GDPR & Privacy Policy – SolTecSol (Solid Tech Solutions)

Effective Date: August 12, 2026
Last Updated: August 12, 2026

This document is provided in multiple languages for convenience. The English version is legally binding.

1. Who We Are (Data Controller)

Plyvo is a product of SolTecSol (Solid Tech Solutions). This Service is operated by:

Alexandra Wolff
SolTecSol (Solid Tech Solutions)
Dhünnstraße 9
51373 Leverkusen
Germany
Email: support@soltecsol.com

Within the meaning of the EU General Data Protection Regulation (GDPR), the operator named above is the data controller for the personal data processed through this Service.

2. What Personal Data We Collect

• Account data: your email address, your signup date, and a securely hashed password, managed through our authentication provider. We never store your password in readable form.
• Usage data: the number of product descriptions you generate, barcode lookups performed, your plan type, and your subscription status.
• Content you submit: product information you enter (text, product URLs, barcode numbers) in order to generate descriptions.
• Payment data: payments are processed by PayPal. We never receive or store your card or bank details. We only store your subscription plan and its status.
• Technical data: IP address and basic request information, used for security, rate limiting, and abuse prevention.

3. Why We Process Your Data (Legal Bases)

• Performance of a contract (Art. 6(1)(b) GDPR): creating and managing your account, generating descriptions, and managing your subscription.
• Legitimate interests (Art. 6(1)(f) GDPR): keeping the Service secure, preventing fraud and free-trial abuse, and maintaining and improving the Service.
• Legal obligations (Art. 6(1)(c) GDPR): retaining billing-related records as required by German tax and commercial law.
• Service communication (Art. 6(1)(b) and (f) GDPR): sending service-related emails such as password resets and billing notices. We do not send marketing emails without your separate consent.
• Consent (Art. 6(1)(a) GDPR): where we ask for it, for example when you accept our terms at signup. You may withdraw consent at any time with effect for the future.

4. Who We Share Data With (Processors)

We use a small number of service providers who process data on our behalf under data processing agreements:

• Authentication and database provider – secure sign-in and storage of your account and usage data.
• Hosting provider – website hosting and server infrastructure.
• AI text-generation provider – the product information you submit is sent to an external AI service to generate the description text. It is not used to identify you.
• PayPal – payment processing. PayPal acts as an independent controller for your payment data.
• Barcode lookup services – when you scan or enter a barcode, the barcode number (not your identity) is sent to product-database services to look up product information.

Some of these providers are located in the United States. Where data is transferred outside the EU/EEA, we rely on recognized safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

We do not sell personal data and we do not use it for third-party advertising.

5. Cookies

The Service uses only essential cookies: cookies that keep you signed in, protect your session, and help prevent abuse of the free trial. We do not use advertising or third-party tracking cookies.

We also use Umami, a privacy-friendly analytics tool, to collect anonymous usage statistics such as page visits. It works without cookies and does not track you across websites.

6. How Long We Keep Data

• Account data: kept for as long as your account exists. If you delete your account, your data is removed unless we are legally required to keep parts of it.
• Free-trial records: kept for up to 6 months after the trial ends, to prevent repeated abuse of the free trial.
• Billing-related records: kept for the retention periods required by German tax and commercial law (up to 10 years).

7. Your Rights Under the GDPR

You have the right to:

• Access the personal data we hold about you (Art. 15).
• Have inaccurate data corrected (Art. 16).
• Have your data deleted (Art. 17).
• Restrict processing (Art. 18).
• Receive your data in a portable format (Art. 20).
• Object to processing based on legitimate interests (Art. 21).
• Withdraw any consent you have given, at any time (Art. 7(3)).

To exercise any of these rights, email us at support@soltecsol.com. We respond within one month, as required by the GDPR.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the German federal state where you reside or where we are based.

8. Security

All connections to the Service are encrypted (HTTPS/TLS). Access to stored data is restricted through server-side authentication and access controls. Passwords are stored only in hashed form.

9. Data Breach Notification

If a data breach occurs that risks your rights and freedoms, we will notify affected users and, where legally required, the competent data protection authority within the legally required timeframe (under the GDPR: 72 hours to the authority).

10. Children

The Service is a business tool and is not directed at children. It is not intended for use by anyone under the age of 18.

11. Users Outside the EU

The Service is available worldwide. Depending on where you reside, local data protection laws may grant you additional rights. Contact us at support@soltecsol.com with any request and we will handle it under the law that applies to you.

12. Changes to This Policy

We may update this policy from time to time, for example when we change service providers or features. The current version is always available on this page, with the date of the last update shown above.

Back

Impressum