Privacy Policy
How Solemly AI collects, uses and protects personal data when you use Solemly.
Last updated 19 October 2026
Who we are
Solemly is operated by Solemly AI, Bengaluru, Karnataka, India (“Solemly”, “we”, “us”). We decide how and why your account and billing data is processed. For code and other data in the repositories you connect, we process it on your behalf and under your instructions, to provide the service.
Questions or requests about your data: support@solemly.com.
What we collect
| Category | What it includes |
|---|---|
| Account | Your name, email address, password (stored only as a bcrypt hash) or the identity from GitHub, GitLab or Bitbucket sign-in, and your workspace memberships and roles. |
| Billing | Your workspace's billing country, legal name, billing email, address, state and GSTIN if you give one, plus payment references and the payment method label (such as “Visa •••• 4242”). Card and UPI details go to the payment provider, never to Solemly. |
| Repositories you connect | Pull request diffs and repository contents read during reviews; review findings and comments; pull request metadata such as titles, numbers, authors and timestamps; and an index derived from repository code. Repository content can include personal data that appears in code or commit history, such as author names and emails. |
| Integrations | Access tokens and settings for services you connect, such as Slack, Microsoft Teams and Jira. |
| Support | What you send when you contact us. |
| Technical | Server logs of requests, including IP addresses, used for security and to fix problems. |
How we use it
| Purpose | Legal basis (where GDPR applies) |
|---|---|
| Provide the service: run reviews, post them to your pull requests, show history and reports | Performing our contract with you |
| Billing, invoices and tax records | Contract; legal obligation |
| Service emails (sign-in, receipts, billing and security notices) | Contract |
| Keep Solemly secure, prevent abuse and fix problems | Legitimate interests |
| Answer support requests | Contract; legitimate interests |
- We don't sell personal data, and we don't use it for advertising.
- We don't use your code, or the reviews generated from it, to train AI models, and the AI providers we use don't either under their commercial terms.
- We send product news only if you've agreed to receive it, and you can opt out at any time.
Who we share it with
Service providers that process data on our behalf, such as AI model providers, email delivery and payment providers, are listed on the security page. They may only use it to provide their service to us. We also share data with services you connect yourself (such as GitHub, GitLab, Bitbucket, Slack, Microsoft Teams or Jira), with authorities when the law requires it, and with a buyer if Solemly is sold or merged, who would remain bound by this policy.
Workspaces billed outside India pay through Dodo Payments, which sells the subscription to you as merchant of record; its own privacy policy covers the payment.
International transfers
Solemly is operated from India, and our service providers process data in other countries, including the United States. Where data protection law requires it, transfers rely on safeguards such as standard contractual clauses in our providers' terms.
How long we keep it
- Account and workspace data: while your account is active, and deleted when you ask us to delete it.
- Review findings and pull request metadata: while the workspace exists, or until you ask us to delete them.
- Code index: each repository's two newest snapshots, deleted at once when indexing is turned off for the repository, it's disconnected, or the app is uninstalled.
- Billing records: as long as tax and accounting laws require.
- Server logs: for a limited period, for security and troubleshooting.
Cookies and local storage
Solemly uses no advertising or analytics cookies and no third-party tracking scripts. It uses a cookie that marks you as signed in, a cookie with your approximate country (to show prices in the right currency), and your browser's local storage for your sign-in token and the workspace you last used. These are needed for the site to work.
Your rights
Depending on where you live (for example under the EU and UK GDPR or India's Digital Personal Data Protection Act), you can ask us to access, correct, delete or export your personal data, to restrict or object to how we use it, and to withdraw consent you've given. Email support@solemly.comand we'll respond within the time the law requires. You can also complain to your local data protection authority.
For grievances under India's data protection law, contact our grievance officer at support@solemly.com.
If your organisation connected a repository that contains your personal data, please contact that organisation first: they control that data, and we act on their instructions.
Security
How we protect data, and what Solemly can access, is described on the security page.
Children
Solemly is a service for businesses and isn't meant for anyone under 18.
Changes to this policy
We'll post changes here and update the date above. If a change materially affects how we use your data, we'll tell workspace admins by email before it takes effect.