Privacy Policy

SoloOS is a software application and financial operating system for independent professionals, consultants, and solo business operators. SoloOS provides tools for cash tracking, invoicing, expense logging, client profitability analysis, debt and obligation tracking, tax-reserve planning, and financial decision support.

We collect information you directly provide when using SoloOS:

• Account & Identity Information: Your email address, full name, optional profile avatar, and internal user identifier assigned during authentication.
• Workspace Configuration: Workspace name, optional logo image, business type, country, timezone, base ledger currency (such as MWK or USD), fiscal year start month, and tax reserve planning percentage.
• Customer Support Inquiries: Name, email address, subject line, message text, and diagnostic ticket identifiers submitted via our in-app support center or sent to hello@nuerexlabs.com.

When using SoloOS, you enter financial records required to operate your solo business. This information includes:

• Financial Accounts: Account names (e.g., "Bank Operating", "Airtel Money", "Cash Reserve"), account types, native currency codes, and opening balances.
• Transactions: Incomes, expenses, transfers, manual adjustments, transaction categories, descriptions, dates, and associated project or client linkages.
• Invoices: Client business names, client email addresses, billing addresses, line items, unit rates, tax designations, issued dates, due dates, and settlement records.
• Expenses & Deductibility: Vendor names, amounts, categories, tax deductibility flags, and notes.
• Obligations & Debts: Upcoming commitments, statutory or supplier liabilities, due dates, and repayment schedules.
• Tax Reserve Planning Data: User-set target tax rates and designated tax allocations.
• Clients & Projects: Client names, contact details, project budgets, hourly or fixed rates, and delivery milestones.

Your financial data belongs exclusively to you. SoloOS does not sell, rent, or monetize your financial records, transaction histories, or customer lists to advertisers or third-party data brokers.

SoloOS paid subscriptions (Solo and Pro plans in MWK and USD) are processed through our authorized payment gateway partner, PayChangu.

SoloOS uses Resend to deliver critical transactional emails. These include:

• Workspace invitations to team members
• Subscription activation and renewal receipts
• Support request submission confirmations

Only the recipient's email address and the specific message body are transmitted to Resend for message dispatch. SoloOS does not send unsolicited marketing emails, and we maintain an internal audit log of all email events for idempotency and delivery verification.

SoloOS includes an integrated AI CFO feature that provides strategic financial analysis and plain-English summaries of your business metrics.

We protect your data using modern architectural safeguards without making unsupported compliance claims:

• PostgreSQL Row-Level Security (RLS): Every financial table (accounts, transactions, invoices, expenses, obligations, tax settings) is secured with database-level RLS policies. Database queries are restricted so that users can only view and modify records belonging to workspaces in which they are verified members.
• Role-Based Access Control (RBAC): Workspace permissions are enforced via roles (Owner, Admin, Finance, Manager, Viewer). Read-only members cannot execute modifications or access billing controls.
• Immutable Financial Audit Trails: Ledger adjustments, invoice status transitions, and subscription verification records maintain permanent audit timestamps and actor references.
• Encryption in Transit: All traffic between your browser and SoloOS is encrypted via standard TLS / HTTPS.
• Factual Compliance Notice: SoloOS does not claim SOC 2, ISO 27001, or PCI DSS certification for its application layer, nor do we use marketing phrases like "military-grade" or "bank-grade" security. We rely on the security engineering of our infrastructure providers (Supabase and Vercel) alongside our own verified database policies.

SoloOS believes in complete honesty regarding browser storage and tracking:

• Strictly Necessary Storage: We use browser localStorage exclusively to persist your authenticated user session (via Supabase Auth) and remember your currently selected workspace across page reloads.
• Shareable Financial Artifacts: When you create a shareable financial artifact (e.g. invoice share or financial brief), SoloOS generates a cryptographically secure 256-bit unlisted bearer token. The resulting view displays a strictly redacted, read-only immutable snapshot frozen at the time of creation. Sensitive credentials, banking details, and internal IDs are stripped. You may revoke links at any time or set expiration bounds. Public share links emit noindex, nofollow headers to prevent search engine indexing.
• Referral Attribution Cookies: If you visit SoloOS via an operator's referral link, a first-touch attribution cookie (solos_ref) is stored in your browser for 30 days to attribute subsequent signups. It contains solely the referral code and creation timestamp. We do not use cross-site tracking or commercial ad networks.
• Free Public Calculators: Our public tools (Safe-to-Spend, Cash Runway, Profit Calculator, Invoice Profit, and Tax Reserve) execute 100% in your local browser runtime. Values entered into public calculators are never transmitted to or saved on our servers.
• Zero Third-Party Advertising Trackers: SoloOS does not embed third-party advertising cookies, cross-site trackers, Meta Pixel, or invasive behavioral profiling software.

Because we do not use advertising tracking cookies or ad profiling, we do not display deceptive cookie consent banners.

Active Workspaces: Your records, invoices, transactions, and settings remain available for the lifetime of your workspace.

Plan Downgrades: If you cancel a paid Solo or Pro subscription, your paid features continue until the end of the current billing cycle. Your workspace then reverts to the Free plan. SoloOS never deletes your financial data upon plan cancellation or downgrade.

Account & Workspace Deletion: You may request complete permanent deletion of your account and associated workspaces at any time. Submit a request through our Support Center or email hello@nuerexlabs.com. Upon confirmed verification of ownership, your data will be purged within 30 days, except where retention is required by applicable statutory obligations.

As a SoloOS user, you have the right to:

• Access and inspect all financial records and profile data entered.
• Update, edit, or correct transaction and profile information anytime.
• Export your data in standard formats (such as PDF invoices and financial reports).
• Request full deletion of your user account and workspaces.

To exercise any of these rights, contact us at hello@nuerexlabs.com with your registered account email.

SoloOS is accessible globally and provides native multi-currency support (such as Malawi Kwacha and US Dollars). Data is hosted and processed on secure cloud infrastructure provided by Supabase (database hosting) and Vercel (application hosting). By using the service, you acknowledge that information may be transferred to and processed in data centers operated by these infrastructure providers.

We may update this Privacy Policy to reflect improvements to SoloOS, regulatory developments, or changes to third-party integrations. Material updates will be reflected on this page with an updated effective date.