Privacy Policy

This policy explains how the solinker website, accounts and desktop app handle personal information. The service operator identified below is referred to as “we”.

Draft

This is a draft awaiting approval. It will be published after the operator details, contact information and effective date are confirmed.

Service operator: To be confirmed
Operator location: To be confirmed
Contact email: dcomdjl@gmail.com
Effective date: To be confirmed

1. Account and identity information

When you register or use an account, we process your email address, display name, email verification status, account settings and workspace memberships. For email and password accounts, the server stores password hashes rather than readable passwords.

2. Sign in with Google

Google sign-in requests only openid, email and profile to verify identity, create an account or link an identity after verification of an existing account. We process the unique Google account identifier, email address, email verification result, available name and organization domain information used for identity verification. The linked identity and link date are stored with your account.

The Google consent screen may list a profile photo, but the current sign-in service does not store Google profile photos. We do not obtain your Google password, request Gmail, Drive, Calendar or Contacts permissions, request offline access, or store Google refresh tokens. Authorization codes and identity tokens are used to complete verification; temporary authorization records become invalid on expiry and are removed through cleanup.

Google sign-in data is used for account identity, sessions and security, not for sale, advertising profiles or training general-purpose AI models. Our handling of Google data complies with the Google API Services User Data Policy, including applicable Limited Use requirements.

3. Workspace content and local data

The server processes accounts, workspaces, projects, conversation metadata, saved workflow definitions and versions, invitations and usage records. Detailed conversation history, local tasks, execution records and results, browser profiles, website sign-ins and local files are primarily stored on your device. Local files are not uploaded automatically.

When you choose an available upload, sharing feature or related API, the corresponding content may be transferred to the server and its private storage. Information you put in workflow definitions, uploads or task context may include personal information. Submit only content you are entitled to process.

4. AI and automation processing

When you start an AI or automation task, instructions, conversation context, selected page text, controls, permitted screenshots or file excerpts needed for the task may be sent through our server proxy to the selected model provider. Actions in browsers, desktop apps or devices are triggered by your instructions and the relevant permissions.

Available models and channels are described in the service interface; current integrations include DeepSeek and OpenCode Zen services. Google sign-in credentials are not included as model request content. If you put an email address or other personal information in instructions or files, it may be processed as task context.

5. Cookies, devices and security records

We use necessary session cookies, one-time verification credentials and device session information to maintain sign-in, prevent forged requests and manage device access. Language and appearance preferences are stored in cookies or local storage. Servers and service infrastructure may process IP addresses, request times, browser or device information and errors; registration rate limits use a derived key rather than a readable IP value.

API usage records include the model, purpose, status, duration and token measurements. These records do not store prompts, response text, page DOM, cookies or secrets. Deleting a conversation does not automatically delete separate usage records.

6. Service providers and disclosures

To provide the service, we use hosting and storage services, Google authentication, Resend email delivery, Cloudflare Turnstile abuse prevention and the AI providers actually enabled. Verification, invitation and password recovery emails require sending the recipient address and necessary message content to the email provider. Cloudflare processes browser and network information needed for Turnstile verification.

We disclose necessary information only to provide the service, maintain security, follow your instructions or meet applicable legal obligations. We do not sell personal information or transfer Google sign-in data for advertising, data brokerage or general-purpose model training. For other purposes or processing beyond the original authorization, we will provide notice and obtain any required authorization beforehand.

7. Retention and security

Account information and cloud content you retain are kept as needed to provide the service, then handled according to deletion requests, applicable law and backup rotation. Security, usage and dispute-related records may be retained for necessary security or legal purposes. Expiry of temporary authorization does not mean all data is immediately deleted.

We use transport protection, password hashing, permission checks, session controls and credential isolation to protect information. Local data protection also depends on your device and operating system settings. No system can guarantee absolute security.

8. Access, correction, deletion and withdrawal

You can manage information through the account settings and content controls available in the service, or use the contact email on this page to request access, correction, export, deletion or account closure. We will verify the requester and handle requests under applicable law, explaining any limits needed to protect others, meet retention obligations or maintain security.

You can revoke solinker access in your Google Account third-party connection settings. Revocation does not automatically delete your solinker account, existing sessions or local data and is not account closure. An account with only Google sign-in may be unable to sign in again after revocation; contact support or use the password setup feature first. Uninstalling the desktop app does not automatically delete cloud accounts or content.

9. Processing locations, minors and policy updates

Service infrastructure and third-party providers may process information outside your location. We handle international transfers under applicable law and provide further disclosures, safeguards or consent where required. This service is not directed to children below the local age for consenting to personal information processing.

Updates will be published on this page with a new effective date. Before implementing material changes to processing purposes, Google data use or your rights, we will provide appropriate notice and obtain renewed consent where applicable.