Privacy policy

Last updated: November 11, 2026

1. Introduction

This Privacy Policy is provided by the owner of Solara AI (hereinafter: "we," "us," or "our") and describes:

• What information we collect and why
• How we use and protect your information
• Your rights and choices regarding your data
• How we strive to comply with privacy laws including the Protection of Privacy Law, 1981 (Israel), GDPR, CCPA, and other applicable regulations

Consent and Use: By using the Application, you declare that you have read, understood, and agree to this Privacy Policy. If you choose to continue using the Application's services, it shall be deemed as your full consent to and acceptance of this Privacy Policy. If you do not agree or do not wish for the described information to be collected, please refrain from using the Application.

No Legal Obligation to Provide Information: There is no legal obligation on you to provide information to us. However, providing certain information is a condition for receiving the full range of services in the Application. If you do not wish to provide such information, you may be prevented from using some of the Application's services.

Note: This Privacy Policy uses the masculine form for convenience only and addresses all genders.

2. Information We Collect

2.1 Information You Provide Directly

While using the Application's services, we collect information that you voluntarily provide, some of which may personally identify you:

• Account Information: Name, email address, phone number, password (unless you sign in with Google), workspace name, and how you heard about us if you choose to say
• Business Information: Business name, industry, what sets your business apart, business description, website, business contact details, brand colors and logo
• Social Media Accounts:Your account and page names, a copy of their pictures, and the access the platform grants us, when you connect Facebook, Instagram, LinkedIn or TikTok, your channel's name, ID and a copy of its picture when you connect YouTube (see Section 2.7), and your profile's or account's ID, name and a copy of its picture when you connect Threads or Pinterest (see Sections 2.8 and 2.9)
• Content and Inputs: Videos, images, audio and text you upload, prompts and scripts you write, and brand information
• Recordings You Make: Video and audio you record of yourself in the app, and the finished posts we generate from it
• Payment Information: Billing address, payment method information (processed securely by our payment processors)
• Communications: Correspondence with us, support requests, feedback, information related to offers and services that interest you

2.2 Information Collected Automatically

When you use the Application, we automatically collect:

• Device Information: IP address, browser type and version, device type and model, operating system, unique device identifiers
• Usage Data: Pages viewed, features used, time spent on pages, navigation paths, click patterns, the manner in which you use the Application, and the link or campaign that brought you to our website
• Session Recordings: Recordings of how you use the Application on a desktop computer (not on a phone) and of visits to our website; on our website, only with your cookie consent where the law requires it
• Performance Data: Error logs, crash reports, API response times, system diagnostics
• Location Data: Approximate location based on IP address

2.3 Information from Third-Party Sources

We collect relevant information from third-party platforms and services, and use it for the purpose of learning and improving the service, except the data we receive from the social platforms you connect (see Section 3.3):

• Social Media Platforms: When you connect your accounts (Facebook, Instagram, LinkedIn, TikTok), we receive profile information, page data, and analytics such as follower counts
• Threads and Pinterest:When you connect them, we receive only what Sections 2.8 and 2.9 describe: your profile's or account's details, your Pinterest boards when you pick one, and the stats of the Threads posts we published for you
• Authentication Providers: Your name, email address and profile picture from Google, if you sign in with Google
• Public Sources: Publicly available business information

2.4 AI-Generated and Processed Content

We collect and process:

• Input prompts and instructions you provide to our AI systems
• Content generated by our AI based on your inputs (text, images, videos, music)
• Editing and refinement actions you take on generated content
• Performance feedback on AI outputs

2.5 Cookies and Tracking Technologies

We use cookies, pixels, and similar tracking technologies to collect information. See Section 10 for detailed information about cookies.

2.6 AI Agents and API Keys

You can let an AI agent, such as ChatGPT, Claude or Cursor, or your own software use the Application for your workspace. You connect an AI agent by signing in to Solara and choosing Allow on the page that names it, or you create an API key in the Application. Either way, it acts as you, in your workspace only, and only with the permissions you gave it:

• Read: Your workspace's videos and how they are coming along, including their edits and what is said in them, and how many of your plan's videos are left
• Edit: Upload footage, and make and change videos. Its changes are saved in the video's history under the name of the AI agent or key
• Export: Export and download videos
• Ask to post: See which social accounts you connected and ask to post a video. It cannot post anything itself: a post it asks for goes out only after a signed-in member of your workspace approves it in the Application

It cannot see your password, your payment details or any other workspace.

What We Store:

• For an AI agent you connect: a record of your consent (the app's name as you saw it, the permissions you allowed, when you connected it, when it was last used and when it was disconnected), the app's own registration details (its name, its web addresses and what it publishes about itself), and a history of the connection (connected, disconnected and similar events). Its sign-in codes and refresh tokens are stored only as one-way hashes, never as the tokens themselves
• For an API key: its name, its last four characters, its permissions, when it was created, last used and deleted, and a one-way hash of the key. The key itself is shown to you once and never stored
• An activity log of what each AI agent or key changed, and of what we refused it: which one, which action, which video, the result and, for an AI agent, its name, the tool it used and a one-way hash of the tool's inputs. It never holds the inputs themselves, a secret or the content of a request. The activity log does not record reads; we keep when each AI agent or key was last used
• Each request to post: the video and its version, the platforms, the time, the caption, who asked and who approved or cancelled it
• The counts that enforce our limits: requests a minute and new videos a day for each AI agent or key, and each workspace's daily use of AI agent work
• The answers to some requests for 48 hours, so the same request sent twice never does the work twice
• Each tool call, without its inputs, in our service logs and product analytics (PostHog): which tool, the AI agent's name, whether it worked and how long it took, and for an export, which video

Your AI Agent's Provider: Your conversation with an AI agent, and what our tools send back to it (for example a video's status, its edit and what is said in it, the names of your connected social accounts, or a link to download a video), is processed by the AI agent's provider, such as OpenAI, Anthropic or Cursor, under that provider's own privacy policy and terms. We do not control how the provider uses or keeps that information. An AI agent you connect is a service you choose, not one of our service providers in Section 4.1.

How to Stop It: In the Application, open the menu under your name and choose Connected apps to disconnect an AI agent, or API keys to delete a key. It stops working at once. Removing Solara from the AI agent alone may leave the connection in place, so disconnect it in the Application to be sure. Deleting your account deletes your API keys and your connections. How long we keep these records is in Section 6.1.

2.7 YouTube

Solara uses YouTube API Services. When you connect a YouTube channel, we use them to upload the videos you choose to publish to that channel, and to show you the channel's name and picture and whether YouTube has finished processing each upload. We also post the first comment you write under a Short when you ask us to, and show you how the Shorts we published for you are doing (see First Comment and Post Stats below). We read nothing else from YouTube: no other videos or comments, and no stats for any video we did not publish for you.

Google's Privacy Policy: YouTube is a Google service. How Google handles your information is described in the Google Privacy Policy. By using Solara's YouTube features you also agree to be bound by the YouTube Terms of Service (see Section 8.5 of our Terms of Service).

What We Access and Store:

• Your channel's ID and name, so you can see which channel your videos post to, and a copy of the channel's picture, kept in our storage so we can show it. We copy the picture when you connect and again about once a day, and delete the copy when you disconnect YouTube (see Deletion below)
• The access and refresh tokens Google gives us, encrypted, and the permissions you granted: to upload videos (youtube.upload) and to read your channel's name and picture and your uploads' status and their view, like and comment counts (youtube.readonly), and, only if you allow them, to post a first comment (youtube.force-ssl) and to read YouTube Analytics (yt-analytics.readonly)
• For each video the Application uploads for you: its YouTube video ID and its upload status, with the title, description, who can watch it (public, unlisted or private) and the made-for-kids answer you chose in the Application
• For each Short the Application published for you: the stats described under Post Stats below

How We Use It: Only to post the videos you choose to your channel, at the time you choose, with the first comment you ask for, and to show you the channel and how each upload is doing. We never upload a video or post a comment you did not choose to publish.

First Comment: When you ask us to, we post the first comment you wrote under the Short we published for you, as your channel. Where Solara offers first comments on YouTube, we ask Google for this permission (youtube.force-ssl) when you connect YouTube, on the same Google screen as the others, or, for a channel you connected before, when you first allow comments on YouTube. We use it only to post that first comment. We read, edit and delete no other comment, and we never rate videos.

Post Stats: We read the view, like and comment counts of the Shorts we published for you (youtube.readonly), and, if you allow it, their watch time, average view duration and subscribers gained (YouTube Analytics, yt-analytics.readonly), only to show them to you in Solara's calendar. We refresh each of them at least every 30 days and delete any we could not refresh in 30 days, and we delete them all when you disconnect YouTube or revoke our access (within 7 days of a revocation). They are not shared, not sold, and not used for advertising or to train AI models.

No Selling or Sharing: We do not sell the YouTube data we store or share it with any other company, and we do not use it for advertising or to train AI models. It is kept on our hosting provider's servers (AWS, see Section 4.1). An AI agent you connect with permission to read (Section 2.6) can see the name of the channel you connected. The Application shows no advertisements (Section 11).

How to Disconnect: In the Application, open Social accounts and choose Disconnect on YouTube. This revokes our access at Google and deletes what we stored from YouTube. You can also revoke the Application's access at any time in your Google Account's security settings, at https://security.google.com/settings/security/permissions.

Deletion: When you disconnect YouTube or revoke our access, we delete the YouTube data we stored within 7 days. Disconnecting in the Application deletes it at once. We renew our access with Google every hour or so, and when Google refuses to renew it, because you revoked our access or it expired, we delete that channel's data about a day later. Deleting your account deletes it at once too. Deleting this data does not delete videos already posted to your channel: to remove those, delete them on YouTube.

Cookies: When you connect YouTube, the Application sets one essential cookie in your browser, for up to 15 minutes, so that Google's answer returns to the browser that started the connection. It holds no YouTube data. Our other cookies are described in Section 10 and our Cookies policy.

Questions: Send questions or complaints about how we handle your YouTube data to contact@solaraai.com (see Section 13).

2.8 Threads

When you connect a Threads profile, we use Meta's Threads API to publish the posts you schedule in the Application to that profile, at the time you choose, with the replies you write under them, and to show you the profile's username and picture and how the posts we published for you are doing. We read nothing else from Threads: no other posts, replies or profiles, and no stats for any post we did not publish for you.

Meta's Privacy Policy: Threads is a Meta service. How Meta handles your information is described in the Meta Privacy Policy and the Threads Supplemental Privacy Policy.

The Permissions We Ask For:

• threads_basic: To read your profile's ID, username and picture, and to address what we publish to your profile
• threads_content_publish: To publish the text, photos, videos and carousels you schedule in the Application
• threads_manage_replies: To post the replies you write, as a thread under a post we published for you
• threads_manage_insights: To read the stats of the posts we published for you (see Post Stats below)

What We Store:

• Your profile's ID and username, so you can see which profile your posts go to, and a copy of its picture, kept in our storage so we can show it. We copy the picture when you connect and again about once a day
• The access token Threads gives us, encrypted, and the permissions above. It lasts 60 days, and we renew it while your profile stays connected
• For each post and reply the Application publishes for you: the ID Threads gives it, with what you wrote and chose for it in the Application
• For each post the Application published for you: the stats described under Post Stats below

How We Use It: Only to publish what you schedule, at the time you choose, and to show you the connected profile and how each post is doing. We never publish a post or a reply you did not choose to publish.

Replies: When you add replies to a post, we post them as your profile, under the post we published for you: the first answers that post, and each next one the reply before it. We never reply to anyone else's post or reply, and we do not read, hide or delete replies.

Post Stats: We read the views, likes, replies, reposts, quotes and shares of each post we published for you (threads_manage_insights), for that post alone, only to show them to you and the members of your workspace in Solara's calendar. We read them about an hour, a day, 3, 7 and 28 days after the post went out, then every 25 days, and when you open the post. We refresh each post's stats at least every 30 days and delete any we could not refresh in 30 days. We read no stats for your profile as a whole, and none for anyone else's posts.

No Selling or Sharing: We do not sell the Threads data we store or share it with any other company, and we do not use it for advertising or to train AI models. It is kept on our hosting provider's servers (AWS, see Section 4.1). An AI agent you connect with permission to read (Section 2.6) can see the username of the profile you connected and the posts on your calendar; it cannot post to Threads. The Application shows no advertisements (Section 11).

How to Disconnect: In the Application, open Social accounts and choose Disconnect on Threads. You can also remove Solara in the Threads app, under Settings, Account, Website permissions.

Deletion: When you disconnect Threads in the Application, we delete at once the token, the profile's details and the copy of its picture, and the records of the posts and replies we published to it, with their stats. When you remove Solara in Threads, Meta tells us and we delete the same data at once, in every workspace that connected that profile. If you ask Meta to have us delete your data, we delete it at once too, and Meta gives you a confirmation code and a link to a page of ours that says when it was deleted. Deleting this data does not delete posts already published to your profile: to remove those, delete them on Threads.

Questions: Send questions or complaints about how we handle your Threads data to contact@solaraai.com (see Section 13).

2.9 Pinterest

When you connect a Pinterest account, we use the Pinterest API to save the photos and videos you choose to publish as Pins on the board you pick, at the time you choose, and to show you the account's name and picture and your boards, so you can pick one. We read nothing else from Pinterest: not your other Pins, your followers or anyone else's content.

Pinterest's Privacy Policy: How Pinterest handles your information is described in Pinterest's Privacy Policy.

The Permissions We Ask For:

• user_accounts:read: To read your account's ID, username, business name and picture
• boards:read: To list your boards when you pick one for a Pin
• boards:write: To make a new, public board when you ask us to, with the name you type
• pins:read and pins:write: To save your Pins to the board you picked, and to check that a video you upload has finished processing

What We Store:

• Your account's ID and name (its business name, or else its username), so you can see which account your Pins go to, and a copy of its picture, kept in our storage so we can show it. We copy the picture when you connect and again about once a day
• The access and refresh tokens Pinterest gives us, encrypted, and the permissions you granted
• For each Pin the Application saves for you: the Pin's ID, the board you chose, and the title, description, link and alt text you wrote for it in the Application

We read your boards from Pinterest each time you pick one and do not store the list.

How We Use It: Only to save the Pins you choose to publish, at the time you choose, on the board you pick, and to show you the connected account. We never save a Pin or make a board you did not ask for.

No Selling or Sharing: We do not sell the Pinterest data we store or share it with any other company, and we do not use it for advertising or to train AI models. It is kept on our hosting provider's servers (AWS, see Section 4.1). An AI agent you connect with permission to read (Section 2.6) can see the name of the account you connected and the posts on your calendar; it cannot post to Pinterest. The Application shows no advertisements (Section 11).

How to Disconnect: In the Application, open Social accounts and choose Disconnect on Pinterest. You can also remove Solara's access on Pinterest, under Settings, Security, where Pinterest lists the apps connected to your account (see Pinterest's help on connected apps).

Deletion: When you disconnect Pinterest in the Application, we delete at once the tokens, the account's details and the copy of its picture. The record of each Pin already saved stays in that post's history in the Application, no longer linked to the account. If you remove Solara's access on Pinterest instead, we learn of it the next time we use or renew our access (we renew it at least once a month), and 28 days later we delete the account's details, its tokens, the copy of its picture and the records of its Pins, unless you connect it again first. Deleting this data does not delete Pins already saved: to remove those, delete them on Pinterest.

Questions: Send questions or complaints about how we handle your Pinterest data to contact@solaraai.com (see Section 13).

3. Legal Basis and Purposes for Data Collection

3.1 Legal Basis

We will process your personal data, including sensitive data, only when we have a legal basis to do so:

• Consent: You have given your explicit consent to the processing
• Contract Performance: Processing is necessary to provide the services you requested
• Legitimate Interest: Processing is necessary for our legitimate business interests
• Legal Obligation: Processing is required by law

3.2 Purposes of Data Use

We use the collected information only in accordance with this Privacy Policy or as permitted by applicable law, for the following purposes:

1. Provide and maintain the Application
Enable use of different services, create and manage your account, process transactions, deliver requested features, publish content you approve to your connected social media accounts
Legal Basis: Contract Performance / Consent

2. AI Services and Content Generation
Process your inputs through AI models and generate marketing content (text, images, video) for you
Legal Basis: Contract Performance / Consent

3. Improve and Optimize Services
Analyze usage patterns, develop new features, enhance AI models (using anonymized and aggregated data only), tailor marketing strategies, analyze statistical data, optimize service content. None of this uses the data we receive from the social platforms you connect (see Section 3.3)
Legal Basis: Legitimate Interest / Consent

4. Communications
Send service emails (for example, that your edit is ready), respond to inquiries, provide customer support, communicate with you about your account
Legal Basis: Contract Performance / Legitimate Interest

5. Marketing and Promotional Communications
Send tips and reminders by email (for example, a reminder to make your next video), which you can stop at any time. Send newsletters, promotional emails, SMS, WhatsApp messages about services, products, marketing and promotional information (only with your explicit consent)
Legal Basis: Legitimate Interest / Consent where the law requires it

6. Personalization and Advertising
Measure and target our own advertising on Meta through the Meta Pixel on our website. The Application itself shows no advertisements
Legal Basis: Consent / Legitimate Interest

7. Security and Fraud Prevention
Detect and prevent abuse, security threats, fraudulent activity, enforce rules and procedures
Legal Basis: Legitimate Interest / Legal Obligation

8. Legal Compliance and Auditing
Comply with laws, regulations, legal processes, audit purposes, enforce our Terms of Service
Legal Basis: Legal Obligation

9. Analytics and Research
Understand how users interact with the Application, measure effectiveness, conduct research
Legal Basis: Legitimate Interest / Consent

3.3 AI Model Training and Improvement

We do not use your content to train AI models. Your uploads, recordings, and the outputs we generate for you are used only to deliver the Application to you, and are not used to train our own models.

Data from Connected Social Platforms: We never use the data we receive from the social platforms you connect (Instagram, Facebook, TikTok, YouTube, X, Threads, LinkedIn, Pinterest and Google Business) to train or improve AI models or for advertising, and we never sell it.

Important: Your data is processed through third-party AI services to generate content for you, but we do not share your data with external AI providers for their model training purposes. The AI services we use process your data solely to provide you with the requested outputs.

3.4 Automated Decision-Making & Profiling

We use profiling to personalize content, features, and advertising. Where we make decisions using solely automated processing that produce legal or similarly significant effects, you have the right to request human review, to express your point of view, and to contest the decision. You may also object to profiling used for direct marketing at any time.

4. How We Share Your Information

Important: We do not sell your personal information to third parties.

However, we may share your information in the following circumstances:

4.1 Service Providers and Third-Party Platforms

The Application uses third-party services and platforms, and therefore information processed within the Application will be shared with these providers:

Cloud Infrastructure and Data Processing:

• AWS (Amazon Web Services): cloud hosting
• Cloudflare: Network security and bot protection (see Section 6.3)
• Vercel: Hosting for our website

AI Services:

• Anthropic (Claude): Plans your edit and writes scripts, titles and suggestions from your words. On our website, it also writes the results of our free AI generators (captions, hashtags, titles, hooks and scripts) from the description you type; we don't keep that description or the results
• OpenAI: Takes over those tasks only when Claude is unavailable
• ElevenLabs: Turns your speech into text for captions, and makes background music
• Google (Gemini): Checks that visuals fit your video, and generates pictures
• xAI, fal: Generate pictures and short clips for your video from text descriptions
• Pexels: Stock photos and videos, found with search words drawn from your video

Payment Processing:

• Stripe: Primary payment processor for subscriptions and billing

Marketing and Analytics:

• PostHog: Product analytics, error reports, surveys, and session recordings (in the Application on a desktop computer, not on a phone, and on our website). On our website, only with your cookie consent where the law requires it
• META (Facebook/Instagram): The Meta Pixel on our website, which measures our advertising. Where the law requires consent, it loads only after you accept cookies
• Rewardful: Our affiliate program on our website, which credits the partner who referred you. Where the law requires consent, it loads only after you accept cookies

Communication Services:

• UserJot: Our support chat and support inbox, whose AI assistant answers from our help content and hands a conversation to our team when needed, and our feedback board, roadmap and changelog. When you use them in the Application, UserJot receives your name, email address and account ID, your plan, the page you are on, and what you write to us
• SendGrid: Sends our service emails, such as the email that your edit is ready and sign-in codes
• Twilio: Sends sign-in codes and other text messages (SMS)
• PostHog: Sends our tips and reminders emails, timed by your activity in the Application, and keeps your choice to stop them

Social Media Integration:

• When you connect social media accounts (Facebook, Instagram, LinkedIn, TikTok), we share data with these platforms to publish the content you approve
• When you connect a YouTube channel, we send YouTube the videos you choose to publish, with the title, description and settings you chose, and the first comment you wrote when you add one, through YouTube API Services (see Section 2.7)
• When you connect a Threads profile, we send Meta Platforms, Inc. the posts you schedule, with the replies you write, to publish them to that profile (see Section 2.8)
• When you connect a Pinterest account, we send Pinterest, Inc. the photos and videos you choose, with the title, description, link and alt text you wrote, to save them as Pins on the board you picked, and the name of any board you ask us to make (see Section 2.9)

Other Services:

• Marketing Professionals: We may transfer information to professionals and/or platforms in the field of marketing and advertising for processing and optimization purposes

These service providers have access only to the information necessary to perform their functions and are obligated to protect your information.

4.2 Business Transfers

In the event of a merger, acquisition, sale of assets, or transfer of business ownership, your personal information may be transferred to a third party as part of the transaction, provided that the acquiring entity assumes the obligations of this Privacy Policy.

4.3 Legal Requirements and Protection

We may disclose your information in the following cases:

• If you carry out actions in the Application that are contrary to the law
• If a court order is issued instructing the disclosure of your details or information about you to a third party
• In the event of a legal dispute between you and us requiring the disclosure of your details
• To comply with legal obligations, court orders, or government requests
• To enforce our Terms of Service or other agreements
• To protect the rights, property, or safety of Solara AI, our users, or the public
• To detect, prevent, or address fraud, security, or technical issues

4.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

4.5 Aggregated and Statistical Information

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for research, marketing, or other purposes. We may provide statistical information regarding user activity on the Application and in newsletters to third parties, but we will not share your personal information with advertisers, apart from what the Meta Pixel on our website sends to Meta (see Section 11).

5. Data Storage and International Transfers

5.1 Data Storage

The data collected, as well as any content you upload, share, or create in the Application, will be stored by us on hosting servers. These databases may be stored on servers located in your country or abroad. By using the Application, you declare that you consent to your information being stored on these servers.

5.2 International Data Transfers

When transferring personal data outside your region (e.g., from the EEA/UK to Israel/US), we use appropriate safeguards, including EU Standard Contractual Clauses and the UK IDTA/Addendum, and we perform transfer impact assessments. Copies of the relevant clauses are available on request.

5.3 Data Transfer Safeguards

When we transfer personal data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses: EU-approved Standard Contractual Clauses (SCCs) for transfers from the EU/EEA
• Adequacy Decisions: Relying on adequacy decisions by the European Commission
• Data Processing Agreements: Binding agreements with service providers requiring appropriate data protection

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide the Application and fulfill the purposes described in this Privacy Policy
• Comply with legal obligations (e.g., tax, accounting, legal requirements)
• Resolve disputes and enforce our agreements
• Protect against fraudulent, deceptive, or illegal activity

6.1 Retention Periods

• Account Data: Retained while your account is active and for up to 90 days after account closure
• User Content: Retained according to your subscription plan; you may export your data before account cancellation
• Payment Information: Retained for as long as necessary for tax and legal compliance (typically 7 years)
• Usage Logs: Retained for up to 12 months for security and analytics purposes
• Support Communications: Retained for up to 3 years for quality assurance and dispute resolution
• AI Agents and API Keys (Section 2.6):Deleted automatically, in a daily pass, at these ages: sign-in codes after a day; refresh tokens a day after they expire; a connection's sessions a day after they end (at most 90 days after sign-in) or 30 days after you disconnect it; the consent record 90 days after you disconnect it; the connection history, the activity log and each workspace's daily use of assistant work after 90 days; requests to post after 30 days; the answers to repeated requests after 48 hours; and an app's registration after 24 hours if nobody connected it. The counts for requests a minute and new videos a day hold only the current minute and day. An API key's record (never the key itself) stays after you delete the key, so the activity log can still name it, until the person who created it or the workspace is deleted

6.2 Deletion

After the retention period, we will either permanently delete your personal information from our systems or anonymize the data so it can no longer be associated with you. You can delete your account yourself in the Application's Settings, or request earlier deletion of your data by contacting us (see Section 13).

We recommend you export any data you wish to retain before terminating your account. After termination, we may permanently delete your data from our systems and cannot guarantee data recovery.

6.3 Bot Protection

To tell people from automated bots when you upload, we use Cloudflare Turnstile. It runs in the background and shows you nothing. It processes limited technical signals, such as your IP address and browser details, only to detect and block bots. Cloudflare's handling of this data is described in the Cloudflare Turnstile Privacy Addendum.

7. Information Security

We implement updated industry-standard information security systems and procedures to protect your information, including:

• Encryption: Data in transit is encrypted using TLS/SSL; sensitive data at rest is encrypted
• Access Controls: Strict access controls and authentication for our systems and databases
• Security Monitoring: Continuous monitoring for suspicious activity and security threats
• Regular Audits: Periodic security assessments and vulnerability testing
• Employee Training: Security awareness training for all employees
• Incident Response: Procedures for detecting, responding to, and recovering from security incidents

7.1 Your Responsibility

You are responsible for:

• Maintaining the confidentiality of your account credentials
• Using a strong, unique password
• Enabling two-factor authentication if available
• Notifying us immediately of any unauthorized access to your account
• Ensuring you have rights to any voice or likeness data you upload

7.2 No Absolute Security Guarantee

While these security systems and procedures reduce the risk of unauthorized intrusions, they do not provide absolute security. Therefore, we cannot guarantee that the Application and its services will be completely immune to unauthorized access to the stored information. No system is completely secure, and you use the Application at your own risk. By using the Application, you acknowledge and accept this risk.

8. Electronic Direct Marketing and User Contact

8.1 The Emails We Send

We send two kinds of email:

• Service Emails: Messages about your account and your videos, such as the email that your edit is ready and sign-in codes. They are part of the service, so you can't opt out of them while you have an account. SendGrid sends them for us.
• Tips and Reminders: Marketing emails that help you get more from the Application, such as a reminder to make your next video or an occasional product tip. You agree to them when you sign up, and you can stop them at any time. PostHog sends them for us.

By Signing Up: By signing up, you agree to receive emails about your videos and occasional product tips. You can unsubscribe from the tips in any of these emails or in the Application's Settings. Service emails, such as sign-in codes and the email that your edit is ready, always go to you.

With your explicit consent, we may also send you newsletters or other messages via email, SMS, or WhatsApp about our services, products, new features, and promotions.

8.2 Legal Basis, Consent and Opt-Out

We send tips and reminders on the basis of our legitimate interest in helping you use the Application and, where the law requires it, with your consent. Newsletters and other promotional messages are sent only if you have given your explicit consent. You can:

• Withdraw your consent at any time
• Stop receiving marketing communications, tips and reminders included, by clicking "unsubscribe" in any marketing email
• Stop tips and reminders by turning off "Tips and reminders" in the Application's Settings
• Opt out of SMS or WhatsApp messages by replying with "STOP"

Stopping marketing emails does not stop service emails.

8.3 Statistical Information

We will not share your personal information with advertisers, apart from what the Meta Pixel on our website sends to Meta (see Section 11). However, we may provide statistical information regarding user activity on the Application and in newsletters to third parties.

8.4 SMS Verification Messages

SMS Communications: We may send SMS messages to the phone number you provide for account verification and security purposes, including one-time passwords (OTPs) during login. These messages are transactional and triggered by your actions. Standard message and data rates may apply. Reply STOP to any message to opt out of future SMS communications.

9. Third-Party Services and Integrations

The Application integrates with and links to third-party services, including:

• Social media platforms (Facebook, Instagram, LinkedIn, TikTok)
• YouTube, through YouTube API Services (see Section 2.7)
• Threads, from Meta (see Section 2.8), and Pinterest (see Section 2.9)
• Marketing automation tools and advertising platforms
• Analytics services (PostHog)
• Payment processors
• AI and generative content services
• AI agents you connect yourself, such as ChatGPT, Claude or Cursor (see Section 2.6)
• Content delivery networks

9.1 Third-Party Privacy Practices

These third-party services have their own privacy policies and practices. We are not responsible for:

• The privacy practices of third-party services
• Content or security of external websites
• How third parties collect, use, or share your information

We encourage you to review the privacy policies of any third-party services you use or connect to the Application.

9.2 Social Media Features

The Application includes social media features (e.g., share buttons, content publishing). These features may collect your IP address, page visited, and set cookies. Your interactions with these features are governed by the privacy policies of the companies providing them.

10. Cookies and Tracking Technologies

We use essential cookies to run the Service and optional cookies (analytics/advertising) to improve your experience. Where required by local law (e.g., in the EEA/UK), we set optional cookies only with your consent. To change your choice, clear this website's cookies and stored data in your browser, and we will ask again on your next visit; withdrawing consent won't affect essential cookies needed for core functionality.

11. Third-Party Advertisements

The Application does not show advertisements, and no other company runs ads on it. The Meta Pixel on our website lets Meta measure our own advertising, and Meta may use cookies to show you our ads on its platforms based on your visits to our website (see Section 4.1).

12. Changes to This Privacy Policy

We will regularly review and update our Privacy Policy to ensure it reflects our current data handling practices.

12.1 Notification of Changes

When we make material changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Notify you by email (if you have provided an email address)
• Display a prominent notice within the Application
• Obtain your consent as required by law for significant changes

12.2 Your Continued Use

Your continued use of the Application after we post changes to this Privacy Policy means you accept the updated policy. If you do not agree to the changes, you should stop using the Application and close your account.

13. Reporting a Privacy Violation and Contact Information

13.1 Privacy Violations

If you believe your privacy has been infringed upon within the framework of, or in connection with, the Application's activity, please contact us and detail the circumstances as you understand them. We take privacy concerns seriously and will investigate all reports.

13.2 Questions and Concerns

If you have any questions or concerns regarding:

• The processing of your personal data
• Exercising your privacy rights
• This Privacy Policy
• Our data practices

Please contact us:

Support: contact@solaraai.com

14. Supervisory Authorities

14.1 Israel

For users in Israel, you may contact or file a complaint with:

Privacy Protection Authority Ministry of Justice
Email: privacy@justice.gov.il
Website: gov.il/privacy_protection_authority

14.2 European Union

If you are in the European Economic Area and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.

A list of EU supervisory authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

14.3 United States

For California residents, we do not sell personal information for money. We may "share" certain identifiers and internet activity with advertising/analytics partners for cross-context behavioral advertising, through the Meta Pixel on our website. You can limit it in your ad settings on Meta, or with a browser setting or extension that blocks trackers.

15. Acknowledgment of AI-Assisted Service

You acknowledge and agree that:

• The Application uses artificial intelligence and machine learning technologies from multiple providers
• Your inputs and content will be processed through AI services to generate outputs for you
• Your data is NOT shared with external AI providers for their model training purposes
• We may use anonymized and aggregated data for our internal AI improvement, but never the data we receive from the social platforms you connect (Section 3.3)
• AI-generated content may require human review and editing
• AI models may produce unexpected, inaccurate, or biased outputs
• You are responsible for the final content you create and distribute
• We are continuously improving our AI capabilities, which may result in changes to output quality or characteristics

© 2026 Solara AI. All rights reserved.