Privacy Policy - SolidifAi

1. Who we are

SolidifAi is operated by BetterClosure Inc., a Florida corporation doing business as FlowClick, of 2125 Biscayne Blvd, Ste 204 #10484, Miami, Florida 33137, United States.

Data protection enquiries: privacy@solidifai.app. We aim to respond within 5 business days and, for a formal data-subject request, within one month.

2. The two roles we play — read this first

Controller, for account and website data. Your name, work email, company, workspace name, login, billing details, the messages you send us through the contact form, and — only if you accept — the page views described in the Cookie Policy. We decide why and how we process it.
Processor, for Customer Data. The contacts, companies, deals, events, messages, loyalty, media and other records you and your users put into your workspace. You are the controller; we act on your documented instructions under our Data Processing Addendum. If you are one of a customer’s contacts and want your data accessed or erased, contact the company that holds your details — they instruct us.

3. Account and website data we collect, and why

Data	Purpose	Legal basis
Name, work email, company, workspace name, chosen plan and hubs	Create your signup, confirm your email, provision your workspace	Contract
Email verification and checkout link tokens (stored only as hashes)	Confirm your address and continue to checkout	Contract
Login, session token, IP address at sign-up and sign-in	Keep you signed in; abuse prevention and rate limiting	Legitimate interests (security)
Plan, billing contact, payment history, card brand / last four / expiry	Take payment, warn you before a card expires, meet tax obligations	Contract; legal obligation
Business Associate Agreement acceptance (signer name, title, date, version) — Regulated plan	Record who accepted the agreement for your organisation	Contract; legal obligation
Contact form submissions	Reply to you and keep a record of the conversation	Legitimate interests; steps before a contract
Anonymous visitor id, session id and pages viewed on this site — only after you accept	Understand which pages are useful; link your page views to a contact form you later send	Consent
Console usage logs, API request logs, job records	Operate the service, meter usage, support and debugging	Contract; legitimate interests

We never store your card number. Card details are entered at Stripe’s hosted checkout. We never store your API keys, only a one-way hash.

4. Customer Data in your workspace

Your workspace holds whatever you and your users import, collect or create: customer profiles and identifiers, consent records, events, segments, CRM records, messages and their delivery results, loyalty balances, ad audiences and results, and the insights we derive from them for you. This data is tenant-scoped and isolated. We use it only to provide the service to you. We do not sell it, we do not combine it with other customers’ data, and we do not use it to train models shared with other customers.

When you send a message, the recipient’s address and the content go to the email, SMS or push provider that carries it — one you connect, or FlowClick’s managed provider. When you connect an ad platform and send an audience or conversion to it, that platform receives the data you send.

5. AI features

AI features run under the AI policy your workspace sets. Prompts and the Customer Data a feature needs are sent only to the model providers your policy allows, or to your own provider when you bring your own model keys. Customer Data and prompts are not used to train models shared with other customers. On the Regulated plan the AI policy starts locked down and your administrators decide what to open.

6. Who we share data with

We do not sell personal data and we do not share it for cross-context behavioural advertising.

Recipient	Purpose	Data
The FlowClick platform, operated by BetterClosure Inc. on Salesforce, Inc. (Heroku) infrastructure	Application hosting, database, file storage and backup — the platform SolidifAi runs on	All service data
Stripe, Inc.	Payment processing and subscription billing	Billing contact email, payment method (held by Stripe), subscription and invoice records
Email, SMS and push providers — the ones you connect, or FlowClick’s managed provider	Sending messages, verification and account email	Recipient address or number and message content
AI model providers allowed by your AI policy	Running the AI features you enable	Prompts and the data the feature needs
Ad platforms — only when you connect them	Sending audiences and conversions you choose	The identifiers and events you send

SolidifAi and the FlowClick platform it runs on are both operated by BetterClosure Inc. — the same legal entity — so FlowClick itself is not a third party. A current sub-processor list is maintained in Annex III of the DPA. We may also disclose data where legally required, and will give notice where we are permitted to.

7. Your rights

Depending on where you live you may have rights to access, correct, delete, restrict or object to processing, to portability, and to withdraw consent. For account and website data, exercise them at privacy@solidifai.app. You can withdraw consent to page-view tracking at any time as described in the Cookie Policy.

If you are a contact in a customer’s workspace, that customer is the controller. Ask them; the service gives them the tools to export, correct and erase your data. If you cannot reach them, write to us and we will make reasonable efforts to help.

If you are in the EEA or UK you may complain to your supervisory authority. In the US, California, Virginia, Colorado, Connecticut and other state residents have rights under their own statutes; we treat all such requests under this section and do not discriminate against anyone for exercising them.

8. International transfers

We are based in the United States and process data there. Where we receive personal data from the EEA, the UK or Switzerland, transfers are made under the European Commission’s Standard Contractual Clauses, with the UK International Data Transfer Addendum where the UK GDPR applies. These are incorporated into our DPA and are available on request.

9. How long we keep things

Data	Retention
Customer Data in your workspace	As your plan sets: Team 1 year, Organization 2 years, Regulated 7 years — or less if your administrators delete it sooner. Removed when the account is closed, subject to the Regulated commitment.
Account closure grace period	30 days, recoverable; then irreversible
Signups that are never confirmed	Removed after they expire
Billing and tax records	7 years after closure, kept only as financial records
Business Associate Agreement acceptances	For the life of the agreement and 6 years after it ends
Website page views (with consent)	Up to 2 years
Aggregate non-identifying usage counters	Indefinite

10. Security

Data is encrypted in transit and at rest. On the Regulated plan, the data the plan protects is encrypted with keys your organisation holds; revoking the key makes that data unreadable to us. Passwords are stored as salted hashes and API keys as one-way hashes; neither can be recovered, only reset. Access to production data is limited to personnel who need it. Tenant data is isolated and that isolation is tested.

No system is perfectly secure. If a breach affects your personal data we will notify you and any regulator as required, without undue delay.

11. Cookies and similar storage

This site asks before it remembers your browser. Nothing is recorded unless you accept, and declining stores only that choice. The Cookie Policy lists every item by name and duration.

12. Children

SolidifAi is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child’s data has reached us, write to privacy@solidifai.app and we will delete it.

13. Automated decision-making

SolidifAi produces scores, segments and predictions automatically for our customers. We do not use them to make decisions about you that produce legal or similarly significant effects. Our Acceptable Use Policy prohibits customers from using them as the sole basis for such a decision.

14. Changes

We may update this policy. For material changes we will notify account holders by email before they take effect. The date at the top always reflects the current version.

15. Contact

BetterClosure Inc. d/b/a FlowClick, 2125 Biscayne Blvd, Ste 204 #10484, Miami, Florida 33137, United States. Privacy: privacy@solidifai.app. Security: security@solidifai.app. Legal: legal@solidifai.app.