1. Introduction
This Privacy Policy explains how Solis (“Solis,” “we,” or “us”) handles personal information in connection with the Solis settlement platform (the “Service”). It should be read together with the Solis Terms of Use. By accessing or using the Service, you acknowledge this Policy. Solis is designed to collect as little personal information as possible.
2. Information We Collect
2.1 Matter information entered through the Service.
To create and administer a Matter, a Neutral (or, in a peer-to-peer configuration, a party) enters information about the participants — their names, email addresses, and wallet addresses — together with the settlement amount, any Neutral fee, the dispute description, and the deadlines. Where a Neutral enters information about another person, the Neutral represents that it is authorized to do so (Terms of Use, Section 4.5). This is the information we use to generate and deliver the settlement materials.
2.2 Access and authentication.
To access the Service, you sign in either with an email address, to which we send a one-time verification code, or by choosing “Continue with Google.” We use your email address to authenticate you and to send Matter-related invitations and notifications.
If you choose “Continue with Google,” Google shares with us basic Google account information, including your name, email address, and Google account identifier, so that we can create and authenticate your session. We use that information only to sign you in and to operate the Service; we do not request or access your Google contacts, files, calendar, or other Google content. Google’s handling of your information is governed by Google’s Privacy Policy (policies.google.com/privacy), and your use of Google sign-in is subject to Google’s terms. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
2.3 Information recorded on the blockchain.
When a Matter is funded and settled, information is recorded on the public Ethereum blockchain — including wallet addresses, amounts, timestamps, transaction identifiers, and a settlement digest. This information is public and permanent, is not controlled by Solis, and cannot be changed or deleted. See Section 5.
2.4 Cookies and analytics.
The Service uses essential first-party cookies to keep you signed in — for example, a session cookie named “solis_token” used for authentication. These cookies are necessary to operate the Service; they are not used for advertising or for cross-site tracking. With your permission, we also use Google Analytics on public website pages to understand aggregated usage and improve the Service. Analytics is not intended to collect Matter, invitation, Agent API key, signature, or transaction-authorization data. Our Cookies Policy describes the cookies involved, Google’s role as our analytics provider, retention, and how to withdraw your choice.
2.5 Security and operational logs.
Solis maintains security and operational logs — such as records of logins, notifications sent, payments and blockchain transactions associated with a Matter, and system and security events — to authenticate users, operate and secure the Service, detect and prevent abuse, and support its record-keeping needs.
2.6 Information we do not collect.
Beyond the information described above, Solis does not collect personal information for advertising or cross-site tracking, and it does not sell personal information.
3. How We Use Information
We use the information above only to operate the Service: to create and administer Matters; to generate the settlement agreement and deliver it, along with invitations and notifications, to the parties; to authenticate users; to operate, maintain, and secure the Service; and to comply with applicable law.
4. How We Share Information
We share information only as needed to provide the Service:
- With the parties to a Matter — each party to a Matter can see the Matter’s participants, terms, and settlement agreement.
- With service providers — vendors that help us operate the Service, such as email delivery and hosting, under obligations of confidentiality and limited to what they need to perform their function.
- On the public blockchain — as described in Section 5; this information is inherently public.
- For legal and safety reasons — where required by law or legal process, or to protect the rights, safety, or integrity of the Service, our users, or others.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
5. On-Chain Information Is Public and Permanent
Information written to the blockchain — including wallet addresses and settlement amounts — is public, permanent, and outside our control. It cannot be edited or deleted, including in response to a deletion request. You should not enter into a Matter any information you are unwilling to have recorded publicly on-chain. Wallet addresses are pseudonymous but may be correlated with real-world identity through external information.
6. Data Retention
We retain the off-chain information we hold — such as the settlement agreement, the parties’ electronic signatures, account email addresses, and operational and security logs — for up to three (3) years, after which we delete or de-identify it, unless a longer period is required to meet a legal, evidentiary, or record-keeping obligation. Information recorded on the blockchain cannot be deleted.
7. Security
We use reasonable technical and organizational measures designed to protect the information we hold. No system is completely secure, however, and we cannot guarantee absolute security. You are responsible for the security of your own wallet, private keys, and login credentials.
8. Your Rights and Choices
You may contact us to access, correct, or request deletion of the off-chain personal information we hold about you. Information recorded on the blockchain cannot be deleted. Depending on where you live, you may have additional rights, described below.
8.1 Disclosures for EEA and United Kingdom Data Subjects.
The Service is not directed to any particular country, but it is available to users worldwide. If you are in the European Economic Area (EEA) or the United Kingdom, the following disclosures apply to the personal data we process about you.
Bases for processing. Our bases for processing your personal data include: (i) performance of a contract with you, or steps taken at your request before entering into one - for example, to create and administer a Matter and deliver the settlement materials; (ii) our legitimate interests, or those of a third party, where not overridden by your interests or rights - for example, to operate, secure, and improve the Service and to prevent fraud and misuse; (iii) compliance with a legal obligation; and (iv) your consent, where we ask for it for a specific purpose, which you may withdraw at any time.
Your rights. Your rights under the General Data Protection Regulation (GDPR) include the right to access and obtain a copy of your personal data; to request rectification of inaccurate data; to request erasure; to restrict or object to certain processing; to data portability; and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local supervisory authority.
On-chain data. We cannot alter or delete information recorded on a public blockchain, including wallet addresses, settlement amounts, and transaction data. Those records are outside our control and are not affected by a rectification or erasure request (see Section 5).
Data entered by a Neutral. Where a Neutral enters personal data about you (such as your name, email, and wallet address) so that you can participate in a Matter, we process that data to deliver the settlement materials to you and to operate the Service. You may exercise the rights above by contacting us.
Exercising your rights. To exercise any of these rights, contact us at legal@solis.network. We may need to verify your identity, and we may retain information as necessary to comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements.
8.2 California (CCPA / CPRA).
If you are a California resident, you have rights to know, delete, and correct your personal information, and to opt out of its sale or sharing. Solis does not sell or share personal information as those terms are defined under California law.
9. International Transfers
Solis and its service providers may process information in the United States and other countries, which may have different data-protection laws than your own.
10. Children
The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.
11. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will post the updated Policy with a revised effective date and, where appropriate, provide additional notice. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.
12. Contact Us
Questions about this Policy or the information we hold may be directed to Solis at legal@solis.network.