1. Scope and responsible entity
This policy applies to the Solazis AI web application and its browser extension. Before public launch, the founder must insert the operating legal entity, postal address, jurisdiction, and a monitored privacy/support email. Until those details are published, this document is a product-accurate draft, not a legally final notice.
2. Information we collect
Account and business information
We process your email, authentication identifiers, business names, selected business, compliance profile details, and—once the phone migration is deployed—the phone number you provide at signup. Password authentication is handled by Supabase Auth.
Product and listing information
We process product names, categories, SKUs, costs, prices, dimensions, seller-confirmed attributes, listing copy, compliance fields, vendor details, and product photos. AI-generated photos are labelled separately in the product record.
Financial and operational information
When you upload Meesho settlement reports, we process report filenames, order identifiers, event dates, settlement amounts, fees, returns, advertising costs, TCS/TDS entries, product costs, and unmatched source rows so the Profit & Loss tools can provide traceable calculations.
Marketplace and trend observations
The extension can send product names, URLs, images, prices, ratings, review counts, seller names, search positions, listing details, reviews, and observation dates from Meesho pages you choose to scan. Research runs also store your brief, query plan, progress events, candidate evidence, images, scores, and final ranks.
Security and technical information
We process necessary session cookies, the selected-business cookie, IP-derived rate-limit keys, request errors, and extension-credential metadata. Raw extension tokens are shown once; only a SHA-256 hash, label, creation time, and last-used time are stored.
3. Meesho credentials and browser sessions
Solazis does not request or store your Meesho password. The extension operates in your own browser while you are already signed in to Meesho. It reads and sends the specific page information needed for the feature you invoke. You should revoke an extension token from Settings if a browser or device is no longer trusted.
4. How we use information
- Provide authentication, business switching, products, listings, profit reports, and trend research.
- Generate and validate listing copy or product-image suggestions.
- Calculate ledger and profit results from the data you supply.
- Collect and rank marketplace observations requested through the extension.
- Prevent abuse, rate-limit sensitive routes, investigate failures, and protect accounts.
- Respond to export, deletion, security, and support requests.
5. Service providers and disclosures
Supabase provides authentication, PostgreSQL database services, and private file storage. OpenAI processes the product images, product facts, listing inputs, or research material needed for the AI feature you request. The deterministic profit and ledger calculations do not need to send your settlement report to OpenAI. Meesho remains a separate marketplace whose pages and account session are controlled by you.
We do not sell personal information. Information may also be disclosed where required by law, to protect users or the service, or as part of a business transaction subject to appropriate safeguards and notice.
6. Cookies and analytics
Solazis uses necessary cookies for Supabase authentication and for remembering the business you selected. It also records a small set of first-party product events in its own database—signup, plan changes, listing creation, research dispatch, and TaxPilot export downloads—so the team can understand whether core workflows are being used and diagnose adoption problems.
The reviewed code contains no advertising tracker, third-party analytics SDK, or non-essential tracking cookie, so no cookie-consent banner is currently shown. This policy and the consent approach must be revisited before any third-party analytics or marketing technology is added.
7. Retention and deletion
Data is retained while your account is active and as needed for service operation, security, legal obligations, and dispute handling. Product photos, reports, research history, and business records should be deleted or anonymised when an account-deletion request is completed, subject to required retention and backup cycles. The exact production retention schedule must be set before launch.
8. Security
Current controls include Supabase row-level security, seller/business query scoping, private image storage, hashed extension tokens, restricted extension CORS origins, server-only API secrets, and authenticated dashboard routes. No system is perfectly secure; contact instructions for reporting a suspected incident must be added before launch.
9. Your choices and rights
You may correct product and business information in the service, revoke extension credentials, and request access, export, correction, or deletion of your account data. Applicable law may provide additional rights. Solazis must publish a monitored request channel and a response process before accepting outside subscribers.
10. International processing, children, and changes
Supabase, OpenAI, or other infrastructure may process data outside your country. Appropriate regional disclosures and transfer terms require legal review. Solazis is a business tool and is not directed to children. Material policy changes should be communicated through the product or registered email and reflected in the date above.