Legal

Privacy Policy

Last updated: 10 April 2026

1. Introduction

SolverX (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data when you use the SolverX website, browser extension, Discord bot, or any associated services (collectively, the “Service”).

2. Data We Collect

We collect the minimum data necessary to operate the Service:

2.1 Account Data

When you sign up or log in via a third-party provider (e.g. Discord, Google), we receive and store your user ID, display name, email address, and avatar URL as provided by that authentication provider.

2.2 Platform Credentials

If you choose to link third-party educational platform accounts, you provide those credentials voluntarily. Credentials are encrypted at rest using AES-256 encryption and are used solely to perform the actions you request. We never share, sell, or expose your credentials to any third party.

2.3 Usage Data

We collect basic usage metrics such as the number of tasks completed, timestamps, and feature usage patterns. This data is used for service improvement and abuse prevention only.

2.4 Payment Data

Payments are processed entirely by Stripe. We do not store your card number, CVV, or full billing details. We retain only your Stripe customer ID and transaction status for order fulfilment and support purposes.

3. How We Use Your Data

  • To provide and operate the Service.
  • To authenticate your identity and manage your account.
  • To process payments and verify licence status.
  • To perform the automated tasks you explicitly request (e.g. solving homework on linked platforms).
  • To detect and prevent abuse, fraud, and violations of our Terms of Service.
  • To improve the Service through aggregated, anonymised analytics.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We may share limited data with:

  • Stripe — for payment processing (subject to Stripe's Privacy Policy).
  • Supabase — for authentication and database hosting (data stored in secure, SOC 2-compliant infrastructure).
  • Cloudflare — for CDN, DDoS protection, and DNS routing. Cloudflare may process request metadata (IP addresses, headers) in transit.

We will disclose data if required by law, court order, or governmental regulation.

5. Data Storage & Security

Your data is stored on encrypted servers protected by firewalls, intrusion detection, and access controls. Platform credentials are encrypted using AES-256 before storage. Access to production systems is restricted to authorised personnel only. Despite our best efforts, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g. fraud prevention, financial records). Anonymised, aggregated data may be retained indefinitely.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (“right to be forgotten”).
  • Object to or restrict certain processing of your data.
  • Data portability — receive your data in a structured format.
  • Withdraw consent at any time (where processing is based on consent).

To exercise these rights, contact us via our Discord server.

8. Cookies & Local Storage

We use essential cookies and local storage to maintain your authenticated session and store user preferences. We do not use third-party advertising or tracking cookies. Session cookies are httpOnly and secure in production, with a maximum lifespan of 7 days.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete it promptly. If you are a parent or guardian and believe your child has provided us with data, please contact us via Discord.

10. International Data Transfers

Your data may be processed in countries outside your own, including the United States and the European Economic Area. We ensure appropriate safeguards are in place for any international transfers, consistent with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via our Discord server or through a notice on the Service. Continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact

For any privacy-related questions or requests, please reach out via our Discord server.