How your numbers are kept

You are about to connect the accounts that run your business. This page says exactly what happens to what we read, who else sees it, and how to make all of it disappear. Everything here describes what the product actually does today.

Where your numbers live

In one database, in your own account. The services named below touch it only to do their job for you. Nothing is shared between founders and nothing is pooled.

The numbers themselves
Whatever your connected tools return, stored against your account only. Every table is guarded row by row, so a request that is not yours returns nothing.
The things we make from them
Your briefings, your slides and Emilian's spoken recordings sit in private storage folders named after your account, and open only through a link we sign for you. The Friday card is the one deliberate exception: it is built to be posted, so its picture sits on an open link that LinkedIn and X can fetch. Nothing is on that picture except what is printed on the card.
A deck you share
It opens through a link that signs itself fresh for a day at a time, and you can switch that link off. Switch it off and it stops working for good.
A Friday card you share
The page you send signs the card for a week at a time, and the picture behind it stays on its open link. There is no switch-it-off for a Friday card yet, so treat one you have posted as posted. Deleting your account takes the picture down.

What can never happen

The connections are read-only by design wherever a tool offers a read-only door; the few that do not are named here.

Solor Stream only ever reads
Every request it makes to your tools is a read. It never moves money, issues a refund, edits a record or posts anything, and we do not ask for permission to. Where a provider only offers read and write as one bundle, we still call read endpoints only.
One thing that is up to you
If you connect Stripe by pasting a key, use a restricted read-only key. A full secret key also works, and we will still only read with it, but the key itself can do more than we use. The restricted key is the one that cannot.
No mailbox, no files, no calendar
We do not ask for access to your email, your documents, your contacts or your calendar, and we do not intend to.
You choose what to connect, and what to end
Each tool is separate. Connect one, connect five, and disconnect any of them whenever you like. Disconnecting stops us reading it, destroys the key we were holding, and cancels our access with the service that granted it. If that last step ever fails on the service's side, we tell you so on the spot instead of pretending, and point you at where to finish it. A key you pasted in yourself stays yours as well: delete it in that tool and it is gone everywhere.

Who else touches your numbers, and why

Only these, only for the job named, and each one is a company we pay rather than one that pays us.

Anthropic
Claude writes your briefings, your slides and Emilian's answers, so your numbers are sent to it as part of each request. It is used through the paid business interface, where Anthropic's commercial terms say inputs are not used to train its models.
OpenAI
Turns the things Solor Stream remembers (a note you saved, a decision you logged, the summary of a what-if you ran) into a string of numbers, so they can be found again by meaning rather than by exact words. It receives that one piece of text on its own: no account, no connections, nothing else.
ElevenLabs
Turns the words Emilian has already written into his voice. It receives the spoken text, not your account or your connections.
Perplexity
Used for outside research: what is happening in your market and around the names on your watchlist. It receives the research question, not your figures.
Nango
Holds the connection tokens for the tools you connect, so the keys never sit loose in our own code.
Lovable Cloud
Hosts and runs the service, and its email service delivers the emails Solor Stream sends you: your morning briefing, your Friday card and digest, and your account emails. For those it receives the message and the address.
Resend
Sends the investor note you choose to send, the Honest Read (our free founder check-up), the sample briefing from our landing page, and the note that brings your in-app feedback to our inbox. It receives the message and the address.
Stripe
Bills your subscription. It is also one of the tools you can connect, read-only, as a source of your numbers.
PostHog
Tells us which pages get opened and where people give up. It receives your account id, your email address, your page views, and a handful of named moments: signing up, signing in, finishing setup, starting a subscription. It never receives your business numbers, your briefings or your slides: the setting that would have sent it the text of whatever you clicked is switched off.
Supabase
The database, sign-in and file storage under Lovable Cloud, in Dublin.
Google
Counts visits on this website and inside the product, with cookies only if you allow them.
Cloudflare
Serves this website and runs the are-you-human check on our free tools.

Delete everything

Settings, then Delete my account. It is one button and it does what it says.

What goes
Every row we hold about you, every file in your folders (briefings, decks and their slide images, share cards, your logo, every spoken recording Emilian made for you), and every key we hold to your tools. Then the account itself.
The keys to your tools
Deleting destroys every key we hold, and for every tool you connected from the Connections tab it cancels our access with that service too. Google Analytics is no exception any more: since 15 September 2026 it connects only one way, through the same door as every other tool, so Disconnect and deletion both end our access there the same way. If you want to see it for yourself, Google lists the apps you have allowed at https://myaccount.google.com/permissions.
All of it, or none of it
The account is closed once everything else is gone: your rows, your files and your keys go when you press the button, and anything still in a backup is purged within 30 days. If any part fails, nothing is finalised and you can try again, so you are never told it is done while something is still there.
The three things we keep, and why
A record of security events, your address if you have unsubscribed from email, because honouring an unsubscribe means remembering not to write to you, and whatever tax law makes us keep, such as invoicing records.

Who you are trusting

Solor Stream is built in Dubai by a small team, licensed as SOLOR AI & IT L.L.C, commercial licence 1376837. Write to us with a question about any line on this page and a person answers.

support@solorstream.ai