Privacy Policy

1. Who we are and what this covers

Solid Systems, Inc. (“SSI,” “we,” “us”) is an Iowa corporation. Some of our consumer products are published under the name Punknboo Studios, a trade name of SSI.

This policy applies to the software applications, web applications, and integrations we publish (each a “Product”) and to this website. If a Product publishes its own privacy policy, that policy governs that Product, and this one fills in anything it does not address. Products designed for children always publish their own policy.

This policy does not cover consulting work we perform under a client agreement; data handling for that work is governed by the agreement.

2. Information we collect

Information you give us

• Account information — such as your name, email address, and the account identifier issued by the sign-in method you choose (for example, Sign in with Apple).
• Content you create — information you enter into a Product.
• Messages — what you send us by email, a contact form, or a waitlist signup.

Information from services you connect

Some Products connect to other platforms you use, such as Intuit QuickBooks Online. You authorize that connection through the platform’s own sign-in and consent screen (OAuth). We receive access only to the data covered by the permissions you approve. Depending on the Product, that may include company profile information, chart of accounts, customers, vendors, items, invoices, bills, payments, and other transaction records. We never receive your password for the connected platform.

Information collected automatically

• Operational and diagnostic logs — IP address, browser or device type, timestamps, the requests made, and error details. We use these to keep the service running, troubleshoot, and protect against abuse.
• No advertising tracking — we do not use advertising identifiers, third-party ad networks, or cross-site tracking.

Payments

Payments are processed by the payment provider or app store you use (such as Apple or Stripe). We receive confirmation of the purchase, not your full card number.

3. How we use information

We use information to:

• provide, operate, and maintain the Products, including performing the actions you request against a connected service;
• authenticate you and keep your account secure;
• respond to support requests and send service messages, such as security notices or changes to these terms;
• diagnose problems and improve reliability; and
• comply with law and enforce our agreements.

We do not sell personal information. We do not use it, or data from connected services, for advertising or to build marketing profiles, and we do not use data from connected services to train machine-learning models.

Some features use a third-party AI model provider to process a request you make. When they do, only the data needed for that request is sent, and only under terms that do not allow the provider to train its models on it.

4. Data from Intuit and other connected services

• We access connected-service data only after you authorize it, and only within the permissions you granted.
• We use it only to provide the features of the Product you connected. We do not sell it or share it with third parties, except the service providers described in Section 5 that help us run the Product.
• Access tokens are stored on our servers and are not exposed to other users.
• You can disconnect at any time, either inside the Product or from the connected platform’s app management settings (for QuickBooks Online, the Apps area of your Intuit account). When you disconnect, we stop accessing your data and revoke or discard the access tokens we hold.
• After you disconnect or delete your account, we delete the data we copied from the connected service within 30 days, except where law requires us to keep it.

Your use of a connected platform is also governed by that platform’s own terms and privacy policy.

5. When we share information

We share information only:

• With service providers who process it on our behalf to run the Products, such as cloud hosting, database, authentication, email delivery, payment, and AI model providers. They may use it only to provide their service to us.
• At your direction, such as when you ask a Product to write data back to a connected service.
• For legal reasons, when required by law or valid legal process, or to protect the rights, safety, or security of you, us, or others.
• In a business transfer, such as a merger or acquisition, in which case this policy continues to apply to the information transferred.

6. Retention

We keep account and Product data while your account is active or as needed to provide the Product. When you delete your account or ask us to delete your data, we delete it within 30 days, except where we must keep it to meet a legal obligation, resolve a dispute, or enforce an agreement. Copies in routine backups are removed as those backups expire. Operational logs are kept only as long as needed for security and troubleshooting.

7. Security

Data is encrypted in transit using TLS, and data stored with our hosting providers is encrypted at rest. Access to production systems and customer data is limited to personnel who need it to operate the Products. No system is perfectly secure; if a breach affects your personal information, we will notify you as required by law.

8. Your choices and rights

You can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is wrong;
• delete your information or your account; or
• disconnect a connected service on your behalf.

Email [email protected] from the address on your account. We respond within 30 days, and we honor these requests regardless of where you live. Depending on your location, you may have additional rights under local law. We will not treat you differently for exercising them.

9. This website

This website does not use analytics, advertising cookies, or tracking pixels. If you join a waitlist or contact us, we receive the email address and message you provide and use them only to reply or to notify you about that product; waitlist notifications are delivered through our email provider. Fonts are served by Google Fonts, which receives your IP address and browser information when it delivers them.

10. Children

Our general Products are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

11. Where data is processed

We are based in the United States, and data is processed and stored in the United States.

12. Changes to this policy

If we change this policy, we will post the new version here with a new effective date. If a change materially affects how we use information we already hold, we will notify you by email or in the Product before it takes effect.

13. Contact

Solid Systems, Inc.
[email protected]