Privacy Policy

Who handles your information

Daniel Marthi, operating as Solum OS, is responsible for the personal information processed for this website and our direct customer communications. Contact daniel@getsolumos.com for privacy questions or to exercise your rights.

This policy covers getsolumos.com, product enquiries, purchase-related information we receive and any separately agreed setup support. Payment providers and services you independently choose have their own privacy policies.

Information we handle

• Enquiries and support: your email address, name if provided, message, and information you choose to share, such as an order reference or a relevant screenshot.
• Purchases: the checkout provider processes your order, billing and payment details. We may receive the purchaser’s contact details, product, amount, order status and other information needed to deliver and support the purchase. We do not receive your full payment-card number.
• Update requests: if you use a signup form, your email, signup source and submission date are used to manage the updates you request.
• Website activity: hosting and security services may process IP addresses, request URLs, browser information, timestamps and error details. Analytics are described below.
• Setup consultations: if separately agreed, scheduling information and the limited technical information or access needed for that session. Do not send passwords, keys or unrelated private records by email.

Why we use it

We use information to answer enquiries, provide the purchased product or agreed support, administer orders and refunds, protect the website, and understand how the public website is used.

Where the GDPR applies, our legal bases are steps you request before a contract and performance of that contract; legal obligations such as accounting; legitimate interests in security, resolving enquiries and improving our website; and consent for optional Google Analytics or updates that require it. You can withdraw consent without affecting the lawfulness of earlier processing. We do not use customer information for solely automated decisions with legal or similarly significant effects.

Cookies, analytics and choices

Essential browser storage supports functions such as session access, your theme, demo data and your privacy preference. The public browser demo saves sample-workspace changes on your device. Clearing site data removes those local preferences and demo changes.

We use Simple Analytics for website statistics such as page views, referrers and general device information. It describes its service as cookie-free; our script is configured to respect Do Not Track. See what Simple Analytics collects.

When Google Analytics is configured, it loads only after you accept optional analytics. It can use cookies and process information about visits, pages, device and browser characteristics, and approximate location. We use it to understand website usage, not to collect the contents of your notes or tasks. See Google’s privacy policy.

You can accept or reject optional analytics, or change that choice using “Privacy choices” in the footer. Rejecting does not prevent you from using the website or buying the product. Browser settings can also restrict or clear cookies and local storage.

Your self-hosted workspace

When you deploy your own copy, your notes, tasks and other workspace records are stored in the accounts and infrastructure you configure. Buying the download does not automatically send that workspace to us or give us access to it.

You choose the hosting, database, calendar and AI services connected to your copy. Their processing, storage locations and retention terms depend on your setup. Content you submit to an AI provider or another integration is handled by that provider. You are responsible for reviewing your configuration and protecting credentials.

If you specifically share workspace information or authorize access for support, we use it for the agreed assistance. Share only what is necessary. This website’s policy does not replace the privacy notice you may need for other people using a copy you operate.

Providers and disclosures

We use service providers for hosting and security (Vercel), database and account functions where enabled (Supabase), website statistics (Simple Analytics and, with your consent, Google Analytics), email communications, and checkout. The current product listing uses Gumroad; a different checkout provider, such as Lemon Squeezy, will be identified before payment.

Information is shared as needed to provide these functions, comply with law, protect rights or respond to a valid legal request. We do not sell your personal information. Checkout providers may act as independent controllers for billing, fraud prevention and legal compliance.

Providers may process information outside your country, including outside the EEA. Where required, transfers must use an applicable adequacy decision or other lawful safeguard, such as standard contractual clauses. Contact us for information about safeguards relevant to your data.

Retention and security

We keep information only for as long as needed for the purpose for which it was collected, including resolving enquiries, fulfilling purchases, applicable accounting duties and handling disputes. Retention depends on the type of record, whether support is ongoing, and legal requirements. Update subscriptions are kept until you unsubscribe or the relevant list is retired; a minimal suppression record may be retained to respect an opt-out.

Website logs and analytics follow the relevant service settings and operational retention periods. Your privacy choice remains on your device until changed or cleared. Data in your self-hosted instance follows your own configuration.

We use reasonable access controls and security measures appropriate to the information. No internet service is completely risk-free. Please avoid sending unnecessary sensitive information and notify us if you believe information has been exposed.

Your rights and contact

Depending on your location and the circumstances, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You can withdraw consent and opt out of marketing at any time. Some records may need to be kept to meet legal obligations or establish, exercise or defend legal claims.

Email us to make a request. We may need proportionate information to verify your identity. Where the GDPR applies, we normally respond within one month and will explain any permitted extension. You may complain to your local data protection supervisory authority, including Romania’s ANSPDCP where applicable.

The website and product are not directed to children under 16. If you believe a child has provided personal information, please contact us. We will update this page when our practices change and show the revised date above.