Privacy Policy

This Privacy Policy explains how Solace ("Solace," "we," "us," or "our") collects, uses, discloses, and protects information when you use the Solace application at solacent.com and related services (the "Service"). The Service is operated by Rucksack Productions, a Delaware corporation.

By creating an account or using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

1. Who this Policy covers

Solace is a business-to-business film and television development tracking tool used by production companies and studios. Our customer is the organization ("Tenant") that subscribes to the Service. Individuals who use the Service do so as members, administrators, or invited collaborators of a Tenant.

Where a Tenant uploads or inputs personal information about third parties (for example, cast, crew, contacts, or agents), that Tenant is the party responsible for that information, and Solace processes it on the Tenant's behalf. If you are one of those third parties and want your information reviewed or removed, please contact the Tenant that entered it, or reach us at the address below and we will help route your request.

2. Information we collect

Account information. When you sign up, we collect your name, email address, and authentication credentials. If you sign in with Google, we receive basic profile information (name, email, and account identifier) from Google; we do not receive or store your Google password.

Payment information. Subscriptions are billed through Stripe, our payment processor. Stripe collects and processes your payment card details directly. We do not store full card numbers; we retain only limited billing metadata such as your Stripe customer and subscription identifiers, plan, subscription status, and renewal dates.

Content you provide. The Service stores the information you and your organization enter or upload, which may include project and development records, scripts and script breakdowns, scheduling and budget data, casting information and headshots, contact records, business cards, and related documents and images.

Email data (Gmail add-on). If you install and use the optional Solace Gmail add-on, the add-on reads the content of email threads and their attachments that you choose to act on, in order to detect contacts, log activity, and save material to a project at your direction. The add-on accesses email content only for the messages you open and interact with, and only to provide the features you invoke.

Usage and technical information. We collect standard technical data generated by using a web application, such as log data, device and browser information, IP address, and feature-usage events (for example, how many script breakdowns you have run in a billing period). This is used to operate, secure, and improve the Service.

Cookies. We use cookies that are strictly necessary to run the Service, primarily to keep you signed in and maintain your session. We do not use advertising cookies.

3. How we use information

We use the information described above to: provide, maintain, and secure the Service; authenticate users and enforce access boundaries between organizations; process subscriptions, trials, and payments; generate the AI-assisted outputs you request (see Section 5); provide customer support; detect, prevent, and respond to fraud, abuse, and security incidents; comply with legal obligations; and improve the Service. We do not sell your personal information, and we do not use your content to train third-party AI models except as needed to generate the specific output you request in the moment.

4. How we share information — sub-processors

We share information with a limited set of service providers ("sub-processors") who process data on our behalf to deliver the Service. Each is bound by contractual confidentiality and data-protection obligations. Our current sub-processors are:

• ·Supabase — database, authentication, and file storage.
• ·Vercel — application hosting and content delivery.
• ·Stripe — subscription billing and payment processing.
• ·Anthropic — AI processing for features such as script breakdowns, slate strategy analysis, and email drafting (see Section 5).
• ·Google — Google Sign-In authentication, and, if you use it, the Gmail add-on platform.
• ·Resend — transactional email delivery (for example, invitations, reminders, and notifications).

We may also disclose information if required by law, to comply with legal process, to enforce our agreements, or to protect the rights, property, or safety of Solace, our users, or others. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

5. AI processing

Certain features send your content to our AI sub-processor (Anthropic) to generate outputs — for example, breaking down a script, analyzing a slate, or drafting an email. Only the content needed to produce the output you requested is sent, and it is processed to return that output to you. AI-generated output can be inaccurate or incomplete and should be reviewed by a person before it is relied upon. You are responsible for the content you submit for AI processing and for how you use the results.

6. Tenant isolation and security

The Service is multi-tenant, and we take significant measures to keep each organization's data logically separated so that one organization cannot access another's data. We use access controls, database row-level security, encrypted connections, private file storage with signed access, and scoped credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work continuously to protect your information and to detect and remediate issues.

7. Data retention

We retain your information for as long as your account is active and as needed to provide the Service. After an account or organization is closed, we may retain information for a limited period as necessary to comply with legal obligations, resolve disputes, enforce our agreements, and maintain backups, after which it is deleted or de-identified. You may request deletion as described below.

8. International data transfers

Solace is operated from the United States, and our sub-processors may process data in the United States and other countries. If you access the Service from outside the United States, you understand that your information may be transferred to, stored in, and processed in countries whose data-protection laws may differ from those in your jurisdiction. Where required, we rely on appropriate safeguards for such transfers.

9. Your rights and choices

Depending on where you live, you may have rights over your personal information, including the right to access, correct, delete, or receive a copy of it, and to object to or restrict certain processing. Residents of the European Economic Area and the United Kingdom have rights under the GDPR/UK GDPR; California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. We do not sell or "share" personal information as those terms are defined under California law.

Because much of the information in the Service is controlled by the Tenant, we may direct certain requests to the relevant Tenant or ask you to submit them through that Tenant. To exercise your rights, or if you have questions, contact us at the address in Section 12. We will respond within the timeframes required by applicable law and may need to verify your identity first.

10. Children's privacy

The Service is a business tool not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, please contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.

12. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at:

Email: adam.pray@gmail.com

This document is a starting draft provided for convenience and is not legal advice. Have it reviewed by a qualified attorney before you rely on it, particularly the governing-law and individual-rights sections.