Solo AI, Inc. – Privacy Policy

Effective Date: November 18, 2025

1. Introduction

Solo AI, Inc. ("Solo") is a technology company headquartered in San Diego, California that provides software tools enabling teams to transform their codebase into a searchable knowledge base to improve product support, onboarding, and internal enablement.

We are committed to protecting your personal data and respecting your privacy rights under the EU General Data Protection Regulation ("GDPR"), the UK GDPR, the California Consumer Privacy Act ("CCPA"), and other applicable data protection laws. This Privacy Policy explains how we collect, use, store, transfer, and protect personal data, and how you can exercise your rights.

Solo may update this Privacy Policy periodically. Where changes are material, we will notify you by email or via a prominent notice on our website. The current version is always available at asksolo.ai.

2. Data Controller and Privacy Contact

Solo AI, Inc. is the data controller for personal data collected through our website and Services. We have appointed a privacy contact responsible for overseeing compliance with this policy and data protection law. To exercise your rights or raise concerns, contact:

Asher Smith-Rose

Solo AI, Inc.

4762 1/2 W Point Loma Blvd, San Diego, CA 92107

Email: asher@asksolo.ai

We aim to respond to all privacy inquiries within 30 days. For complex requests, we will notify you of any extension.

3. Lawful Bases for Processing

Under GDPR Article 6, we process personal data only where we have a lawful basis. The bases we rely on are:

• Contract performance (Art. 6(1)(b)): To provide, support, and administer the Services you have contracted for.
• Legitimate interests (Art. 6(1)(f)): To improve our products, secure our systems, and understand how the website is used, where these interests are not overridden by your rights.
• Consent (Art. 6(1)(a)): For marketing communications and non-essential cookies, where we have obtained your explicit opt-in consent.
• Legal obligation (Art. 6(1)(c)): Where processing is required to comply with applicable law.

We conduct Legitimate Interests Assessments (LIAs) when relying on legitimate interests and document these internally. You may request a copy by contacting us.

4. Personal Data We Collect

4.1 Information You Provide

When you interact with Solo as a prospect, customer, or user, we may collect:

• Name
• Employer name
• Work email address
• Any personal data you include in communications with us
• Integration identification data (Slack ID and Name)

4.2 Information Collected Automatically

When you visit asksolo.ai, we automatically collect:

• IP address and approximate location (city/region level)
• Browser type and version, device type, and operating system
• Pages visited, time spent, and referring URLs

4.3 Service Data

When you use the Solo platform, we process Service Data, which may include code, documentation, and other content you or your team input into the Services. This data is processed on behalf of you as our customer under a Data Processing Agreement (DPA). See Section 5 for more.

4.4 Third-Party Sources

We may receive limited professional information (name, job title, employer, work email) from third-party sources such as LinkedIn or referral partners, to contact you about products and services that may be relevant to you. We ensure any such data was obtained lawfully.

4.5 Cookies and Tracking Technologies

Solo uses cookies and similar tracking technologies to analyze site usage. Visitors may manage cookie preferences via the browser or through any cookie banner presented. Where non-essential cookies are used, we rely on consent as described in Section 3.

5. How We Use Your Personal Data

We use personal data for the following purposes, each tied to a lawful basis:

• Providing and administering the Services you have contracted for (contract performance)
• Responding to support requests and communicating about your account (contract performance)
• Sending product updates and onboarding materials (contract performance / legitimate interests)
• Sending marketing communications where you have opted in (consent)
• Improving product performance and user experience through aggregated analytics (legitimate interests)
• Securing our systems and preventing fraud (legitimate interests / legal obligation)
• Complying with legal and regulatory obligations (legal obligation)

We do not use personal data for automated decision-making that produces legal or similarly significant effects without human review.

6. Sharing Personal Data with Third Parties

We do not sell or rent personal data. We share personal data only in the following circumstances:

• Authorised service providers and subprocessors: Cloud hosting, analytics, and support tooling vendors who process data only as instructed by us under written confidentiality and data processing agreements.
• Legal obligations: Where required by law, court order, or regulatory authority.
• Safety and security: To protect the rights, property, or safety of Solo, our users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to the acquirer honouring this Policy.
• With your consent: For any other purpose where you have given explicit authorisation.

A list of current subprocessors is available on request or in our security documentation at asksolo.ai.

7. International Data Transfers

Solo is headquartered in the United States. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your personal data will be transferred to and processed in the US, which may not offer the same level of data protection as your home country.

We rely on the following transfer mechanisms to ensure adequate protection:

• Standard Contractual Clauses (SCCs) approved by the European Commission, incorporated into our DPAs with customers and vendors.
• The UK International Data Transfer Agreement (IDTA) for transfers from the UK.

Solo has received zero government data requests to date.

8. Your Data Subject Rights

Depending on your location, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
• Right to erasure / "right to be forgotten" (Art. 17 GDPR): Request deletion of your data where it is no longer necessary for the purpose it was collected, or where you withdraw consent.
• Right to restrict processing (Art. 18 GDPR): Ask us to pause processing your data in certain circumstances.
• Right to data portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): Object to processing based on legitimate interests or for direct marketing purposes.
• Rights related to automated decision-making (Art. 22 GDPR): Not to be subject to solely automated decisions that significantly affect you.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You have the right to complain to your local supervisory authority. In the EU, this is your national data protection authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, please submit a request using this link. We will respond within 30 days and may need to verify your identity before fulfilling the request. We will not charge a fee for reasonable requests.

California residents also have rights under the CCPA, including the right to know, delete, and opt out of the sale of personal information. Solo does not sell personal information. To submit a CCPA request, use this link.

9. Security of Your Information

Solo maintains appropriate administrative, technical, and physical security controls designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit and at rest, access controls, and regular security reviews.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected individuals and the relevant supervisory authority within the timeframes required by applicable law (72 hours under GDPR).

10. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, or as required by law. Our retention guidelines are:

• Customer service data: Retained for the duration of the contract, then securely deleted within 30 days of contract termination.
• Legal and compliance records: Retained for as long as required by applicable law.

You may request deletion of your personal data at any time by contacting asher@asksolo.ai or by submitting a request via our Data Subject Request Form. We will action verified requests promptly and confirm deletion.

11. Data Processing Agreement

Where Solo processes personal data on behalf of a customer (for example, Service Data within the platform), Solo acts as a data processor and the customer acts as the data controller. In these cases, our processing is governed by a Data Processing Agreement (DPA) that meets GDPR Article 28 requirements.

Customers may request our standard DPA at asher@asksolo.ai.

12. Children's Data

Solo does not knowingly collect or process personal data from individuals under the age of 16. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Where changes are material, we will notify you by email or by posting a notice on our website.

14. Questions, Concerns, or Complaints

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Solo AI, Inc. – Privacy

4762 1/2 W Point Loma Blvd, San Diego, CA 92107

Email: asher@asksolo.ai