Last updated: 1 October 2026
1. Who we are
Solor Stream is operated by SOLOR AI & IT L.L.C, a company incorporated in Dubai, United Arab Emirates under commercial licence 1376837 ("we", "us", "our"). Solor Stream is that company's trading name for this product. We operate the AI Founder Intelligence platform available at https://solorstream.ai. For privacy questions, contact us at support@solorstream.ai.
2. What data we collect
- Account data: name, email, password hash, authentication tokens.
- Business profile: company name, industry, revenue range, goals, challenges, location, currency, all entered voluntarily by you.
- Connected-tool data: when you connect a tool to Solor Stream, we fetch and store the business data that tool exposes for your account (for example revenue, subscriptions, customers, orders, sessions, pageviews, advertising spend and results, and figures about support requests, form entries, bookings, calls, members, reviews and tracked hours). The tools you can connect are the ones shown on the Connections page inside Solor Stream. Today they are tools of these kinds: payments, subscriptions and balances (Stripe among them), online shops, accounting, email lists and newsletters, bookings, sales pipelines, calls and outreach, website visitors (Google Analytics among them), advertising (Meta Ads, covering Facebook and Instagram), customer support, forms and surveys, product use, memberships and courses, customer reviews, and time tracking. You can also upload CSV (spreadsheet) files. Some of these tools have not yet been read on a real account. Meta Ads is in early access, described in the next point. As we add more connections, the services you choose to connect may include Google (Ads, Search Console, YouTube), Intuit QuickBooks, HubSpot, PayPal, Acuity Scheduling, and other tools you explicitly connect. We only ever fetch data for tools you explicitly choose to connect, and you can disconnect any tool at any time (see Section 6).
- Meta (Facebook and Instagram) advertising data: if you connect Meta Ads, we read the list of ad accounts your Meta login can see, and the figures for the ad account you pick: what your Facebook and Instagram ads cost over the last 30 days, how often they were shown and clicked, how many people they reached, and what came back from them, for the account overall and for its campaigns. That is the whole of it. We only read. Solor Stream never creates, edits, pauses, or deletes anything in your Meta account, never posts anything, and never touches your personal profile, your posts, your messages, or your friends and followers. We use these figures in your briefings, your what-if scenarios, your Friday card, the answers you ask for and the check on decisions you log (see Section 4); they do not feed your alerts. This connection is in early access while Meta reviews our app, so today it only works for people we have added to our Meta app by name. Disconnecting it on the Connections tab deletes the stored connection and stops all further reading, and deleting your account removes the data we read (see Sections 6 and 7).
- Usage data: page views, feature interactions, error logs (via PostHog and our own logs) used to improve the product.
- Payment data: handled entirely by Stripe; we never see or store full card numbers.
- The Honest Read (our free read, no account): the answers you type, the read written from them, the page or campaign that linked you to it, and a scrambled form of your internet address that is used only to limit how many reads one connection can start in a day. Your first name and email are kept only if you leave them. We keep a read until you ask us to delete it: write to support@solorstream.ai from the address you left, or send us the link to your read, and we delete it.
3. Google API Services User Data Policy: Limited Use disclosure
Solor Stream's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
This applies to all Google APIs we access: Google Analytics today, and Google Ads, Google Search Console, and YouTube as those connections launch.
- (a) we use data obtained via Google APIs through OAuth solely to generate briefings and business insights for the authenticated user inside Solor Stream;
- (b) we do not transfer this data to third parties except as necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users;
- (c) we do not use this data for serving advertisements;
- (d) we do not allow humans to read this data unless we have the user's affirmative consent for specific messages, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or for internal operations where the data has been aggregated and anonymized.
Users can revoke access at any time. Disconnecting the tool on the Connections tab inside Solor Stream immediately deletes the stored OAuth tokens and stops all further data fetching. Access can also be revoked from https://myaccount.google.com/permissions, which immediately invalidates our access and stops all further data fetching. To remove the stored tokens on our side as well, disconnect the tool inside Solor Stream or delete your account.
4. How we use your data
- To generate the AI briefings, what-if scenarios, alerts, and answers you request.
- To send transactional emails (welcome, trial reminders, briefing-ready notifications).
- To enforce subscription plans and trial limits.
- To diagnose bugs, monitor performance, and improve the product.
We do not sell your data. We do not use Google user data for advertising. We do not train public AI models on your private business data, and our AI providers do not train their models on it either. It is processed only to answer your requests.
5. Where your data is stored
Everything we hold about you, including the data we read from the tools you connect, is stored encrypted at rest (AES-256) and in transit (TLS) on our managed Supabase infrastructure (built on AWS). The database itself runs in Amazon Web Services' Dublin region in Ireland (eu-west-1), inside the European Union, and we operate the service from the United Arab Emirates. Some of the companies below process data in the United States (for example Nango, Anthropic, OpenAI, ElevenLabs, PostHog, and Google); each receives only what its line says, and only for the job named. The following subprocessors may receive limited data required to deliver the service:
- Supabase and Lovable Cloud: Supabase provides the database, authentication, and file storage; Lovable Cloud hosts and runs it, and Lovable's managed email service delivers the emails Solor Stream sends you: your morning briefing, your Friday card and digest, and your account emails (such as your invitation, email-confirmation, and password-reset links).
- Stripe: subscription billing and, if you connect Stripe as a data source, revenue data integration.
- Anthropic (Claude): the AI models that process your business data to write your briefings, what-if scenarios, alerts, and Emilian's answers.
- Perplexity: external market and web research (industry benchmarks, market signals).
- OpenAI: creates search embeddings (numerical representations) of your saved memories so they can be searched by meaning.
- Nango: securely stores and manages the connection tokens for tools you connect (such as Stripe, Meta Ads, and Google Analytics), and passes most of those read requests through on our behalf, so the data we read travels through Nango on its way to us.
- ElevenLabs: turns Emilian's written briefings into speech; receives the text to be spoken when you ask to listen.
- Resend: delivers the investor update you choose to send, the Honest Read (our free founder check-up), the sample briefing sent from our landing page, and the note that brings your in-app feedback to our inbox, which includes your email address and what you wrote.
- PostHog: product usage measurement, linked to your account so we can improve the features you actually use.
- Google (Google Analytics and Google Ads): on our public website, counts visits and measures our ads; inside the product, Google Analytics counts visits. It receives the pages you open and your IP address. On our public website it sets cookies only if you allow them (section 10).
- Cloudflare: serves this website, counts visits to it without cookies, and runs the are-you-a-human check on our public tools. When that check runs it receives your IP address and the check's own one-time token, and nothing else.
6. Your rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data via the Settings and Business Profile pages.
- Delete your account and all associated data yourself from Settings, then Account, then Delete my account inside the app, or by emailing support@solorstream.ai. Step-by-step instructions are on our Delete your data page.
- Disconnect any connected tool at any time from the Connections tab. Disconnecting deletes the stored credentials and stops further data sync.
- Export your data on request.
7. Data retention
We retain account and connected-tool data for as long as your account is active. If you delete your account, your data is deleted at once, and anything still in a backup is purged within 30 days, except where we are required to retain it for legal, tax, or fraud-prevention reasons. See the Delete your data page for exactly what is removed and how to request deletion.
8. Security
We use industry-standard safeguards: TLS in transit, AES-256 at rest, row-level security on every database table, hashed passwords, JWT authentication, and least-privilege access for all internal systems. No system is perfectly secure; we will notify affected users promptly in the event of a confirmed breach affecting their data.
9. Requests from governments and public authorities
If a government, court, regulator, or other public authority asks us for your personal or business data, this is how we handle it:
- Before we answer, we check that the request is lawful: that the body asking has the power to ask, and that it reached us in the proper legal way.
- We hand over only the narrowest set of data the request lawfully requires, and nothing more.
- We push back on any request that looks unlawful, too broad, or not properly sent to us, and where the law gives us a way to have it reviewed, we use it.
- We keep a written record of every request: who made it, what legal basis it cited, how we assessed that basis, and what, if anything, we handed over in response.
- We tell you before we hand anything over, unless the law forbids it or telling you would put someone in danger. If we were not allowed to tell you at the time, we tell you as soon as the law lets us.
Any such request should be sent to us in writing at support@solorstream.ai.
11. Children
Solor Stream is not intended for individuals under the age of 16, and we do not knowingly collect data from minors.
12. Changes to this policy
We may update this policy from time to time. Material changes will be announced via email and on this page. The "Last updated" date at the top reflects the most recent revision.
13. Contact
Questions about this privacy policy or your data? Email support@solorstream.ai.