Privacy Policy
Last Updated: July 2026
Solveaux is a premium platform for sharing reasoning logs, research references, breakthrough posts, collaborative spaces, and organizational intelligence tools (including Architecture Decision Records, Projects, and team management). We believe you should have absolute clarity, visibility, and control over how your data is collected, stored, and utilized.
Your reasoning logs, breakthrough posts, research logs, and spaces entries belong strictly to you. You can export or delete your profile at any time.
We explicitly catalog the exact data items we capture, where they are saved, and map them to their corresponding GDPR legal bases.
We do not use tracking or behavioral advertising cookies. Local storage parameters are strictly operational for credentials and feed personalization.
1. Information We Collect
To provide our technical workspace, Solveaux collects specific sets of personal data and usage details. We structure this data into three primary tiers: directly provided profile data, user-generated workspace content, and automated feed interaction events.
| Category | Data Points | Purpose of Processing | GDPR Legal Basis | Retention Period |
|---|---|---|---|---|
| Account Auth | Email address, username, hashed password (if email auth), GitHub/Google profile metadata (if SSO) | Secure authentication, session management, unique account identification, and profile setup. | Art. 6(1)(b) (Contract Performance) | Until account closure |
| Profile Details | Display name, professional biography, custom configurations | User profiles display, workspace customizing, community networking. | Art. 6(1)(b) (Contract Performance) | Until account closure or user deletion |
| User Content | Reasoning logs, Breakthrough posts, Research logs, Spaces entries, comments | Core platform features (publishing entries to spaces, hosting feed content, discussions). | Art. 6(1)(b) & (f) (Contract Performance & Legitimate Interest) | Until manual deletion by creator or account removal |
| Organization Data | Organization name & description, member roles (Owner/Admin/Member/Guest), Architecture Decision Records (ADRs), project milestones, invite tokens | Powering premium organization features: private team workspaces, role-based access control, ADR tracking, and milestone management. | Art. 6(1)(b) & (f) (Contract Performance & Legitimate Interest) | Until organization is dissolved or member leaves/is removed |
| Feedback Desk | Name, email, star rating, feedback text, user ID, offline database cache | Troubleshooting, resolving technical bugs, improving UX functionality. | Art. 6(1)(f) (Legitimate Interest) | Up to 2 years after resolution |
| Interactions | Likes, votes, comments, shares, views, hashtag clicks, card expansion actions | Calculates community reputations and runs feed recommendation weights. | Art. 6(1)(f) (Legitimate Interest) | Locally cached or active with account lifespan |
2. Cookies & Browser Storage Disclosures
Solveaux does not run third-party advertising cookie trackers. We only save cookies or local storage data parameters that are strictly required for security, platform operation, or feed personalization:
- Authentication & Session Management: We utilize cookies prefixed with
sb-*(managed by Supabase) to securely authenticate user logins and keep active sessions alive. - Feed Personalization Vectors: We store anonymous preference scoring vectors locally in your browser's storage under keys
solveaux_topic_interestsandsolveaux_author_affinity. These vectors assign mathematical weights based on your interactions to personalize your feed display. - Feedback Desk Offline Fallback: The key
feedback_offline_cachecaches your feedback form input locally if your network connection is interrupted, ensuring no data loss.
You can block, clear, or modify these browser storage objects at any time by accessing your browser's data settings or deleting your local storage cache. Clearing this data will immediately reset your feed recommendations back to standard chronological order.
3. How We Use Data
We use collected information solely for operating, troubleshooting, and improving the platform. We strictly apply data minimization principles. Specifically, your data is processed to:
- Provide user account creations, logins, and profile customizations.
- Process published workspace entries (Reasoning Logs, Breakthroughs, Research Logs, and Spaces entries).
- Calculate individual reputation score tiers and generate sorted feeds.
- Fulfill customer support responses or address bug tickets submitted through the Feedback Desk.
- Protect against unauthorized scraping operations, malicious scripting, and spam.
- Operate premium Organization features including private team workspaces, role-based access control, Architecture Decision Records, and project milestone tracking.
- Manage organization membership, process invite tokens, and enforce member role permissions on behalf of organization owners and admins.
Solveaux is currently ad-free. While we do not display third-party advertisements on the platform today, this policy may be updated in the future to introduce monetization options, in which case we will notify users of changes. We never sell, lease, or distribute your identity, metadata, or workspace content to third-party data brokers or marketing lists.
4. Third-Party Subprocessors
To provide the platform, we utilize highly-secured external subprocessors. Subprocessors are strictly bound by confidentiality and data processing contracts to prevent unauthorized sharing of your metrics.
Hosts user tables, email credentials, session tokens, and workspace entries securely in encrypted database instances.
Authenticates user identity, validates authorization tokens, and populates GitHub OAuth user metadata.
Authenticates user identity, validates authorization tokens, and populates Google OAuth user metadata.
Queries academic publication titles, authors, and citation data. No credentials or user identifiers are shared with Crossref.
Queries academic publication titles, authors, and citation data. No credentials or user identifiers are shared with DataCite.
5. GDPR & CCPA Rights
Depending on your residency (such as the EU under GDPR, or California under CCPA/CPRA), you possess distinct legal rights regarding how we process your personal data:
You can request details of the personal data we hold about you and receive it in a structured, commonly-used format.
You have the right to request modification of inaccurate or incomplete personal information associated with your workspace profile.
You may request complete erasure of your authenticated account records and custom-generated entries from active storage instances.
You can object to, or request the restriction of, our legitimate interest operations (e.g. disable algorithmic feed scoring).
To exercise any of these rights, contact us at solveaux@gmail.com. We will verify your identity and resolve your request within a reasonable timeline.
6. Security & Data Retention
We use industry-standard measures (including SSL/TLS communication layers, database encryption at rest, and strict server access controls) to prevent data corruption or unauthorized disclosures.
We retain account records and user content as long as your profile remains active. When you delete a post or request account removal, associated data is deleted from our active production database. Deleted records may linger in encrypted database backup archives for a maximum of 30 days before being completely rewritten.
7. Children's Privacy (COPPA)
Solveaux is not designed or intended for individuals under the age of 13. We do not knowingly compile or track personal data from children under COPPA guidelines. If we identify that a minor has created an account without appropriate authorization, we will take immediate steps to remove their data.
8. Contact & Support
For data queries, deletion requests, or questions regarding this Privacy Policy, please reach out via our contact channels: