Solcoro Terms of Service
Effective Date: 01 October 2025
Last Updated: 06 July 2026
- Acceptance of Terms
- By creating an account, accessing, or using the Platform, you confirm that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. Your continued use of the Platform constitutes ongoing acceptance of these Terms, including any future amendments made in accordance with Section 20 (Modifications to the Terms).
- If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have the authority to bind that entity, in which case "you" and "your" will refer to that entity.
- Eligibility
- Use. The Platform is designed and intended solely for business use. By using the Platform, you represent and warrant that:
- you are at least 18 years of age,
- you are an authorized representative of the business entity on whose behalf you are acting; and
- you have the legal authority to enter into these Terms on behalf of yourself or that organization.
- Refusal. Solcoro reserves the right to refuse access to, or use of, the Platform to anyone who does not meet the usage and eligibility requirements outlined in these Terms.
- Use. The Platform is designed and intended solely for business use. By using the Platform, you represent and warrant that:
- Description of Service
- The Service. The Platform enables Customer to assess its Systems of Work environments and receive optimization recommendations, governance controls, and auditing functionality (collectively, the "Service"). Solcoro may add, modify, or discontinue features of the Service from time to time in its reasonable discretion, provided that any material reduction in core functionality during a paid subscription term will be communicated to Customer in advance.
- Account Registration
- Registration. To access the Platform, you must register for an account and provide accurate, current, and complete information. You are responsible for keeping your account information up to date. Solcoro is not liable for any loss arising from your failure to comply with this requirement.
- Impersonation. You may not create an account using false information, impersonate any person or entity, or create an account for anyone other than yourself or an entity you are authorized to represent.
- Free Trial and Subscription
- Free Trials. Solcoro may, at its discretion, offer a free trial of the Platform to eligible users. Trial users may be required to provide feedback and must confirm that they are not affiliated with any competitor or competitive product. Solcoro reserves the right to modify, decline, shorten, extend, or discontinue any free trial at any time, including where usage is reasonably determined to be competitive in nature or inconsistent with the intended purpose of the trial.
- Loss. Unless otherwise stated at the time of sign-up, any data Customer enters into the Platform, and any configurations made, during a free trial may be permanently lost if a paid subscription is not purchased before the end of the trial period.
- Conversion. Continued use of the Platform following the end of a free trial period requires purchase of a paid subscription in accordance with an order form or the Platform's then-current pricing.
- Fees and Payment
- Terms. Fees, billing, and payment for the Service, including subscription types offered (e.g., month-to-month or annual), pricing, taxes, renewal, cancellation, and refund terms — are governed by Solcoro's Subscription Terms, available at Solcoro Subscription Terms (the "Subscription Terms").
- Acceptance. The Subscription Terms are incorporated into and form part of these Terms by reference. Customer accepts the Subscription Terms applicable to its selected subscription plan at the time of sign-up and purchase, and that acceptance is a condition of purchasing or renewing the Service.
- Updates. Solcoro may update the Subscription Terms from time to time in accordance with their own terms; the version in effect at the time of the relevant charge or renewal will govern that charge or renewal. In the event of any conflict between these Terms and the Subscription Terms regarding billing matters, the Subscription Terms will control.
- Purpose. The Platform is intended solely for the purpose of assessing Systems of Work environments and generating related optimization insights, governance controls, and audit functionality. You agree to use the Platform only for its intended purpose and in compliance with all applicable laws and regulations.
- Acceptable Use. You agree not to, and not to permit any third party to:
- reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code, underlying methodologies, or scoring algorithms of the Platform;
- engage in unauthorized data scraping, harvesting, or automated extraction of data from the Platform;
- interfere with, disrupt, or place undue burden on the Platform's normal functionality, security, or availability;
- use the Platform to build a competing product or service, or to benchmark the Platform for a competitor;
- upload or transmit any content that is unlawful, infringing, or that violates the rights of any third party; or
- circumvent or attempt to circumvent any usage limits, access controls, or security measures of the Platform.
- Consequences of Unauthorized Use. Any use of the Platform beyond the scope expressly permitted in these Terms may result in suspension or termination of your access, in Solcoro's sole discretion.
- Permission. By using the Platform, you grant Solcoro permission to collect, process, and store data as necessary to provide, maintain, and improve the Service, in accordance with our Privacy Policy and the Data Processing Agreement described in Section 9.
- Rights. As between the parties, Customer retains all right, title, and interest in and to its data ("Customer Data"). Customer grants Solcoro a limited, non-exclusive, worldwide license to access, host, process, and use Customer Data solely to operate, maintain, support, and improve the Platform, including to generate aggregated or de-identified analytics that do not identify Customer or any individual.
- Protection. Solcoro will implement and maintain appropriate technical and organizational safeguards designed to protect Customer Data, as further described in the Data Processing Agreement.
- To the extent Solcoro processes personal data on Customer's behalf in connection with the Service, such processing is governed by Solcoro's Data Processing Agreement (the "DPA"), which is incorporated into and forms part of these Terms by reference.
- In the event of any conflict between these Terms and the DPA with respect to the processing of personal data, the DPA will control. If Customer requires an executed, entity-specific copy of the DPA (for example, to satisfy internal compliance or audit requirements), Customer may request one by contacting info@solcoro.com.
- References. By using the Platform, you grant Solcoro permission to identify your company name and logo as a customer reference on Solcoro's website and in its marketing materials. You may opt out of this visibility at any time by submitting a written request to info@solcoro.com, and Solcoro will remove the reference within thirty (30) days of receiving such request.
- Removal. This permission survives termination of the underlying subscription agreement for a period of thirty (30) days, after which Solcoro will remove the reference promptly upon request.
- Credential Responsibility. You are responsible for maintaining the confidentiality of your account credentials and agree not to share access to the Platform with unauthorized users. You must notify Solcoro promptly upon becoming aware of any unauthorized use of your account.
- Mutual Protection Obligation. Each party agrees to protect the other party's confidential information using the same degree of care it uses to protect its own confidential information of similar nature, and no less than a reasonable degree of care. Solcoro implements reasonable administrative, technical, and physical security measures designed to protect Customer Data; however, no method of transmission or storage is completely secure, and Solcoro cannot guarantee absolute protection against unauthorized access, breach, or loss.
- Exclusive Property. All content, software, scoring methodologies, algorithms, and recommendations made available through the Platform (collectively, "Solcoro IP") are and will remain the exclusive intellectual property of Solcoro and its licensors, and are protected by applicable intellectual property and other laws.
- Limitation of Rights. Except for the limited rights expressly granted in these Terms, no rights or licenses in the Solcoro IP are granted to Customer, whether by implication, estoppel, or otherwise. You may not copy, modify, distribute, sell, lease, sublicense, or create derivative works based on any part of the Platform without Solcoro's prior written consent.
- Feedback. If you provide Solcoro with any suggestions, ideas, or feedback regarding the Platform ("Feedback"), you grant Solcoro a perpetual, irrevocable, royalty-free license to use and incorporate such Feedback into the Platform without obligation or compensation to you.
- Third-Party Services. The Platform may integrate with, or allow connection to, third-party services, applications, or data sources ("Third-Party Services") that are not owned or controlled by Solcoro. Solcoro is not responsible for the availability, accuracy, or content of any Third-Party Services, and your use of any Third-Party Services is subject to the terms and privacy policies of the applicable third party.
- Informational Purposes. All recommendations, scores, and insights provided by the Platform are for informational purposes only and do not constitute legal, security, financial, or business advice. Solcoro makes no guarantees regarding the outcomes of implementing any suggested actions.
- EXCEPT AS EXPRESSLY SET FORTH IN THESE TERMS, THE PLATFORM IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. SOLCORO DOES NOT WARRANT THAT THE PLATFORM WILL BE UNINTERRUPTED, ERROR-FREE, OR COMPLETELY SECURE.
- TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL SOLCORO BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, ARISING OUT OF OR RELATED TO YOUR USE OF, OR INABILITY TO USE, THE PLATFORM, EVEN IF SOLCORO HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
- SOLCORO'S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS WILL NOT EXCEED THE TOTAL FEES PAID BY CUSTOMER TO SOLCORO FOR THE SERVICE IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.
- Risk. Your use of the Platform is entirely at your own risk, and the limitations in this Section will apply regardless of the legal theory on which a claim is based and even if a remedy fails of its essential purpose.
- Indemnification. You agree to defend, indemnify, and hold harmless Solcoro and its officers, directors, employees, and agents from and against any claims, damages, liabilities, and expenses (including reasonable attorneys' fees) arising out of or related to:
- your use of the Platform in violation of these Terms;
- your violation of any applicable law or third-party right; or
- any Customer Data submitted through your account.
- Effect. These Terms remain in effect for as long as you maintain an account or otherwise use the Platform. Solcoro reserves the right to suspend or terminate your access to the Platform at its sole discretion, with or without cause, including if these Terms are violated, subject to any notice requirements set forth in an applicable order form.
- Cessation. Upon termination, all rights granted to you under these Terms will immediately cease, and you must discontinue all use of the Platform. Sections that by their nature should survive termination — including Intellectual Property, Confidentiality and Security, the Data Processing Agreement, Disclaimer of Warranties, Limitation of Liability, Indemnification, and Governing Law — will survive.
- Compliance. You agree to comply with all applicable export control and economic sanctions laws and regulations, and represent that you are not located in, or a resident or national of, any country subject to a U.S. government embargo, and are not listed on any U.S. government list of prohibited or restricted parties.
- Informal Resolution. Solcoro and Customer are each committed to resolving disputes fairly and efficiently. In the event of a disagreement arising out of or relating to these Terms, the Service, or the Platform, the parties agree to first attempt to resolve the matter informally. Either party may initiate this process by providing written notice of the dispute to the other party, and both parties will make good faith efforts to resolve the issue within thirty (30) days of such notice.
- Arbitration. If a dispute cannot be resolved informally in accordance with Section 20.1, any unresolved dispute, claim, or controversy arising out of or relating to these Terms, the Service, or any related transactions shall be resolved by binding arbitration on an individual basis. Arbitration shall be conducted in English, in accordance with the rules of a recognized arbitration body then in effect. The arbitrator's decision shall be final and binding on the parties and may be enforced in any court of competent jurisdiction.
- Limits. Any dispute must be raised within one (1) year of the date the claim arises. Claims may be brought only in an individual capacity, and not as a plaintiff or class member in any class, collective, or representative proceeding. Notwithstanding the foregoing, either party may seek injunctive or other equitable relief in a court of competent jurisdiction in the State of Florida to protect its intellectual property rights or confidential information.
- Updates. Solcoro may update these Terms from time to time to reflect changes in functionality, legal requirements, or business practices. We will provide notice of any material changes, such as by posting an updated version of these Terms on the Platform or by direct communication. Continued use of the Platform after revised Terms are posted constitutes acceptance of the changes.
- Governing Law and Location. These Terms, and any dispute arising out of or relating to them, shall be governed by and construed in accordance with the laws of the State of Florida, without regard to its conflict of laws principles. Unless otherwise agreed by the parties, the place of arbitration shall be Florida.
- Assignment. You may not assign or transfer these Terms, in whole or in part, without Solcoro's prior written consent. Solcoro may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of its assets.
- Severability. If any provision of these Terms is found to be unenforceable, the remaining provisions will remain in full force and effect.
- No Waiver. The failure of Solcoro to enforce any right or provision of these Terms will not constitute a waiver of such right or provision.
- Entire Agreement. 22.4 Entire Agreement. These Terms, together with any applicable order form, the Subscription Terms, the DPA, and the Privacy Policy, constitute the entire agreement between the parties regarding the subject matter herein and supersede all prior agreements and understandings.
- Notices. Notices under these Terms must be provided in writing to legal@solcoro.com or such other address as either party may designate.
Solcoro Subscription Terms
Effective Date: 01 October 2025
Last Updated: 05 July 2026
- Subscription Commencement
- Commencement. Your subscription to the Services shall commence upon the earlier of:
- successful processing of your initial payment; or
- where Solcoro elects to invoice you directly for your subscription, the issuance of the applicable invoice (in either case, the "Commencement Date").
- Committment. By subscribing, you irrevocably commit to the subscription type selected by you (monthly or annual) at the rate in effect at the time of purchase, together with any and all applicable taxes, duties, or similar governmental levies (including, without limitation, VAT, GST, sales tax, or other similar duties not already reflected in the stated rate).
- Commencement. Your subscription to the Services shall commence upon the earlier of:
- Billing and Payment
- Terms. Solcoro Solcoro offers two subscription terms:
- Month-to-Month Plans. Fees for month-to-month Plans shall be billed in advance on a monthly basis and shall be charged automatically to Subscriber's designated payment method.
- Annual Plans. Fees for annual Plans shall be payable in full as a single upfront payment at the commencement of each annual term.
- Renewals. Each subscription shall automatically renew for successive terms (monthly or annual, as applicable, each a "Term") on the applicable renewal date, unless earlier canceled in accordance with these Terms. All fees and taxes applicable to a renewal Term shall be due and payable in advance of such Term.
- With respect to month-to-month subscriptions, the then-current subscription rate, inclusive of applicable taxes, shall be charged automatically to Subscriber's designated payment method at the commencement of each renewal Term.
- With respect to annual subscriptions, where a valid credit card or other authorized automatic payment method is on file, Solcoro, acting through its designated payment processor, shall charge such payment method automatically at the then-current subscription rate, inclusive of applicable taxes. Where no authorized automatic payment method is on file, Solcoro shall issue an invoice in respect of the renewal Term, which shall be payable in accordance with the payment terms set forth therein.
- Payment Authorization. By subscribing, Subscriber authorizes Solcoro and its designated payment processor(s) to securely store Subscriber's payment method(s) and to charge such payment method(s) automatically for all applicable subscription fees and taxes, at the then-current rate, until such time as the subscription is canceled in accordance with these Terms.
- Subscriber Authentication. Certain financial institutions or payment providers may require Subscriber to authenticate its initial purchase by means of a password, code, biometric verification, or other security measure. By completing any such authentication, Subscriber authorizes Solcoro to process all subsequent charges to the same payment method without further authentication, including, without limitation, charges arising from subscription renewals or modifications to Subscriber's Plan.
- Terms. Solcoro Solcoro offers two subscription terms:
- Business-to-Business Service; Tax Registration
- Tax Registration. The Services are offered by Solcoro solely on a business-to-business basis. Where Subscriber's jurisdiction requires VAT, GST, or similar tax registration, Subscriber shall provide a valid registration number at the time of registering for the subscription. Solcoro shall not be obligated to process or confirm any subscription in the absence of such registration where legally required.
- Fees and Tax Changes
- Modification. Solcoro reserves the right to modify subscription fees from time to time, in its sole discretion. Any such modification shall take effect as of Subscriber's next renewal Term and shall be reflected in the corresponding renewal charge.
- Subscribers on month-to-month Plans shall not be entitled to advance notice of any such fee modification.
- Subscribers on annual Plans may review pricing updates, if any, at Solcoro Pricing.
- Tax Rate Changes. In the event of any change to the applicable VAT, GST, or other tax rate during the then-current Term, the revised tax rate shall apply to Subscriber's subscription fee commencing with the next billing date.
- Modification. Solcoro reserves the right to modify subscription fees from time to time, in its sole discretion. Any such modification shall take effect as of Subscriber's next renewal Term and shall be reflected in the corresponding renewal charge.
- Failed Payments
- Failed Payments. In the event Subscriber's primary payment method cannot be charged, Subscriber authorizes Solcoro to charge any alternative payment method provided by Subscriber. If no valid payment method is available and the applicable payment obligation remains unsatisfied, Solcoro reserves the right to suspend or terminate the subscription until payment is received in full. Subscriber may update its payment details at any time via the account portal.
- Subscription Cancellation
- Cancellation. Subscriber may cancel its subscription at any time via the Solcoro Customer Portal or by contacting Solcoro Support. Any such cancellation shall take effect as of the conclusion of the then-current Term.
- Suspension. All subscription fees are non-refundable, and no prorated refunds or credits shall be issued in respect of partial use or early termination of the subscription. Upon cancellation, Subscriber shall retain access to the Services through the end of its then-current billing Term, following which the subscription shall automatically terminate and all access to the Services shall cease.
- Amendments
- Failed Payments. Solcoro reserves the right to amend, modify, or update these Terms from time to time in its sole discretion. Material changes shall be reflected by an updated "Last Updated" date above. Continued use of the Platform following any such amendment shall constitute acceptance of the amended Policy.
Solcoro Privacy Policy
Effective Date: 01 October 2025
Last Updated: 06 July 2026
This policy applies to the Solcoro Platform, Marketing Website and any related services. It does not apply to third-party websites or services linked from the Platform.
- Information We Collect
- Collection. We collect information in the following categories:
- Information You Provide Directly
- Account and identity information, such as your name, email address, job title, and company details
- Communications you send us, including support requests, feedback, and correspondence
- Information Collected Automatically
- Usage and log data, including IP addresses, browser type, pages visited, timestamps, and session duration
- Metadata from connected Systems of Work applications and interactions within the Platform
- Device information, such as operating system and browser version
- Cookies and similar tracking technologies (see Section 6 for details)
- Information You Provide Directly
- Aggregated and Anonymized Data. We generate aggregated, de-identified data across our customer base to produce market trend insights, performance benchmarks, and best-practice analysis. This data cannot reasonably be used to identify any individual or organization and is not considered personal information under applicable law.
- Collection. We collect information in the following categories:
- How We Use Your Information
- Usage. We use the information we collect for the following purposes:
- Service delivery: To operate, maintain, and provide the features and functionality of the Platform.
- Personalization: To tailor recommendations and experiences based on your environment and usage patterns.
- Analytics and improvement: To understand how the Platform is used and to improve its performance, reliability, and features.
- Communications: To send transactional messages (e.g., account notices, security alerts) and, where you have given consent or we have a legitimate interest, product updates and marketing communications.
- Market insights: To generate and share anonymized, aggregated industry benchmarks and trend reports.
- Legal and compliance: To comply with applicable laws, enforce our agreements, and respond to lawful requests.
- WE DO NOT SELL YOUR PERSONAL INFORMATION
- Usage. We use the information we collect for the following purposes:
- How We Share Your Information
- Sharing. We may share your information in the following circumstances:
- Service providers: We share information with vetted third-party vendors who perform services on our behalf, such as cloud hosting, analytics, customer support tooling, and payment processing. These parties are contractually obligated to use your data only as directed by us and to maintain appropriate security standards.
- Business transfers: If Solcoro is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a materially different privacy policy.
- Legal obligations: We may disclose information when required by law, regulation, court order, or governmental authority, or when we believe disclosure is necessary to protect the rights, property, or safety of Solcoro, our users, or others.
- With your consent: We may share your information for other purposes with your explicit consent.
- Aggregated data: We may publicly share anonymized, aggregated data that does not identify any individual customer or end user.
- Sharing. We may share your information in the following circumstances:
- Data Security
- Protection Measures. Solcoro maintains administrative, technical, and physical safeguards designed to protect your information against unauthorized access, disclosure, alteration, and loss. These measures include encryption in transit and at rest, access controls, and periodic security assessments.
- Limitations. No method of transmission over the internet or electronic storage is completely secure. While we take reasonable precautions, we cannot guarantee the absolute security of your information. In the event of a data breach that affects your rights or interests, we will notify you in accordance with applicable law.
- Data Retention and Deletion
- Data Use. We retain personal information for as long as necessary to provide the Platform, fulfill the purposes described in this policy, and comply with our legal obligations. When personal information is no longer needed, we delete or anonymize it in accordance with our data retention schedule.
- Data Retention and Deletion. Data retention and deletion practices for Customer data are governed by the Solcoro Data Retention and Deletion Policy, incorporated herein by reference.
- Cookies and Tracking Technologies
- Tracking. We use cookies and similar technologies to operate the Platform, remember your preferences, and collect analytics data. You can control cookie preferences through your browser settings or our cookie consent tool. Note that disabling certain cookies may affect Platform functionality.
- Opt-Out. We do not currently respond to "Do Not Track" browser signals, but we support opt-out mechanisms described in Section 7.
- Your Privacy Rights and Choices
- Rights. Depending on your location and applicable law, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information about you
- Delete your personal information (subject to certain exceptions)
- Restrict or object to specific types of processing
- Data portability — receive a copy of your information in a structured, machine-readable format
- Withdraw consent at any time where processing is based on consent
- Opt out of marketing communications via the unsubscribe link in any email or by contacting us directly
- California Residents. California residents may have additional rights under the CCPA/CPRA, including the right to know what personal information is sold or disclosed and to opt out of its sale. We do not sell personal information.
- EEA, UK, and Swiss Residents. EEA, UK, and Swiss residents may also have the right to lodge a complaint with your local data protection authority.
- Exercising Your Rights. To exercise any of these rights, please contact us at info@solcoro.com. We will respond within the timeframe required by applicable law. Rights requests are handled in accordance with the Data Processing Agreement ("DPA") between you and Solcoro.
- Rights. Depending on your location and applicable law, you may have the right to:
- International Data Transfers
- Application Hosting. Solcoro's Platform and all associated data are hosted on Amazon Web Services (AWS) infrastructure, with the primary datacenter located in the US-EAST-1 region (Northern Virginia, United States). All customer data is stored and processed within AWS's secure cloud environment.
- Information Transmission. If you access the Platform from outside the United States, your information will be transmitted to, and processed in, the United States. By using the Platform, you acknowledge that your information will be hosted in the United States, where data protection laws may differ from those in your country of residence.
- Legal Mechanisms. For users in the EEA, UK, or Switzerland, we ensure that transfers of personal information to the United States are conducted under appropriate legal mechanisms, including:
- Standard Contractual Clauses (SCCs) as approved by the European Commission
- Data processing agreements with AWS that incorporate applicable data protection requirements
- Reliance on AWS's compliance certifications, which include:
- ISO 27001, 27017, and 27018
- SOC 1, SOC 2, and SOC 3
- General Data Protection Regulation (GDPR) compliance under AWS's Data Processing Addendum
- AWS Compliance. AWS maintains its own comprehensive security and compliance program. Details of AWS's certifications, compliance controls, and regional data handling practices are available at aws.amazon.com/compliance.
- We do not replicate or store customer data outside of the AWS US-EAST-1 region except where required by law or explicitly requested by the customer.
- Child Data Collection. The Platform is not directed to children under the age of 16, and we do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.
- Policy Updates. Solcoro reserves the right to amend, modify, or update this Policy from time to time in its sole discretion. Material changes shall be reflected by an updated "Last Updated" date above. Continued use of the Platform following any such amendment shall constitute acceptance of the amended Policy.
For questions, concerns, or to exercise your privacy rights, please contact:
Solcoro LLC - info@solcoro.com
Solcoro Data Processing Agreement
Effective Date: 01 October 2025
Last Updated: 06 July 2026
- Purpose & Scope
- This Data Processing Agreement ("DPA") governs Solcoro's collection, use, and protection of Customer metadata in connection with the Solcoro SaaS platform (the "Platform"). It forms part of, and is incorporated into, the Subscription Terms Agreement between the Customer ("Controller") and Solcoro, LLC. ("Processor"). In the event of a conflict, this DPA takes precedence.
- The Platform provides metadata-driven optimization of systems-of-work ecosystems and enterprise software environments. To deliver insights, recommendations, and telemetry-based reporting, Solcoro processes limited Customer metadata strictly as defined herein.
- Definitions
- "Customer Metadata" means workspace identifiers, usage telemetry, performance counters, and other indirect technical identifiers generated through Customer's use of the Platform. Excludes personally identifiable information (PII) unless explicitly agreed in writing.
- "Data Protection Laws" means all applicable privacy and data protection legislation, including without limitation GDPR (EU 2016/679), UK GDPR, CCPA/CPRA, and equivalent regional requirements in jurisdictions where Customer operates.
- "Controller" means the Customer, who determines the purposes and means of processing Customer Metadata within their organization.
- "Processor" means Solcoro, LLC., acting on the Controller's instructions to process Customer Metadata solely to deliver the Platform's functionality.
- "Sub-processor" means any third party engaged by Solcoro to assist in processing Customer Metadata on the Controller's behalf.
- "Security Incident" means any confirmed unauthorized access, disclosure, alteration, or destruction of Customer Metadata.
- "Agreement" means the Subscription Agreement and any agreement entered into between Customer and Solcoro.
- Roles & Responsibilities
- Processor. Solcoro acts solely as a data processor with respect to Customer Metadata. Solcoro shall:
- Process Customer Metadata only on documented instructions from the Customer, including those set out in this DPA.
- Refrain from selling, renting, or otherwise commercially exploiting Customer Metadata for any purpose beyond fulfilling the Platform's intended functionality.
- Ensure personnel authorized to process Customer Metadata are bound by appropriate confidentiality obligations.
- Notify the Customer without undue delay if, in Solcoro's reasonable opinion, an instruction violates applicable Data Protection Laws
- Controller. The Customer represents and warrants that:
- It has a lawful basis for providing Customer Metadata to Solcoro and for authorizing the processing activities described in this DPA.
- It has provided all required notices and obtained all required consents from data subjects where applicable.
- Its use of the Platform and instructions to Solcoro comply with Data Protection Laws.
- Processor. Solcoro acts solely as a data processor with respect to Customer Metadata. Solcoro shall:
- Data Processing Details
- Subject Matter. Technical optimization analytics for enterprise software environments and systems of work.
- Duration. For the term of the Agreement, plus any post-termination retention period set out in Section 6.
- Nature & Purpose. Collection, aggregation, analysis, and reporting of telemetry data to generate platform insights and recommendations.
- Categories of Data. Workspace identifiers, usage frequency metadata, integration event counts, performance and latency metrics. No special-category personal data is processed.
- Data Subjects. Customer's authorized end users of enterprise software tools connected to the Platform. No consumer data subjects are processed under normal operation.
- Data Minimization & Use Limitation
- Minimization. Solcoro applies the principle of data minimization across all processing activities. Specifically:
- Customer Metadata is collected only to the extent necessary to deliver the analytics, recommendations, and optimization features described in the Agreement.
- No profiling or automated decision-making with legal or similarly significant effects on data subjects is performed.
- Customer Metadata is not used to train or improve Solcoro's machine learning models without the Customer's prior written consent.
- Customer Metadata is processed in aggregated or pseudonymized form wherever technically feasible.
- Minimization. Solcoro applies the principle of data minimization across all processing activities. Specifically:
- Data Retention & Deletion
- Retention. Data retention and deletion practices for Customer Metadata are governed by the Solcoro Data Retention and Deletion Policy, incorporated herein by reference. In the event of a conflict between the Data Retention and Deletion Policy and this DPA, this DPA controls.
- Technical & Organizational Security Measures
- Security Measures. Solcoro implements and maintains security measures appropriate to the risk of the processing according the Solcoro Security and Protection Policy, incorporated herein by reference. In the event of a conflict between the Security and Protection Policy and this DPA, this DPA controls.
- Incident Response. In the event of a confirmed or reasonably suspected Security Incident involving Customer Metadata, Solcoro will:
- Notify the Customer's designated security or privacy contact without undue delay, and in accordance with applicable law.
- Provide in the initial notification: the nature of the incident, categories and approximate volume of data affected, likely consequences, and measures taken or proposed.
- Cooperate with the Customer and relevant supervisory authorities in the investigation, containment, and remediation of the incident.
- Not make public disclosures regarding the incident that identify the Customer without the Customer's prior written consent, except as required by law.
- Sub-processor Engagement. Customer hereby grants Solcoro general authorization to engage Sub-processors to assist in delivering the Platform. Solcoro will:
- Maintain and make available upon request an up-to-date list of Sub-processors, including their name, location, and the nature of processing performed.
- Impose data protection obligations on each Sub-processor no less protective than those set out in this DPA.
- Remain liable to the Customer for the performance of Sub-processors to the same extent as if Solcoro were performing the processing directly.
- Provide at least 30 days' prior written notice of any intended addition or replacement of a Sub-processor. The Customer may object in writing within that period on reasonable data protection grounds; the parties will work in good faith to resolve such objection.
- Transfer Practices. Cross-border data transfer practices are governed by the International Data Transfers section of Solcoro's Privacy Policy, incorporated herein by reference. In the event of a conflict between the Privacy Policy and this DPA, this DPA controls.
- Compliance Auditing. The Customer may audit Solcoro's compliance with this DPA no more than once per calendar year, subject to:
- Providing at least thirty (30) days' prior written notice specifying the scope and proposed timing.
- Conducting (or commissioning) the audit during normal business hours with minimal disruption to Solcoro operations.
- Executing a confidentiality agreement reasonably acceptable to Solcoro before receiving audit findings.
- Substitution. In lieu of an on-site audit, Solcoro may satisfy Customer's audit right by providing the most recent third-party audit report (e.g., SOC 2 Type II, ISO 27001 certificate) covering the relevant period.
- Processing. Given that Solcoro processes Customer Metadata rather than directly identifiable personal data, data subject rights requests are primarily managed by the Customer as Controller. Solcoro will:
- Promptly forward to the Customer any data subject rights requests Solcoro receives that relate to Customer Metadata.
- Provide reasonable technical assistance to help the Customer fulfill access, rectification, erasure, portability, restriction, and objection requests within timeframes required by applicable Data Protection Laws.
- Not respond directly to data subjects on behalf of the Customer without prior written authorization.
- Effectiveness. This DPA is effective from the Customer's first use of the Platform (or the earlier execution of the Agreement) and continues until termination or expiry of the Agreement. Obligations that by their nature survive termination — including data deletion, confidentiality, audit rights for the relevant period, and security incident obligations — remain in effect until fully discharged.
- Order of Precedence. In the event of a conflict between this DPA and the Agreement with respect to data protection matters, this DPA prevails. For all other matters, the Agreement controls.
- Amendments. Solcoro reserves the right to amend, modify, or update this DPA from time to time in its sole discretion. Material changes shall be reflected by an updated "Last Updated" date above. Continued use of the Platform following any such amendment shall constitute acceptance of the amended Policy.
- Governing Law. This DPA is governed by the laws of the State of Florida, United States, without regard to its conflict of law principles. Any disputes related to these Terms will be subject to the jurisdiction of the appropriate courts in Florida.
- Entire Agreement. This DPA, together with the Agreement and any exhibits or schedules thereto, constitutes the entire agreement between the parties with respect to data protection matters and supersedes all prior discussions, representations, or agreements relating thereto.
Solcoro Data Retention and Deletion Policy
Effective Date: 01 October 2025
Last Updated: 06 July 2026
- Types of Deletions
- Active Deletion: A customer has an active Solcoro subscription, and a user or administrator deletes data, administrators delete a user, or has data deleted through a customer support request.
- Passive Deletion: A customer subscription ends due to cancellation, expiration, or non-conversion from trial.
- Data Categories and Retention
- Subscription Retention Rules
- Active Subscription. While a Solcoro subscription is active, customers may:
- Access Scan History and Benchmarks
- Export Data
- Remove Integrations
- Delete Integrations
- Retention: Solcoro retains historical scan metadata for the duration of the active subscription to support:
- Trend Analysis
- Drift Detection
- Compliance Reporting
- Security Investigations
- Support and Billing Validation
- Active Subscription. While a Solcoro subscription is active, customers may:
- Subscription Termination
- Access. When a paid subscription or free trial expires, is terminated or is cancelled:
- Customer access to the Solcoro platform and all connected integrations is immediately disabled. Customers must download any reports, exports, or data prior to termination
- The workspace(s) enters a retention-only state for up to 90 days, during which:
- Solcoro retains customer data solely for billing reconciliation, dispute resolution, audit, and compliance purposes
- No customer access to the platform or data is provided
- Solcoro may, at its discretion, reinstate the workspace if the subscription is reactivated or a Trial is converted to a paid subscription.
- After the 90-day retention period expires, the workspace is permanently disabled
- No later than 90 days after termination, all customer-identifiable data is deleted from Solcoro production systems.
- Access. When a paid subscription or free trial expires, is terminated or is cancelled:
- Benchmarking & Market Intelligence
- Retention. After a subscription or trial is terminated, Solcoro may retain de-identified and aggregated scan data for:
- Market Benchmarking
- Industry Comparisons
- Product Development
- Security Research
- Limitations. De-identified and aggregated data retained for benchmarking and market intelligence purposes:
- Contains no workspace IDs, organization names, URLs, or PII
- Cannot be used to identify any unique customer information
- Product Development
- Cannot be reasonably reconstructed to reveal a specific organization
- Retention. After a subscription or trial is terminated, Solcoro may retain de-identified and aggregated scan data for:
- Data Backups
- Usage. Customer data may persist in encrypted backups until those backups are rotated and overwritten under Solcoro’s standard backup retention schedule (typically 30–180 days). Backups are NOT used for production, analytics, or benchmarking.
- Recoverability. Backed Up Data is encrypted and rendered commercially unrecoverable through normal backup expiration and rotation.
- Amendments
- Amendments. Solcoro reserves the right to amend, modify, or update this Policy from time to time in its sole discretion. Material changes shall be reflected by an updated "Last Updated" date above. Continued use of the Platform following any such amendment shall constitute acceptance of the amended Policy.
| Data Category | Classification | Description | Examples | Retention |
|---|---|---|---|---|
| Metadata | Scan & Configuration Data | Machine-generated metadata pulled from customer systems that describes configuration, security posture, usage, and backup status | Jira project counts, permission settings, MFA status, backup coverage, API scopes, configuration drift, Solcoro Scores |
Active Deletion: Up to 30 days Passive Deletion: Up to 90 days |
| Custom Identifiers | Workspace-Scoped Identifiers | Data and metadata linking scan data to a specific organization or system. | Workspace ID, organization name, integration IDs, site URLs |
Active Deletion: Up to 30 days Passive Deletion: Up to 90 days |
| User Identifiers | End-User Identifiable Information (EUII) | Data that identifies or could identify a user of Solcoro | Name, email, role, IP address |
Active Deletion: Up to 30 days Passive Deletion: Up to 90 days |
| Platform Identifiers | Anonymized System Identifiers | Internal identifiers used to operate the Solcoro platform | User IDs, session IDs, audit IDs |
Active Deletion: Up to 30 days Passive Deletion: Up to 90 days |
| Aggregated Analytics | De-identified Benchmark Data | Aggregated, anonymized scan data used to generate market benchmarks and industry insights | Industry percentiles, region-level averages, security posture trends, Scores |
May be retained indefinitely |
Solcoro Security and Protection
Effective Date: 01 October 2025
Last Updated: 01 October 2025
- Security Strategy; General Principles
- Data Value. Solcoro maintains that the value of data is contingent upon the adequacy of the security measures protecting it. Accordingly, security, privacy, and reliability constitute foundational design principles of the Platform, and not incidental or supplementary features thereof. Solcoro employs a defense-in-depth methodology, pursuant to which each layer of the Platform architecture is designed to limit exposure, enforce access controls, and enable early detection and remediation of potential issues.
- Minimization of Access. Solcoro shall collect and receive only such metadata as has been expressly authorized by the Customer, and only at such time as is reasonably necessary for the performance of the Platform's functions. All such metadata shall be transmitted via secure means. For the avoidance of doubt, Solcoro does not affirmatively retrieve or "pull" metadata absent Customer authorization.
- Secure Automation. All modifications to the Platform's infrastructure and codebase shall be defined, reviewed, and deployed exclusively through code-based mechanisms. All such changes shall be logged in their entirety and shall conform to prevailing AWS and version-control ("Git") industry best practices. No manual, undocumented, or unauthorized modifications shall be permitted.
- Continuous Monitoring. Solcoro shall maintain comprehensive observability across all Platform systems for the purpose of ensuring that anomalies and issues are identified at the earliest practicable opportunity and remediated prior to any material impact upon Customers.
- Data Protection and Infrastructure
- Data Protection Measures. Solcoro shall implement and maintain the following safeguards with respect to Customer data:
- All Customer data shall be encrypted in transit, utilizing Transport Layer Security ("TLS") version 1.2 or higher, and at rest, utilizing Advanced Encryption Standard 256-bit ("AES-256") encryption or such other industry-standard encryption methodology as may supersede it.
- Application secrets and credentials shall be managed through centralized, secure key management systems incorporating automated credential lifecycle management protocols.
- Access to production data shall be restricted to authorized systems and personnel only, in accordance with the principles of least-privilege access and just-in-time provisioning.
- For the avoidance of doubt, Solcoro does not collect, process, or store end-user content. Solcoro's analysis is limited to configuration metadata, thereby minimizing data exposure and supporting compliance with applicable law.
- Cloud Infrastructure.
- The Platform is hosted on Amazon Web Services ("AWS") infrastructure, utilizing containerized architecture engineered for scalability and operational resilience.
- All infrastructure provisioning is effected through Infrastructure as Code ("IaC") methodologies, such that every change is subject to peer review, is fully auditable, and is version-controlled.
- Solcoro's operating environments are segregated by function and purpose so as to preserve operational integrity and maintain appropriate data segregation.
- Data Protection Measures. Solcoro shall implement and maintain the following safeguards with respect to Customer data:
- Data Retention and Deletion
- Metadata Only. Solcoro collects solely metadata originating from connected systems and, for the avoidance of doubt, does not collect application data, support tickets, documents, or messages of any kind.
- Retention and Deletion. For all terms governing data retention and deletion, refer to Solcoro's Data Retention and Deletion Policy, which is incorporated herein by reference.
- Authentication, Access Control, and Monitoring
- Authentication and Access Control.
- Solcoro exclusively supports federated authentication through major identity providers, utilizing OpenID Connect ("OIDC") and Security Assertion Markup Language ("SAML") protocols.
- The Platform implements granular, role-based permissioning such that each user's access is limited to that which such user is expressly authorized to view or utilize.
- All administrative access to Solcoro's systems is subject to multi-layered access control mechanisms.
- Monitoring and Incident Response.
- Solcoro maintains continuous collection of metrics, logs, and traces across its infrastructure and applications.
- Automated alerting mechanisms are configured to notify appropriate personnel of anomalous activity or threshold events.
- Solcoro maintains on-call engineering personnel and documented incident response playbooks to facilitate prompt investigation, containment, and remediation of security incidents.
- Authentication and Access Control.
- Data Protection and Infrastructure
- Compliance and Governance. Solcoro is in the process of pursuing SOC 2 Type II certification and operates in a manner consistent with the requirements of ISO/IEC 27001, the General Data Protection Regulation ("GDPR"), and the Digital Operational Resilience Act ("DORA"). Solcoro undertakes periodic review of its security controls and internal policies to ensure that such controls and policies continue to satisfy, or exceed, prevailing industry compliance standards.
- Responsible Disclosure. Solcoro encourages security researchers and third-party partners to responsibly report potential vulnerabilities. Any person who believes they have identified a security vulnerability affecting the Platform is invited to submit a report to support@solcoro.com. Solcoro treats all such reports with due seriousness and undertakes to respond in a timely manner. Submission of a report under this Section does not, by itself, confer any right, license, or authorization beyond that expressly granted by Solcoro in writing.
- Amendments
- Amendments. Solcoro reserves the right to amend, modify, or update this Policy from time to time in its sole discretion. Material changes shall be reflected by an updated "Last Updated" date above. Continued use of the Platform following any such amendment shall constitute acceptance of the amended Policy.
Solcoro Marketplace Introduction Promotion - 2026
Effective Date: 27 July 2026
Last Updated: 27 July 2026
- Eligibility
- This one-time offer of 3 months free ("Promotion") is available to companies that register with Solcoro in accordance with the registration process specified by Solcoro. The customer for purposes of this Promotion is the company, not any individual employee, contractor, or representative acting on its behalf.
- Registration Required
- A company must register with Solcoro to be eligible for and to redeem this Promotion. The offer will not be applied to any purchase made without prior registration. Registration by an individual is treated as registration on behalf of, and binding upon, the company they represent.
- Scope of Offer
- The Promotion is limited to one Promotion Code per company and may be applied to a single Solcoro for Jira purchase. Multiple employees, contractors, or representatives of the same company may not register separately to obtain additional coupons or apply the Promotion to additional instances. Multiple instances, sites, or products are not eligible under this offer.
- Annual Subscription Required
- The Promotion applies only to an annual subscription plan. Monthly or other non-annual billing terms are not eligible for the Promotion.
- Registered Company Promotion Code
- Upon successful registration, each eligible company will receive a single one-time use coupon from Solcoro, to be applied when purchasing an annual Solcoro for Jira subscription through the Atlassian Marketplace. The coupon is issued to the registered company as a whole and may be used only once, regardless of which individual within the company applies it at checkout. Coupons are distributed only after the company has installed Solcoro for Jira as a trial; Solcoro will not issue a coupon to any registered company that has not started a trial installation.
- Verification
- Solcoro may request the company's Atlassian SEN (Support Entitlement Number) and/or their Cloud URL prior to distributing the coupon code, in order to verify the trial installation and confirm eligibility. Solcoro may withhold distribution of the coupon until a valid SEN and/or Cloud URL has been provided.
- Redemption Method
- The offer must be applied to a purchase made through the Atlassian Marketplace. Purchases made through any other channel are not eligible.
- Promotion Period
- The purchase must be completed on or before December 31, 2026. Any purchase completed after this date is not eligible, regardless of prior registration.
- One-Time Use
- This Promotion may be redeemed once per eligible company, regardless of how many individuals from that company register or attempt to register. Solcoro reserves the right to identify affiliated registrations (e.g., shared company domain, billing entity, or Atlassian organization) as belonging to the same company and to limit redemption accordingly. The Promotion may not be combined with any other offer, discount, or promotion unless explicitly stated otherwise by Solcoro.
- Limitations
- The Promotion and the resulting discount apply solely to the Company's first, initial annual purchase of a Solcoro for Jira subscription through the Atlassian Marketplace. The discount does not apply to, and may not be used toward, any renewal, subsequent term, upgrade, or re-purchase following the first annual subscription period. Upon renewal, the subscription will be billed at the then-current standard rate, without the discount reflected in this Promotion.
- Non-Transferable
- This offer is non-transferable and may not be resold, exchanged for cash, or applied to any account other than the one used during registration.
- Atlassian Terms Apply
- All purchases made through the Atlassian Marketplace remain subject to Atlassian's standard terms of service, licensing agreements, and marketplace policies. This Promotion does not modify, waive, or supersede any Atlassian terms.
- Solcoro Terms Apply
- All standard Solcoro terms and conditions continue to apply in full and are not modified, waived, or superseded by this Promotion.
- Right to Modify or Withdraw
- Solcoro reserves the right to modify, suspend, or withdraw this Promotion at any time without prior notice, including in cases of suspected misuse or ineligibility.
- No Warranty
- This Promotion is offered on an as-is basis. Solcoro makes no guarantee of product performance, compatibility, or suitability beyond what is separately provided under applicable Solcoro's terms.
- Acceptance
- To Participation in this Promotion constitutes acceptance of these Terms and Conditions in full.
- Contact Us
For questions, concerns, or to exercise your privacy rights, please contact:
Solcoro LLC - info@solcoro.com