Privacy Policy

Effective Date: March 13, 2026

Solant — AI-Powered Productivity OS for Founders

This Privacy Policy describes what personal data Solant collects, how it processes it, and what rights you have as a user. Please read it carefully. If you have any questions, contact us at privacy@solant.ai.

Table of Contents

1. Intro

2. About Us

3. About You

4. Sources of Data

5. Lawful Bases for Processing

6. Personal Data in Solant

6.1. Information About You

6.2. Technical Data

6.3. Gmail Integration

6.4. Solant AI Features

6.5. Customer Support Requests

6.6. Feedback Data

7. Data Retention

8. Data Received from Third Parties

9. Data Shared with Third Parties

10. Data Sharing Outside the EEA

11. Google API User Data — Limited Use

12. Security Measures

13. Data Subject Rights

14. Privacy Policy Updates

15. Contact Us

1. Intro

Solant L.L.C-FZ (“we”, “our”, or “us”) welcomes you. We provide you with access to the Solant mobile application (“App” or “Solant”), an AI-powered productivity operating system designed for founders.

This Privacy Policy describes what personal data the App collects, how it processes it, and what happens when you interact with the App. We understand you care about your privacy, and we appreciate the trust you place in us. To justify that trust, we embed industry-standard data security practices, improve our awareness of privacy matters, and comply with the General Data Protection Regulation (GDPR) and UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

When you use the Solant App on iOS or Android, your personal data is processed in accordance with this Privacy Policy.

If you have any questions about this Privacy Policy or the App, please contact us at privacy@solant.ai.

2. About Us

Biometric Authentication

Solant supports biometric authentication (Face ID and Touch ID) as an optional way to unlock the App. This feature is provided entirely by your device's operating system (iOS or Android). Solant does not access, process, or store any biometric data. All biometric verification is handled locally on your device by Apple or Google technology, and Solant only receives a pass/fail authentication result.

Controller

We are the controller of your personal data processed in connection with the App. This means that we determine the purposes and means of personal data processing when you use Solant.

Processor

In certain circumstances, we may act as a data processor for business customers, processing data they entrust to us on their behalf. If this applies, please refer to our Data Processing Agreement (available upon request at privacy@solant.ai).

3. About You

When you access the App, you become our user (“User”). Solant is designed for professional use by founders and business leaders. We do not knowingly process personal data of users under the age of 18. If you are under 18, or a legal representative of such a person, please contact us at privacy@solant.ai and we will promptly delete any inadvertently collected data.

4. Sources of Data

We collect data in the following ways:

• Directly from you — when you create an account or contact support

• Automatically — when you use the App (e.g., usage analytics, crash logs)

• From third-party services — when you connect Gmail to Solant

• Generated by us — for example, your unique User ID

5. Lawful Bases for Processing

To process your personal data, we rely on one of the following lawful bases as defined under the GDPR and other applicable privacy laws:

• Performance of a contract — for data processing necessary to provide the Solant service to you under our Terms of Service

• Legal obligation — when we are required to process data by applicable law (e.g., responding to lawful requests from public authorities)

• Legitimate interests — for processing necessary to improve the App, ensure security, and develop our service, taking into consideration your rights and expectations

• Consent — for specific processing activities where we ask for your explicit agreement, such as connecting third-party integrations or processing data for AI features

6. Personal Data in Solant

We collect your personal data when you access or use the App. The specific data collected depends on which integrations you connect and which features you use. The data retention rules are described in Section 7.

6.1 Information About You

To use Solant, you create an account using your email address. We do not store your passwords — authentication is managed via OAuth tokens.

6.2 Technical Data

When you use Solant, we automatically collect or generate certain technical data.

6.3 Gmail Integration

When you connect Gmail, you will see Google's OAuth consent screen listing the following specific permissions. You can review and approve or deny each permission before proceeding.

• userinfo.email, userinfo.profile – account identification (non-sensitive)

• gmail.labels – read label names for mailbox organization (non-sensitive)

• gmail.send – send emails on your behalf (sensitive)

• gmail.readonly – read email content and metadata (restricted)

• gmail.metadata – read email headers and metadata (restricted)

Email data is stored on Solant's servers to enable features such as AI prioritization, inbox state management, and quick reply. Upon disconnecting Gmail, your OAuth tokens are revoked immediately. Previously stored email data is retained until you delete your Solant account or exercise your right to erasure (see Section 13).

Solant's use of Gmail data complies with the Google API Services User Data Policy, including the Limited Use requirements. See Section 11 for full details.

6.4 Solant AI Features

General

To provide AI-powered features (inbox prioritization, quick reply, Tone of Voice), Solant uses AI models provided by Google (Gemini via Vertex AI) and GPU inference infrastructure provided by Nebius. We may update our AI providers as the product evolves and will update this Policy accordingly.

We do not use your data to train AI models. AI providers may retain your inputs for a limited period (typically up to 30 days) for abuse and safety monitoring, after which data is deleted automatically unless a longer retention period is required by law.

Tone of Voice

When you configure your Tone of Voice in Solant, we process your preferences and writing style description to personalize AI-generated drafts. This description is stored in your account and applied to all AI-generated content. You can modify or delete your Tone of Voice settings at any time in the App settings.

6.5 Customer Support Requests

When you submit a support request through Solant (via the in-app Help section, which uses FeatureBase), we collect certain information to assist you.

6.6 Feedback Data

We may contact you to request feedback about your experience with Solant. Participation is voluntary.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. We have determined retention periods based on the data minimization principles of the GDPR and other applicable regulations.

Once a retention period ends, data is permanently deleted or anonymized for statistical purposes, making it impossible to link to an individual.

8. Data Received from Third Parties

We may receive some personal data from third-party services. The scope of data collected, the purposes, and the lawful bases are determined by the respective privacy documents of these parties.

9. Data Sharing with Third Parties

We may share your personal data with third parties strictly in compliance with applicable laws and only to the extent necessary. We have implemented technical and organizational measures to protect your data during any such transfer.

We do not sell your personal data to any third party. We do not share your data for advertising or marketing purposes of third parties.

10. Data Shared Outside the European Economic Area

Solant's infrastructure is hosted on Google Cloud Platform (GCP) in the European Union. AI inference is performed on Nebius GPU infrastructure, also within the EU.

Where any transfer of personal data from the EEA to countries outside the EEA is necessary (for example, to the UAE where Solant is incorporated), we ensure that adequate protection is in place through one of the following mechanisms:

• Standard Contractual Clauses (SCCs) approved by the European Commission, where the recipient country does not have an adequacy decision

• The EU-U.S. Data Privacy Framework, where applicable

• Adequacy decisions by the European Commission, where applicable

You may request a copy of the applicable transfer mechanism by contacting us at privacy@solant.ai.

11. Google API User Data — Limited Use

This section is required by Google's API Services User Data Policy and applies specifically to data received through Google APIs (Gmail).

Solant's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the features of Solant that are directly visible and useful to you.

• We do not transfer or disclose Google user data to third parties except: (a) as necessary to provide the Solant service and only under strict data processing agreements; (b) for security purposes; or (c) as required by law.

• We do not use Google user data for advertising purposes, or to serve ads, including retargeting.

• We do not allow any human to read your Google user data unless: (a) we have your explicit permission; (b) it is necessary for security purposes such as investigating abuse; or (c) we are required to do so by applicable law.

• We do not use Gmail data to train AI models.

• Your use of Google user data within Solant is subject to these restrictions regardless of any other provision in this Privacy Policy.

You may revoke Solant’s access to your Google account at any time via myaccount.google.com → Security → Third-party apps with account access.

12. Security Measures

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, loss, or misuse.

13. Data Subject Rights

If you are located in the European Economic Area or the United Kingdom, you have the following rights under the GDPR (or UK GDPR):

To exercise any of these rights, contact us at privacy@solant.ai. We will respond within one (1) month. In complex cases, we may extend this by an additional two months and will notify you accordingly.

14. Privacy Policy Updates

We may update this Privacy Policy from time to time as Solant evolves or as legal requirements change. When we make material changes that affect your privacy rights, we will notify you:

• By email to the address associated with your account, at least 14 days before the changes take effect

• Through a notice in the Solant App

The effective date at the top of this document reflects the date of the most recent revision. If you continue to use Solant after the updated Privacy Policy takes effect, you are considered to have read and accepted the revised terms.

You can always find the current version of this Privacy Policy within the Solant App under Settings → About → Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to us:

We are committed to resolving any concerns you have about your privacy. If after contacting us you feel your concern has not been adequately addressed, you have the right to lodge a complaint with your local data protection authority as described in Section 13.