Privacy notice
Last updated: 1 October 2026
1. Who is responsible
The controller of your personal data is the operator of the Sollecito service. For any question about your data, use the Contact page.
2. What we process
We process the information needed for your account and for the service to work:
- Your e-mail address and a hashed, non-reversible form of your password;
- Business details you enter, including the company name and the contact details used on reminders;
- Invoices and clients: name, e-mail address, invoice number, amount, dates and notes;
- Usage data needed for security and for operating the service.
Card details are handled by Stripe and are never stored by Sollecito.
3. Why, and on what basis
We use this data to run your account, provide invoice tracking and reminder drafting, administer subscriptions, answer support requests, meet our legal obligations and protect the service. Depending on the processing, the basis is performance of our contract, a legal obligation, our legitimate interests, or your consent where it is required.
4. Who receives it, and where
The technical providers that host the service and handle authentication, and Stripe for payments, may receive the data necessary to perform their services. Data may be transferred outside the UK or the European Economic Area, including to the United States, under the applicable contractual safeguards.
5. Your rights under the UK GDPR
You may request access to, rectification of, erasure of, restriction of, or portability of your data, object to certain processing, and withdraw consent where consent is the basis. You may also complain to the Information Commissioner's Office (ICO). To exercise any of these, contact us.
6. Retention
Account data is kept for as long as needed to provide the service, then deleted or retained as the applicable law requires. Some invoicing records may be kept longer to meet accounting and tax obligations. Payment data is retained by Stripe under its own policy.
7. Cookies and security
Sollecito uses the session storage necessary to keep you signed in; no advertising or profiling cookies are used. Traffic is protected with TLS, passwords are stored as hashes, and access to invoice data is limited to the owning account.
8. Changes
This notice may change. Material changes will be announced in the app or by e-mail.