Your work stays tied to your workspace.

SoloStack processes account information, workspace membership, Brand Kit samples and preferences, generated drafts, registered media assets, scheduled-post data, credit usage, and subscription state. Connected-platform identifiers and tokens are processed only when you initiate a social connection.

Data is used to authenticate users, isolate workspaces, apply Brand Kit context to requested generations, save outputs, process lightweight media workflows, validate schedules, operate configured publishing connections, account for usage credits, and manage subscriptions.

When you request generation, the brief, selected format, specialist instructions, and—when enabled—relevant Brand Kit context are sent to the configured AI provider. Do not submit confidential material you are not authorized to process.

Stripe handles hosted checkout and billing-portal interactions. Supabase provides authentication, database, and storage infrastructure. Social providers receive data only when needed for an authorized connection or publishing action. Each provider also applies its own privacy terms.

Workspace records are protected through authenticated access and row-level security. Sensitive account fields use additional database privileges. Social tokens remain server-side, OAuth state is single-use, and billing events require signed webhooks. No security certification is claimed.

Workspace content remains available while the account and underlying service are active. Requests to remove account data may be subject to billing, fraud-prevention, legal, backup, and provider-retention requirements. Product-specific deletion controls will expand as the service matures.

This policy may change as SoloStack adds providers or product capabilities. Material revisions should be reflected by a new effective date on this page.