Data & Privacy

The short version

• Businesses you interact with are the controllers of your data; Solys AI processes it on their behalf
• Conversations with a Solys-powered assistant are stored so the assistant can remember you across channels and so the business can serve you
• Marketing follow-ups are consent-gated — you are never enrolled in a marketing sequence without explicit consent, and replying STOP ends them immediately
• Appointment reminders are transactional and tied to an appointment you booked
• We do not sell personal data. Ever.

Where your data lives

Data is stored in our managed database (Supabase/PostgreSQL) with encryption in transit and at rest. Sensitive credentials are additionally encrypted at the application layer (AES-256). Short-lived conversation state is held in an in-memory store (Redis) and expires automatically; the database is the source of truth. Our infrastructure providers are listed in the Privacy Policy.

How long we keep it

Jamaica's Data Protection Act requires that personal data be kept no longer than necessary for the purpose it was collected, and disposed of securely in line with the Data Protection (Disposal of Personal Data) Regulations, 2024. Our standard retention schedule:

• Conversation transcripts and lead records — retained while you remain an active contact of the business; where a business account is closed, deleted within 30 days
• Inactive contacts — where a contact has had no interaction for 24 months, their identifiable data is scheduled for deletion or anonymisation, unless the business is subject to a longer statutory retention duty (for example, healthcare record-keeping obligations) or the data is needed for a legal claim
• Consent and opt-out records — retained longer than the data they relate to, as proof of compliance
• Security and audit logs — retained up to 12 months

Your rights

Under the Data Protection Act, 2020 you may:

• Access — ask what personal data is held about you (we respond within 30 days)
• Rectify — have inaccurate data corrected, blocked, erased, or destroyed
• Object to direct marketing — an absolute right; reply STOP or email us and all marketing stops
• Prevent processing likely to cause unwarranted damage or distress
• Not be subject to purely automated decisions with significant effects — booking and reminder logic never makes such decisions

To exercise any right, contact the business you interacted with, or email us directly at privacy@solysai.com and we will route the request to the controller and assist in fulfilling it.

AI transparency

Solys assistants identify themselves as AI. Conversations may be processed by large language model providers (Anthropic) to generate responses; transcripts are not used by Solys to train foundation models. Speech on voice calls is transcribed to text to power the assistant.

For business clients: deleting your account

You can delete your Solys AI account from Settings → Danger zone in your CRM dashboard. Deletion permanently removes your business profile, all leads, conversations, bookings, sequences, knowledge base content, and connected-channel credentials, and revokes any Google account connections. This is irreversible. Export anything you need first.

Policies index

• Privacy Policy — full legal detail
• Terms of Service
• Cookie Policy
• Acceptable Use Policy
• Report Abuse
• Law Enforcement Guidelines

Contact