Privacy Policy

This policy explains what data SoloScan and Impavia AB collect, why, and what we do with it. We have tried to keep it short and direct.

The short version

SoloScan is a desktop application that analyzes documents using AI running locally on your computer. Your documents and the contents of your AI conversations never leave your device and are never seen by us or any third party.

The only data we collect is what is strictly necessary to deliver and bill for the SoloScan license: your email address and payment information (processed by Stripe). We do not use analytics or tracking.

Who we are

SoloScan is operated by Impavia AB, a private limited company registered in Sweden. For data protection questions, you can reach us at support@soloscan.app.

What stays on your device

The following data is stored only on your computer and is never transmitted to us or any third party:

• Documents you analyze (PDFs, Word files, images, scans)
• Text extracted from those documents
• Your conversations with the AI (questions and answers)
• The list of past scans you have opened
• Your app preferences (theme, model choice)

This data lives in a local SQLite database inside your operating systems standard application data directory. You can delete all of it at any time from Settings - Delete all data.

What we do collect

Account and billing

When you purchase a subscription, we collect the email address you provide at checkout. Payment is processed by Stripe, Inc.; we do not store your card number or bank details. Stripe is a PCI-DSS Level 1 certified payment processor. Their own privacy policy applies to the payment data they handle.

We store your email address for the purpose of:

• Sending you the license key after purchase
• Notifying you about renewals or payment problems
• Communicating about your subscription if needed

We do not send marketing emails. We do not share your email address with any third party.

License validation

SoloScan validates your license periodically when your computer is online, typically every few hours, and at least every 3 days. The validation request includes your license key and an anonymous machine identifier generated by SoloScan on first launch. It does not include any document content, conversation data, or personally identifying information.

"SoloScan validates your license periodically when online (typically every few hours). If your computer is offline, SoloScan continues to work normally for up to 3 days using a cached validation. Beyond 3 days, you will be asked to reconnect to revalidate.

In-app feedback

If you choose to send feedback from inside the app, we receive only what you type: your rating, your optional message, and an optional name or title if you add one. To prevent spam, your IP address is processed temporarily by our rate-limiting provider (Upstash) when you submit. It is used only to count recent submissions, is not stored in our records or linked to you, and expires automatically within 24 hours. Sending feedback is entirely optional.

What we do not collect

We do not collect, store, or have access to:

• The contents of any document you analyze
• Your conversations with the AI
• The names or types of files you open
• Your usage patterns or analytics inside the app
• Your IP address (beyond the routine logs Stripe, Keygen, and our feedback spam-protection keep for security, see below)
• Cookies, web beacons, or browser fingerprints

SoloScan does not include analytics, telemetry, error reporting services, or any third-party SDKs that would phone home with usage data.

Third parties we work with

We rely on a small number of service providers to operate SoloScan. These are the only third parties that receive any data from us:

• Stripe - payment processing and subscription management. Receives your email and payment information at checkout.
• Keygen - license validation. Receives your license key and machine identifier when validating.
• Upstash - rate limiting for in-app feedback. Receives your IP address transiently to prevent spam when you submit feedback; not stored beyond a 24-hour counter.
• Vercel - hosts this website. Receives standard web server logs (IP address, browser, page accessed) when you visit soloscan.app, retained for 30 days.
• Apple - the SoloScan macOS application is distributed as a notarized Developer ID Application. Apple may receive metadata about installations as part of standard Gatekeeper checks.
• Microsoft - the SoloScan Windows application is distributed as a code-signed installer. Microsoft may receive metadata about installations as part of standard SmartScreen checks.

None of these third parties receive your document contents or AI conversations.

Your rights under GDPR

Because Impavia AB is established in the European Union, the General Data Protection Regulation (GDPR) applies to the limited personal data we do hold (your email and license records). You have the right to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (We retain billing records for 7 years to comply with Swedish accounting law. Email addresses and license records are retained for as long as your subscription is active, plus 12 months after cancellation, then deleted.)
• Object to processing or withdraw consent
• Lodge a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten, IMY)

To exercise any of these rights, email support@soloscan.app. We respond within 30 days.

Children

SoloScan is a professional tool not directed at children. We do not knowingly collect data from anyone under 16.

Changes to this policy

If we make material changes to this policy, we will update the Last updated date at the top and, where reasonable, notify active subscribers by email.

Contact

Questions about privacy: support@soloscan.app
General support: support@soloscan.app