Privacy Policy

Effective March 10, 2026

Solsta is built on a simple belief: the people who use it deserve to know exactly what happens with their data. This policy explains what we collect, why we collect it, who we share it with, and what control you have over it. We've written it to be readable, not just legally defensible.

1. Who We Are

Solsta ("we," "us," or "our") operates the Solsta platform, which provides AI-powered companion experiences. You can reach us at privacy@solsta-ai.com.

2. Information We Collect

Account Information

When you create an account we collect your email address and any display name or username you choose. Authentication is handled by Supabase. We do not store passwords in plain text.

Companion & Profile Data

We store the configurations you create for your Sols — their names, personalities, backstories, and visual descriptions — along with your subscription tier and account preferences.

Conversation Content

We store the messages you exchange with your Sols so that they can remember past conversations and grow over time. This is core to the service. Your conversation content is transmitted to our AI language model provider (currently Nous Research) to generate responses. We do not use your conversations to train AI models, and we do not sell conversation data.

Images

When you generate an avatar or scene image, the text prompt describing your Sol is transmitted to RunPod's serverless infrastructure to produce the image. Generated images are stored securely in Supabase Storage under your account.

Usage Data

We collect information about how you use Solsta — which features you access, when you use them, and how often — to understand what's working and what needs improvement.

Payment Information

Payments are processed by Stripe. We receive a limited summary of your transaction (e.g. subscription tier, last four digits of your card, billing country) but never your full card number, CVV, or bank details. Those stay with Stripe.

Technical Data

We automatically receive standard technical information when you use the service: your IP address, browser type, device type, and the pages you visit within Solsta. This is used for security, rate limiting, and debugging.

3. How We Use Your Information

To create and manage your account and authenticate you securely
To power the AI companion experience, including memory and image generation
To process subscription payments and manage billing
To enforce usage limits and protect against abuse
To diagnose technical issues and improve the platform
To communicate with you about your account or material changes to the service

We do not use your data for advertising, and we do not sell it to third parties.

4. Third-Party Services

Operating Solsta requires several third-party services. Each receives only the data necessary for its function.

Supabase

Hosts our database and file storage. Your account data, companion configurations, conversation history, and generated images live here.Privacy policy →

Nous Research

Provides the language model (Hermes) that powers your Sol's responses. Your messages and companion context are transmitted to Nous Research to generate replies.Privacy policy →

RunPod

Runs the image generation pipeline. When you create or edit a Sol's appearance, the visual description prompt is processed by RunPod's serverless workers.Privacy policy →

Stripe

Handles all payment processing. Stripe is PCI-DSS compliant. We never see or store your full payment credentials.Privacy policy →

Upstash

Provides Redis-based rate limiting to protect the service from abuse. Request metadata (IP address, user ID) passes through Upstash transiently.Privacy policy →

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are legally required to retain it longer (for example, billing records for tax compliance). Conversation history is deleted with your account. Backup copies may persist for up to an additional 30 days before being purged from backup systems.

6. Your Rights

Depending on where you live, you may have rights regarding your personal data, including the right to access, correct, export, or delete it. Regardless of jurisdiction, we honor the following for all users:

Access: You can request a copy of the personal data we hold about you.
Correction: You can update most of your account information directly in the app. For anything you can't change yourself, contact us.
Deletion: You can delete your account from within the app settings. We will delete your data as described above.
Portability: You can request an export of your data by contacting us.

To exercise any of these rights, email privacy@solsta-ai.com. We will respond within 30 days.

7. Children's Privacy

Solsta is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we discover that we have inadvertently collected data from a minor, we will delete it promptly. If you believe a minor has created an account, please contact us at privacy@solsta-ai.com.

8. Security

We use industry-standard security measures including encryption at rest and in transit, row-level security on our database, and access controls that limit which systems can read your data. No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you as required by applicable law.

9. Changes to This Policy

If we make material changes to this policy we will notify you by email and update the effective date above. Continued use of Solsta after changes take effect constitutes acceptance of the updated policy.

10. Contact

Questions about this policy or your data? Email us at privacy@solsta-ai.com. We read every message.

Solsta

Terms