Your work. Your data.
A clear account of what Solmare processes, why it does so and the choices available to you.
Who is responsible
Solmare Digital LLC operates Solmare and is the controller of the personal data described in this notice. This notice covers the website, studio, account, API and MCP service, including when Brazilian data protection law (LGPD) applies.
Our contact for privacy and data rights is support@solmare.ai. Commercial inquiries can be sent to sales@solmare.ai.
The information the service uses
- Account and access. Name, email, a password hash, account identifiers, sign-in sessions and API key names, prefixes, permissions, validity and last-use records. Original passwords and full API keys are not stored as readable values in the account database.
- Service activity. Prompts submitted for generation, image settings, job status, generated files and token transactions when generation is enabled. The private library is not automatically published in the inspiration gallery.
- Payments and support. If billing is enabled: order amounts, package choices, subscription status and payment references. If you contact us: your sender address, message and any details you choose to share. Solmare does not store full card numbers.
- Security and delivery. Requests expose technical connection information, including IP addresses, to the infrastructure serving the website. The application uses protected identifiers derived from IP addresses, emails or account IDs to limit abusive requests.
Do not include sensitive personal data, confidential client information or another person’s data in a prompt without an appropriate lawful basis. Solmare accounts are intended for adults aged 18 or over.
Purposes and legal bases
When the LGPD applies, the legal basis depends on the purpose, rather than on a general acceptance of this notice.
| Purpose | Data involved | LGPD basis |
|---|---|---|
| Provide the account and requested service | Account, sessions, API metadata, generation requests and support | Contract or steps requested before a contract — art. 7, V |
| Process purchases, when available | Customer, order, subscription and payment references | Contract — art. 7, V; legal obligations where applicable — art. 7, II |
| Protect accounts and limit abuse | Technical identifiers, access and rate-limit records | Legitimate interest, subject to necessity and your rights — art. 7, IX |
| Handle rights requests and legal matters | Request details and relevant account or transaction records | Legal obligations — art. 7, II; exercise of rights in proceedings — art. 7, VI |
Optional activities that require consent must offer a separate choice. Viewing this page or using an essential sign-in cookie does not authorize advertising or unrelated use of your data.
Cookies and drafts on your device
The essential solmare_session cookie keeps you signed in for up to 14 days. It uses Secure, HttpOnly and SameSite protections. Signing out removes the current session. Blocking this cookie prevents signed-in features from working. The current application does not include advertising cookies or an analytics tracker.
The campaign planner keeps your work in page memory by default. Choosing “Save in this browser” stores the draft only in that browser, until you delete it with “Delete saved draft” or clear the site’s browser data. Saved drafts may be visible to other people using the same browser profile. Copying or downloading a brief creates a copy you control.
“Use description in studio” passes the description through browser session storage. The transfer entry is removed when read, and the description becomes part of your studio draft. Planning, saving or transferring this draft does not itself send a generation request. Submitting a generation in the studio is a separate action.
The studio automatically keeps your description, image settings and pending request references in this tab’s session storage so you can recover after reloading. Passwords, API secrets and payment-card details are not saved there. Work is restored only after checking the current account and is cleared when you sign out or change accounts. You can discard a draft when no generation is pending, or clear the site’s browser data. Avoid leaving your account open on shared devices.
Providers and international processing
Hosting and content delivery providers, including Cloudflare infrastructure, process information necessary to operate the service. When image generation is activated, the configured image provider receives the prompt and image settings, and generated files are stored through the storage provider. When payments are activated, Stripe handles checkout and payment information. These providers’ roles depend on the service and their contractual terms.
A private library limits public access; it does not mean that no provider processes your content. Do not infer a no-training commitment from the word “private”. Provider-specific retention and model-training terms must be checked when a generation provider is introduced.
Infrastructure may process data outside Brazil. The destination countries, recipients and applicable transfer safeguards depend on the providers in use. Contact our privacy channel for information about your data. Provider details and international-transfer information must be updated before additional processing is activated; this notice does not assert that a specific transfer mechanism has already been implemented.
Retention and protection
Retention is assessed according to the purpose of each record: operating an active account, keeping requested service history, handling support or disputes, and meeting applicable legal obligations. There is no published fixed retention period for all account records, prompts, images, payment records or backups. We do not promise that every record is deleted immediately when an account closes or a request is received.
Access controls, password hashing, scoped API keys and protected session cookies are implemented in the service. These controls do not eliminate all security risks. API keys can be revoked in the studio. For account closure or deletion, contact support; there is currently no self-service account deletion control.
Your rights and how to request them
When applicable, you may request confirmation, access, correction, portability, information about sharing, and anonymization, blocking or deletion of unnecessary or unlawfully processed data. You may withdraw consent, seek deletion of consent-based data subject to legal exceptions, oppose unlawful processing, and request review of solely automated decisions affecting your interests.
Email us from your account address when possible and describe your request. We may ask for proportionate information to verify identity or representation; do not send identity documents in the first message. Requests are free and handled according to applicable legal requirements. We will explain any lawful limits to a request.
Prepare a privacy requestYou may also contact the ANPD or the relevant consumer protection authority. See the ANPD’s explanation of data rights.
Updates to this notice
We will revise this notice when the service or its data practices change. The date above identifies this version. Material changes that require notice or a new choice must be communicated as required by applicable law. Contact our privacy channel if you need clarification about a previous version.