Privacy Policy

Last updated: 10 July 2026 · Controller: HUGGIN AB, Sweden

The short, honest version

Your work lives on your computer, not on our servers. Solution Portal is local-first: your assistant's files — quotes, documents, project notes — are ordinary files in a folder on your machine. We run a small account service so you can sign in, sync notes to your phone, and pay for a subscription. We collect the minimum that makes those things work, we sell nothing to anyone, and we show no ads.

What we store, and why

• Account: your email address, your name if you give one, and a securely hashed password (we cannot read your password). Needed to sign you in.
• Notes you sync: if you use phone sync, the markdown notes you choose to sync are stored on our server so your phone can read them. Folders whose names start with “_” never sync. You can delete synced notes at any time; deleting your account deletes them.
• Subscription records: your plan, trial dates, and payment receipts. Card details are handled entirely by Stripe (our payment processor) — we never see or store card numbers.
• Support messages: what you write to support, so we can reply.
• Basic usage events: a small timestamped log — sign-ins and other account events (linked to your account email), app builds and downloads, and which language visitors' browsers ask for — so we can run and improve the service. If a device makes too many rapid attempts (say, at sign-in), we log its IP address purely for abuse protection. No advertising trackers, no analytics cookies, no fingerprinting.

What we never see

• Your conversations with your AI assistant — they run between your computer and your chosen AI provider (Anthropic, OpenAI, or Google), under your own account with them and their privacy terms.
• Files in your assistant folder that you don't sync (documents, artifacts, email content, credentials for engines or email — all local to your machine).

Who we share data with

Only the processors that make the service run: Render (hosting, EU/US), Stripe (payments), Brevo (transactional email, e.g. your verification code), GitHub (serving app downloads — no account data), and Google Fonts (your browser fetches two of our typefaces from Google's servers, which see your IP address in the process — no account data). We do not sell or rent personal data. Ever.

Your rights (GDPR)

You can ask for a copy of your data, correct it, or have it deleted — email hugginab.swe@gmail.com or use the support page and we'll act within 30 days. Deleting your account removes your account record, synced notes, and support history; payment records are kept as long as Swedish bookkeeping law requires. You may also complain to IMY (the Swedish data protection authority).

Retention & security

We keep account data while your account exists. All traffic is encrypted (HTTPS); passwords are salted and hashed; access to the database is restricted to HUGGIN AB. If we ever have a breach affecting your data, we will tell you.

Changes

If this policy changes materially, we'll note it here and, for significant changes, email account holders.