TRUST & SECURITY
Your Data. Your Keys.
Our Responsibility.
SoloMatic is built on a simple principle: you should never have to trade control for convenience. SoloMatic AI is operated by Marco Rivera in Pennsylvania, USA. SoloMatic AI is a service brand, not a separate LLC. You own your business data and client accounts; SoloMatic operates the hosted workspace. Paid access, retained data and permission to act are separate.
Data Ownership
✓You retain your rights to your business data, CRM contacts and client-owned third-party accounts. SoloMatic does not take ownership of those accounts.
✓SoloMatic operates the hosted Free and Office workspace. A personal AI provider account is not required for Free drafting.
✓Data ownership is separate from paid feature access. Retaining your work does not make paid rooms available on a Free account.
Encryption & Data Protection
✓The platform uses encrypted connections, database access controls and tenant checks. Stored integration credentials receive additional application-level encryption.
✓Do not place passwords, payment details or unnecessary sensitive customer information in drafting prompts. Use the designated connection process for supported integrations.
✓Security controls reduce risk but cannot guarantee that incidents will never occur. Contact solo@solomatic.ai to report a concern without sending secrets in ordinary email.
API Key & Credential Handling
✓Some separately scoped integrations require a client-owned account or limited provider credentials. Only connect tools needed for an agreed workflow.
✓Credential storage, provider verification and permission to act are different steps. Saving a connection is not approval to send messages or change records.
✓You can revoke or rotate provider credentials at the provider. Any new connection or permission must be verified before a managed workflow resumes.
Infrastructure & Hosting
✓Netlify hosts the website and server functions; Supabase provides database storage and authentication. Stripe processes payments.
✓Free drafting uses a bounded platform-managed connection through OpenRouter and the selected model provider. Client-owned channel services are separate.
✓Composio and Google Workspace/Gmail deliver signup and password-reset email. This account-email connection is not a client marketing-email service.
Data Retention & Deletion
✓Canceling renewal is separate from account deletion. For new Free and Office accounts, saved work is retained while the account remains open.
✓At effective cancellation, Free-origin Desk work remains available; paid rooms and their contents remain locked without paid entitlement, including direct API access. Paid work is not moved into Free.
✓New enrolled daily encrypted Google Drive and matching local recovery copies become eligible for removal after 30 days. This excludes pre-existing backups, unregistered artifacts and tooling archives. Removal can be delayed by legal or contractual holds, protection of the latest verified recovery copy, verification failures or operator-system downtime; provider intermediates have separate retention. This is not a complete-erasure deadline.
✓Request export or account deletion at solo@solomatic.ai. Identity verification and applicable legal retention requirements apply. Existing promised deletion deadlines and export rights remain unchanged; see the Privacy Policy.
Compliance & Certifications
✓SoloMatic is not a HIPAA-certified service. Provider certifications do not certify the complete SoloMatic product or a customer workflow.
✓The launch does not offer regulated clinical, legal, insurance or accounting automation. Do not upload protected health records or rely on drafts for regulated decisions.
✓Any future regulated service would need its own legal, security, provider and contractual review before availability is claimed.
Permissions & Approval Controls
✓Free and Office provide drafts and organized work for your review. Automatic sending, calling, booking and social publishing are not included in this launch.
✓Managed external actions require a supported client-owned destination, verified permissions and explicit approval for the agreed scope.
✓A saved draft, checklist, connection or approval is not proof that an external action completed. Completed-action claims require destination evidence; uncertain outcomes require inspection rather than blind retry.
Subprocessors & Third-Party Access
✓SoloMatic does not sell your data. See the Privacy Policy for information about processing and your rights.
✓Model providers process the prompts and relevant business context needed for a request under their own policies. Platform-managed drafting is not restricted to client-owned API keys.
✓Encrypted operational recovery copies use operator-controlled Google Drive storage and Composio transfer/verification. This is distinct from client-owned marketing connections.
✓The Privacy Policy lists core providers. Ask solo@solomatic.ai about providers and processing relevant to your particular configuration.
Have specific security questions?
Contact Our Team →