnect - tokens are deleted immediately.
• Individual content: delete it in the dashboard.
• Your entire account and all associated data: email dmisi98@gmail.com from your account's email address with the subject "Delete my account". We action deletion requests within 30 days and confirm when complete.

Your rights

Depending on where you live (including under UK and EU GDPR), you may have rights to access, correct, export, restrict or delete your personal data. Contact us at the address above and we will help.

Website statistics

We measure how our public pages (soltyx.app and its blog) are used with our own statistics feature. It covers every visitor and records the pages you view, how far you scroll, how long you are active on a page, clicks on buttons, the website you came from and any campaign tags in the address, your device type, browser, operating system and language setting, and your country and region as worked out from the connection.

We do not store your IP address. To count visits, we turn your IP address and browser details into an identifier that cannot be reversed and changes every day, so visits on different days cannot be linked. Nothing is stored on your device for this. We rely on our legitimate interest in measuring the reach of our website (Art. 6(1)(f) UK GDPR and EU GDPR). If you book a demo or subscribe through our pages, we link your visit to those details to see how you found us, on the same basis. You can object to either at any time by contacting us.

Individual events are deleted after 90 days; after that we keep only aggregated figures, such as visits per day.

Cookies

Signing in to the dashboard uses essential cookies: a session cookie to keep you signed in, and short-lived security cookies during account-connection flows. No advertising or cross-site tracking cookies.

Statistics cookies (only with your consent)

Our pages ask whether you allow cookies for statistics. If you choose "Accept", we store two first-party cookies: sk_consent (your choice) and sk_vid (a random identifier). They let us recognise returning visits and link visits on different days, for example to see which route led to a demo booking. Both expire after 13 months. We rely on your consent (regulation 6 PECR, § 25(1) TDDDG and Art. 6(1)(a) GDPR).

If you choose "Decline", we store only sk_consent with your choice, so we do not ask again on every visit; this is strictly necessary and needs no consent. You can withdraw your consent at any time with the "Cookie settings" link at the bottom of our pages, which deletes the sk_vid identifier. We log your choice as proof of consent (Art. 7(1) GDPR), without your IP address or browser details, and delete that record after 500 days.

Changes

If this policy changes materially we will update this page and the date above. Continued use of the service after a change means you accept the updated policy.