Privacy Policy
What we collect, how we use it, who we share it with, and your rights as a US resident.
Effective: 2026-10-24·v2.0
On this page (13)
Business: itligt, a registered DBA in West Jordan, Utah, operating Solvgent
Contact: privacy [at] solvgent [dot] com
This Privacy Policy explains how itligt, a registered DBA in West Jordan, Utah, operating Solvgent ("Solvgent", "we", "us") collects, uses, discloses, and protects personal information in connection with our marketing website at solvgent.com and the Solvgent application at solvgent.app (together, the "Service"). It is written for our business customers ("Customers"), their authorized users, and visitors to our website. Solvgent is offered to businesses in the United States.
For data that Customers upload or instruct us to process while using the Service (such as content drafts, brand voice samples, or end-audience metrics, together "Customer Content"), we act as a service provider (processor) on behalf of the Customer. For data we collect to operate our business directly (account credentials, billing, and website visits), we act as a business (controller). The Data Processing Addendum governs our service provider role. This Privacy Policy governs our business role and explains both for transparency.
1. Who We Are
itligt, a registered DBA in West Jordan, Utah, operates Solvgent. For all privacy questions, contact privacy [at] solvgent [dot] com. We are based in West Jordan, Utah, USA. Email is the fastest way to reach us; we will provide a mailing address for written notices on request.
2. What We Collect
2.1 Account data (business)
- Name, job title, email address
- Hashed password (we never store plaintext passwords)
- Organization name and domain
- Country and time zone
- IP address and browser/device metadata captured at signup
- Profile picture (if uploaded)
- Two-factor authentication settings, if you enable them
- API tokens and OAuth tokens for connected platforms
2.2 Billing data (business, via Stripe)
- Billing name, address, country, and tax identification number where required
- Payment-method type and last four digits of card (full card numbers stored only by Stripe)
- Invoice history, plan tier, renewal date
2.3 Usage data (business)
- Server and API request logs (IP address, device and browser type, timestamps)
- Approximate location derived from IP address
- Error events with stack traces
Error events are collected with Sentry for error tracking. Request logs are kept on our own servers. We work to keep personal information out of error reports.
2.4 Customer Content (service provider)
- Brand profiles, brand voice samples, tone-of-voice guidelines
- Content drafts, captions, hashtags, images and video assets
- Edits and rejections, saved as lessons in that brand's Brand Brain
- Scheduling preferences, posting calendars
- Connected Third-Party Platform metadata (account names, follower counts, post analytics)
- Comments, replies, inbox content from Third-Party Platforms (if enabled)
- Competitor accounts the Customer chooses to monitor (public-figure context)
We process Customer Content only on documented Customer instruction. We do not use Customer Content to train AI models.
2.5 Website and form data (business)
- Form submissions (newsletter, contact, demo request)
- For form submissions, the UTM parameters, referrer, and landing-page URL attached to the submission
Our marketing website does not load analytics, advertising pixels, or tracking cookies. It is served through Cloudflare, which may set strictly necessary security cookies (see our Cookie Policy). Our website serves its fonts from our own domain, so no third-party font provider receives your IP address. Our contact form uses Cloudflare Turnstile to block spam; Turnstile processes your IP address and browser signals to tell people from bots.
2.6 Support communications (business)
Emails, chat messages, and call recordings (recordings only with explicit consent).
3. How We Use Personal Information
We do not sell personal information. We do not "share" personal information for cross-context behavioral advertising, as those terms are defined under California law. We use personal information only to:
- Provide the Service — authentication, content generation, scheduling, publishing, analytics, maintaining each brand's Brand Brain.
- Billing and account management — process payments, send invoices, manage subscriptions, handle refunds and disputes.
- Customer support — respond to questions, troubleshoot issues, handle privacy requests.
- Product improvement — aggregated, anonymized analytics. We do not use Customer Content to train AI models.
- Security and abuse prevention — monitor for unauthorized access, brute-force attempts, anomalous API usage.
- Compliance — tax reporting, sanctions screening (primary KYC handled by Stripe), responding to lawful requests.
- Marketing — newsletters and product announcements to subscribers who opted in. Every marketing email contains a one-click unsubscribe.
Because we do not sell or share personal information, we do not show a "Do Not Sell or Share My Personal Information" link. We honor Global Privacy Control signals as opt-out requests (see Section 8.3).
4. Service Providers and Sub-processors
We disclose personal information to the service providers listed at solvgent.com/legal/sub-processors, only for the purposes listed there. We notify customers at least 30 days before adding or replacing a sub-processor. Customers may object under the terms of the Data Processing Addendum.
5. Where Data Is Stored
Solvgent operates from the United States. Some of our service providers store or process data outside the United States. The locations of each provider are listed on our sub-processor page.
6. Data Retention
| Category | Retention |
|---|---|
| Account profile data | For the lifetime of the account + 90 days after cancellation, then deleted or anonymized |
| Billing records | 10 years (US tax/audit requirement) |
| Customer Content (service provider) | As instructed by the Customer; deleted within 90 days of account termination unless legal hold applies |
| Brand Brain data (voice guidance, knowledge, lessons) | Coterminous with Customer's tenant; deleted within 90 days post-termination |
| Application & audit logs | 90 days |
| Error logs (Sentry) | 90 days |
| Marketing-list email addresses | Until unsubscribe + 6 months on a suppression list |
| Support communications | 3 years |
| Backups | 30 days rolling |
7. Assisted Content
Solvgent records which posts were drafted with AI assistance. Some platforms have their own rules for labeling AI-generated or synthetic content. We do not guarantee that a platform AI label will be applied automatically to any post. You remain responsible for the content you publish and for meeting each platform's rules.
8. Your Privacy Rights
8.1 California residents (CCPA and CPRA)
California residents have the rights described below under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, "CCPA"). The table shows the categories of personal information we have collected in the past 12 months, where they came from, why we use them, and who receives them.
| CCPA category | Examples at Solvgent | Sources | Business purposes | Disclosed to |
|---|---|---|---|---|
| Identifiers | Name, email address, IP address, account and organization identifiers, API and OAuth tokens | You; your devices; platforms you connect | Operating accounts, security, support, billing | Service providers (hosting, email, error monitoring, payments) |
| Customer records (Cal. Civ. Code 1798.80(e)) | Name, billing address, phone number if provided, tax identification number, card brand and last four digits | You; Stripe | Billing, invoicing, tax compliance | Payment processor (Stripe), hosting provider |
| Commercial information | Plan tier, subscription status, invoice history, refunds, support requests | You; our billing records | Billing and account management, support | Payment processor (Stripe) |
| Internet or other electronic network activity | Device and browser type, request timestamps, error events, API request logs, form referrer and UTM data | Your browser or device; the Service | Security and troubleshooting | Error monitoring (Sentry), hosting and content delivery providers |
| Geolocation data (approximate) | City-level location derived from IP address. We do not collect precise geolocation. | Your IP address | Security and abuse prevention | Hosting providers |
| Audio or visual information | Support call recordings (recorded only with explicit consent) | You | Support quality and dispute resolution | Support tooling providers |
| Professional or employment-related information | Job title, organization name, role on your team | You; your organization | Operating accounts and support | Hosting and email providers |
| Sensitive personal information | Account log-in credentials (email address with password or one-time sign-in code, and two-factor settings if enabled; passwords are stored hashed) | You | Authenticating and securing your account only | Hosting and security service providers |
We do not intentionally collect information about protected characteristics. We do not create consumer profiles for advertising. We do not use or disclose sensitive personal information to infer characteristics about you. We use sensitive personal information only to provide and secure your account.
We have not sold or shared personal information in the 12 months before the effective date of this Policy, and we do not sell or share it now. We disclose personal information to service providers only for the business purposes listed above.
Customer Content is processed on behalf of our business customers as their service provider. If your information appears in Customer Content and you want to make a request about it, contact the Customer that uses Solvgent. We will assist that Customer in responding, as described in our Data Processing Addendum.
California residents may:
- Know the categories and specific pieces of personal information we have collected about you, and the sources, purposes, and recipients.
- Access a copy of that personal information in a portable format.
- Delete personal information we have collected from you, subject to legal and operational exceptions.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of personal information. We do not sell or share it, but we honor opt-out requests and Global Privacy Control signals (see Section 8.3).
- Limit the use of sensitive personal information. We use sensitive personal information only for the purposes described above, so no limit request is needed. If you believe we use it for other purposes, contact us.
- Not be discriminated against for exercising any of these rights. We will not deny you service, charge different prices, or provide a different level of service because you exercised a right.
How to submit a request. Email privacy [at] solvgent [dot] com from the email address associated with your account, or from any email address if you do not have an account. Include your name and the right you want to exercise.
Verification. We verify requests by matching the information you provide with the information we hold. For account holders, we may ask you to sign in or confirm a message sent to the account email. We may ask for more information if we cannot verify your identity.
Authorized agents. You may use an authorized agent. We require written proof that the agent is authorized to act for you. We may also ask you to verify your identity directly with us.
Response time. We confirm receipt of a request within 10 business days and respond within 45 calendar days. If we need more time, we may extend the response by up to 45 more days and will tell you why.
8.2 Residents of other US states
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and other states with comprehensive consumer privacy laws have similar rights. These may include access, correction, deletion, portability, and the right to opt out of targeted advertising, sale, and certain profiling. Submit requests to privacy [at] solvgent [dot] com. If we deny a request and your state gives you a right to appeal, you may appeal by replying to our decision within the period stated in it. We will explain how to contact your state attorney general if your state requires it.
8.3 Opt-out preference signals and sale or sharing
We honor Global Privacy Control (GPC) signals sent by your browser as a valid request to opt out of the sale and sharing of personal information for that browser and device. Because we do not sell or share personal information, this has no practical effect today, but we treat the signal as a valid request. You can also make an opt-out request by emailing privacy [at] solvgent [dot] com.
9. Cookies and Similar Technologies
See our dedicated Cookie Policy. Briefly: we use only strictly necessary cookies for authentication and security. Our marketing website sets no analytics, advertising, or tracking cookies, and we do not run third-party product analytics in the application.
10. Children
Solvgent is a business service. It is not directed to children and is not intended for anyone under 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact privacy [at] solvgent [dot] com and we will delete it promptly.
11. Security
- Encryption in transit (HTTPS)
- Organization-scoped access and role-based permissions in the application
- Passwords and client review-link tokens stored hashed
- Optional two-factor authentication for user accounts
- Card data handled by Stripe; we do not store card numbers
- Notice of a security breach affecting your personal information as required by applicable law
More detail is on our security page.
12. Changes to This Policy
Material changes will be communicated by email to the Account's primary contact and by a banner on solvgent.com at least 30 days before they take effect.
13. Contact
Privacy requests and questions: privacy [at] solvgent [dot] com
Mailing address for written notices: available on request from privacy@solvgent.com. itligt, a registered DBA, West Jordan, Utah, USA.