Privacy Notice — Solutions Engine

This Notice explains how Solutions Engine Limited, a company registered in England and Wales ("we", "us", "our"), collects, uses, and protects personal data when you use the Service. We act as the data controller for personal data we collect about you in connection with the Service.

1. Personal data we collect

Account data: name, email address, login credentials, organisation name.
Usage and telemetry: pages generated, features used, prompt inputs, AI outputs, device and browser identifiers, IP address, log timestamps.
Support and communications: messages you send to support, account-related correspondence.
Payment-related data: collected and processed by Paddle as Merchant of Record; we receive only summary information (plan, status, country, partial card details for invoices).

2. How we use your data

Provide the Service — create and maintain your account, run AI generation, store your work (legal basis: contract).
Security and fraud prevention — detect abuse, secure accounts, investigate incidents (legitimate interests).
Service improvement — analyse aggregated usage to improve features (legitimate interests). We do not train foundation models on your private inputs.
Customer support — respond to your enquiries (contract / legitimate interests).
Legal obligations — billing records, tax, regulatory requests (legal obligation).
Marketing — product updates by email; you can opt out at any time (consent / legitimate interests).

3. Who we share data with

Service providers: cloud hosting, database, email delivery, analytics, error monitoring.
AI model providers: prompt and context data are sent to language model providers to generate outputs; these providers act as our processors under enterprise agreements that prohibit training on our data.
Merchant of Record (Paddle): for sale of the product, subscription management, payments, tax compliance, and invoicing.
Professional advisers: legal and accounting where reasonably required.
Authorities: where required by law or to protect rights, property, or safety.

4. International transfers

Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or adequacy decisions.

5. Data retention

We keep personal data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting, and dispute-resolution requirements. We will delete or anonymise data when it is no longer needed.

6. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict processing, port your data, object to processing, and withdraw consent. You may also lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office). We respond to verified requests within one month.

7. Security

We use industry-standard technical and organisational measures, including encryption in transit, access controls, and least-privilege role separation.

8. Cookies

We use strictly necessary cookies for authentication and session management. Analytics cookies (if enabled in your region) are subject to consent.

9. Contact

For any privacy questions or requests, contact us via the support channel in the app.