Solara
Privacy Policy
The short version: your files are end-to-end encrypted on your device. We cannot read, scan, decrypt, or sell your file contents — not for ads, not for AI, not on request. We hold ciphertext only.
1. What we cannot see
File contents, filenames, and folder structure are encrypted client-side before they reach us. We have no technical ability to access them. Your encryption keys are derived on your device and never transmitted.
2. What we do process
- Wallet address — your identity on the Service and the target of any paid storage entitlement.
- Payment data — handled by our processor, Polar (and its processor, Stripe). We receive confirmation of payment and the wallet you provided, not your full card details.
- Encrypted object sizes and timestamps, and minimal operational logs (e.g. IP address for rate-limiting and abuse prevention), retained for a limited period.
- On-chain data — file integrity hashes, opaque storage keys, and byte sizes are written to the public Khromosome ledger. These reveal that a file of a size exists for an address; they do not reveal contents, names, or types.
3. What we never do
We do not sell or rent your data. We do not use your files to train AI. We do not run advertising.
4. Sharing
We share data only with our payment processor (to take payment) and where required by law. Because we cannot decrypt your files, we cannot disclose their contents to anyone, including under legal process.
5. Cookies
We use only essential storage (e.g. to keep you signed in). We do not use third-party advertising or tracking cookies.
6. Your rights
You may delete your stored data at any time (performed cryptographically and by removing ciphertext). For payment records held by our processor, contact us and we will assist with access or deletion requests as required by applicable law (e.g. GDPR/CCPA).