Privacy Policy
Version 2026-09-25-draft-2 · Published September 25, 2026
Initial draft · Legal review and business-policy confirmation pending before paid launch.
Permanent opt-out records
To honor outreach opt-outs across Soloish, we retain the normalized email address or organization domain, scope, reason/source, timestamp and audit identity needed to enforce suppression. These minimal records remain when ordinary contacts or histories are deleted, so later imports or providers cannot make the address contactable again. Suppression is not shared as a directory with other subscribers. An individual opt-out does not automatically suppress every employee; an explicit organization-wide request blocks that organization’s domain.
Scope and status
This draft describes Soloish’s current account, professional-network and prospecting features. Legal business: [LEGAL BUSINESS NAME]. Privacy contact: [PRIVACY EMAIL]. Support: [SUPPORT EMAIL]. These placeholders must be replaced before paid launch. This notice does not convert private mailbox data into public company intelligence.
Information we process
We process account email, authentication records, selected plan, consent evidence, business information, saved prospects, contacts, drafts, usage and operational records. Optional mailbox connections supply authorized contact and interaction metadata, such as identity, email/domain, direction, counts and first/last interaction times. The relationship layer does not require storing message bodies. Content you explicitly enter into other features, including drafts or recorded replies, is processed for those features.
Purposes
We use information to authenticate users, maintain private workspaces, deliver requested research and drafting, match relationships to companies, manage allowances, prevent abuse, support billing when enabled and diagnose errors. We do not treat acknowledging this notice as blanket consent to every form of processing. Applicable lawful bases and regional rights must be reviewed for the markets in which Soloish launches.
Private and shared intelligence
Mailbox-derived contacts, interactions and relationship history are private to the Soloish account. Canonical companies, public signals and permitted reusable public professional-contact information may be cached as shared intelligence. Private mailbox data must not be placed in that shared cache.
AI and other providers
OpenAI supports research, relevance and writing. Private-contact relevance uses minimal professional and relationship metadata, not message bodies, subjects, private notes or full email addresses. Drafting may process the recipient and content needed for a requested draft. Tavily supplies public research; Hunter finds and verifies professional contacts when needed. Google/Microsoft support optional mailbox access, Resend delivers account emails, Sites/Cloudflare host and store service data, and Stripe is intended to process subscription payments when enabled. Providers receive information needed for their functions. Provider contracts, processing locations and international-transfer safeguards require review before paid launch.
Mailbox permission and control
Mailbox authorization is optional and separate from Soloish account creation. Permissions are requested through the provider. Access and refresh tokens are encrypted server-side and are not displayed as saved secrets. Disconnect through Settings → Connections or revoke access with the provider. Existing imported history may remain until separately deleted under the applicable retention process.
Security and operations
Soloish uses authenticated access, account ownership checks and encrypted mailbox tokens. Admin operational reporting is intended to show health, counts and errors without private message content or contact identities. No system can guarantee absolute security.
Retention and your choices
Data is retained to provide the service and meet applicable operational or legal requirements. Exact retention periods, backup deletion timelines and the process for access, correction, export and erasure requests must be finalized and published before paid launch. Disconnecting a mailbox or signing out alone does not delete your workspace. Mandatory privacy rights remain applicable.
Cookies and payments
Essential session cookies support authentication; device preferences may store display choices. When Stripe payments are enabled, payment details are handled by Stripe and Soloish should retain only the billing identifiers and subscription information needed for account access. No advertising-cookie consent is inferred from account signup.
Updates
This notice has a version and publication date. Material changes will be communicated and, where required, renewed acknowledgment or consent requested. It has not been represented as attorney-approved.