Privacy Policy

User Account Data

When you create an account with Solvr, we collect:

• Email address (used for authentication and invitations)
• Display name (optional, for team recognition)
• Account settings and preferences (timezone, notification settings)
• Device session identifiers and security-related metadata (for fraud prevention and account security)

Organization Data

Organization administrators provide:

• Organization name and company information
• Team member roster (email addresses and assigned roles)
• Inbound email address for decision notifications
• Custom domain configuration (optional)

Decision & Evidence Data

When using Solvr to manage decisions, we store:

• Decision context, descriptions, and scope names
• Attached documents and evidence files uploaded by users
• Decider responses (approvals, declines, and commentary)
• Reminder logs and communication history related to decisions

Audit Log Data

We maintain audit logs to ensure security, accountability, and compliance:

• Identity of the user who performed an action
• Description of the action performed (creation, update, completion, deletion)
• Timestamp of the action
• Resources affected (decision ID, scope ID, organization ID)
• Change history (previous values, new values, originating IP address)

Funnel Analytics Data (Anonymous)

To understand how visitors interact with our marketing pages, we collect anonymized analytics data:

• Anonymous session ID generated in the browser (not linked to user accounts)
• Pages visited (e.g., landing page, pricing, checkout, success)
• Timestamp of page visits
• Marketing campaign parameters (utm_source, utm_medium, utm_campaign)
• Browser user-agent information (for device-type analysis only)

Important: This data is not linked to identifiable individuals and cannot be associated with a Solvr account. Sessions expire when the browser is closed.

Payment Data

Payment processing is handled by Stripe. We store:

• Encrypted Stripe customer identifier
• Subscription status (active, canceled, past-due)
• Subscription tier

Solvr does not store credit card numbers or payment credentials. All payment information is processed directly by Stripe.

Security Measures

We apply industry-standard technical and organizational safeguards to protect data against unauthorized access, loss, or misuse, including:

• Encryption of sensitive data at rest using modern cryptographic standards
• Encryption of data in transit using HTTPS/TLS
• Logical isolation of organization data
• Role-based access controls

Anonymous Analytics Data

Anonymous analytics data is stored without encryption because it does not contain personal identifiers and cannot be linked to individuals.

Infrastructure & Hosting

Customer data is hosted on Supabase infrastructure located in Canada.

Decision & Evidence Data

Retention periods vary by subscription tier, up to 60 months. The active retention window is configurable in organization settings.

After the configured retention period, decision and evidence data is permanently deleted.

Audit Logs

Audit logs are retained for a minimum of 6 months and a default of 2 years, or longer where required by law or business necessity. Retention periods can be configured in organization settings.

Funnel Analytics

• Individual events: deleted after 90 days
• Aggregated statistics: retained for up to 2 years

Organization Deletion

When an organization is deleted, data enters a 3-month recovery window. After this period, all associated data is permanently deleted.

Anonymous Session Tracking

We use browser sessionStorage for anonymous session tracking on marketing pages. This data:

• Is deleted when the browser is closed
• Is not shared with third parties
• Cannot identify individuals

Essential Cookies

Essential cookies are used for core application functionality (such as authentication sessions and security protections). These cookies are strictly necessary for the service to operate.