Privacy Notice

HiSolo, Inc. · 2344 Emerson St, Palo Alto, CA 94301 Last revised on 13 October 2026

This Privacy Notice describes how HiSolo, Inc. ("we", "us", "our") collects, uses and discloses information about you in connection with hisolo.ai and its subdomains (the "Website"), Solo — our assistant service that carries out tasks and returns results on your behalf — and any related applications, content, tools, features and functionality (together, the "Services"). "You" means you as a user of the Services.

Please read this Privacy Notice carefully. By using the Services, you agree to the collection, use and disclosure of your information as described here. If you do not agree, please do not use the Services.

Changes to this notice

We may modify this Privacy Notice from time to time, in which case we will update the "Last revised" date above. If we make material changes to how we use or disclose information, we will make reasonable efforts to notify you, such as by emailing the last address you gave us, and will take any additional steps required by law.

Collection and use of information

When you use the Services we collect certain categories of information from a number of sources.

Beyond the specific uses described below, we may use information we collect to provide, develop and improve the Services — including to understand your requests, plan and carry out tasks on your behalf (which may involve engaging third parties on your behalf), generate responses and reports, and personalise the Services based on your prior interactions. We also use it to communicate with you, measure and analyse performance, improve the safety and security of the Services, comply with legal obligations, and protect our rights and those of our staff and others.

Information you give us directly

Some features require you to provide information about yourself. You may choose not to, but that may prevent you from using those features.

• Contact details, such as name, phone number and email address. We use these to create and maintain your account, provide the Services, and communicate with you.
• Payment information, such as card details and billing address, collected through a third-party payment processor. We use this to process payments.
• Anything else you choose to send us, for example when you message Solo to request a task. We use this to provide the Services.

Information collected through your use of the Services

Solo carries out tasks on your behalf when you engage it. To do that, it has access to the requests you make, the conversations you have with it on the channels you choose to use, any context, documents or files you provide, and the results and reports it produces.

Depending on how you use Solo, it may have access to information that is sensitive — for example, if you ask it to arrange something that involves your personal details, or if you share information about your affairs so it can complete a task.

We use information collected through your use of the Services to develop and improve our products and technology, including to evaluate, fine-tune and train the AI models that power them. Where a third-party provider's terms restrict this — for example an account you connect — we honour that restriction and do not use that information for model training. Google Workspace information is not used to create, train or improve foundational, generalized or non-personalized AI or machine-learning models; see AI services and Google user data.

Solo is not a professional adviser. You should not rely on it for financial, legal, medical or other advice or judgment.

Information from other sources

We may receive information about you from third parties, including where you choose to give the Services access to a third-party account so Solo can carry out a task. You can revoke that access at any time by contacting us or disconnecting the account in your settings.

Information we receive from outside sources is treated in line with this Notice. We are not responsible for the accuracy of information provided by third parties, or for their policies and practices.

Deidentified information

We may deidentify or anonymise information so that it can no longer reasonably be linked to you, and may use that information for any purpose. We will not attempt to re-identify it, except to check that our deidentification meets legal requirements. This does not apply to information received from Google APIs: derived and anonymized Google information is used only as described in Information collected from Google Workspace.

Information collected from Google Workspace

If you connect your Google account, Solo accesses the information permitted by the permissions you approve. Depending on the connected services, this may include Gmail messages, attachments and metadata; Calendar events and attendees; and Drive files, document content and metadata.

We use this information to provide the features you authorize, including finding and summarizing information, sending email, managing calendar events and creating files. Connected content may be synchronized and stored as searchable content, indexes, summaries or conversation context.

Google Workspace user data, including raw, aggregated, anonymized and derived information, is subject to the Google API Services User Data Policy and its Limited Use requirements. These restrictions take precedence over broader provisions elsewhere in this Privacy Notice.

Protection of Google user data

Solo uses HTTPS to protect communications between your browser and the Services. Google OAuth credentials stored by our native connector service are encrypted using AES-256-GCM. These credentials are used by the connector service to perform authorized requests and are not included in the normal connector information returned to users.

Access to connected information is controlled through authenticated accounts and permissions associated with the relevant user, space and connector.

Retention and deletion of Google user data

Solo retains imported Google content and associated indexes, summaries and conversation context to support connected features. These records do not currently have a fixed automatic expiration period and may remain stored after you disconnect your Google account.

You can disconnect your Google account through Solo’s connector settings. Disconnecting revokes access through that connector but does not automatically delete previously imported content, conversation history, derived information or stored encrypted credentials.

To request deletion of Google information stored by Solo, email privacy@hisolo.ai from your registered account email. Identify the connected Google account and the information you want deleted. We may verify your identity before processing your request.

Deleting information stored by Solo does not itself delete original emails, calendar events or files in your Google account.

AI services and Google user data

Solo uses third-party AI services to provide responses, summaries and authorized assistance. Our model infrastructure includes Amazon Bedrock and Google Cloud Vertex AI. Certain configured routes also support fallback processing through OpenRouter, which may receive relevant request content when used.

Google Workspace information must not be used by Solo or its service providers to create, train or improve foundational, generalized or non-personalized AI or machine-learning models. This restriction covers raw content and aggregated, anonymized or derived information. Google user data must not be sold or used for advertising.

Cookies and similar technologies

We and third parties may collect information about your interactions with the Website using cookies, pixels and similar technologies, to tailor your experience and run analytics. Most browsers accept cookies automatically; you can usually block or delete them in your browser settings, though doing so may stop parts of the Website working correctly. Our Website is not currently designed to respond to browser "do not track" signals.

Disclosure of your information

We may disclose your information to:

• Our affiliates and others within our corporate group.
• Vendors and service providers who help us run the Services, including hosting, messaging, payment processing, security and analytics.
• Third-party AI model providers who help support the Services.
• Third parties the Services interact with on your behalf, including autonomously, when carrying out a task you have asked for.
• Third parties you direct us to share information with, or whose accounts you connect.
• Third parties in connection with, or in anticipation of, a business transaction such as a merger or acquisition.
• Professional advisers, such as auditors, lawyers or accountants.

We may also disclose information for legal and security reasons: to cooperate with law enforcement and regulatory enquiries, to detect and prevent fraudulent or illegal activity, to exercise or defend legal claims, and to protect the safety and security of our business and staff.

Third-party websites and links

We may link to third-party websites and platforms. If you follow a link to a site we do not control, you should review its own privacy notice and terms. We are not responsible for the privacy or security of, or the content found on, those sites, and linking to them does not imply endorsement.

Children's privacy

Our Services are not intended for children, and we do not seek or knowingly collect any personal information about children. If we become aware that we have unknowingly collected information about a child, in particular any child under 13 years of age, we will make commercially reasonable efforts to delete it. If you are the parent or guardian of a child under 13 who has provided us with personal information, you may contact us using the details below to request deletion.

Data security

Despite our reasonable efforts to protect your information, no security measures are impenetrable and we cannot guarantee perfect security.

In particular, an assistant that acts on your behalf can present additional privacy and security risks, because it performs tasks and takes actions independently. These risks include, but are not limited to: unintended actions, including communications sent to other people; incorrect or incomplete results; greater exposure of information because the assistant needs access to it to do the work; and disclosure of information to third parties in the course of a task. Third parties the assistant interacts with may also attempt to mislead or manipulate it through hidden or misleading instructions. You should stay attentive while using the Services and keep these risks in mind.

Information you send us electronically may not be secure in transit. We recommend you do not use unsecure channels to send us sensitive or confidential information.

How to contact us

If you have questions about our privacy practices or this Privacy Notice, email us at privacy@hisolo.ai.