This policy explains what ELEVATELY, LLC does with personal data in connection with the SoloStore website at getsolostore.com and the sale of SoloStore licenses. It is short because we collect very little.
The most important thing on this page: SoloStore is self-hosted software. When you buy it and run your own store, we have no access to that store — not to your files, your videos, your database, your members, your customers or their payments. We are not the controller or the processor of any of it. This policy covers only our own website and our own customers.
1.Who is responsible
ELEVATELY, LLC is the controller for the data described here. Contact: matt@mattgiaro.com. We do not publish a postal address here; email is the working channel for any request under this policy, including a request for a postal address.
2.What we collect
If you just visit the website
The site is served by Cloudflare, which processes technical request data — IP address, user agent, requested URL, timestamp — to deliver the pages and to protect against abuse. We do not run analytics, advertising or tracking scripts, and there is no advertising pixel anywhere on the site. We set no cookies of our own unless you arrive through a partner link — see “Partner links” below. That is why you are not being asked to accept cookies.
If you buy a license
Checkout is handled by Stripe. Stripe collects your name, email address, billing address, country and payment details, and shares with us what we need to fulfil the order and keep tax records: your name, email, country, the amount, and the last four digits and brand of your card. We never see or store your full card number.
If you email us
We keep the message, your email address and anything you put in it, so we can answer and refer back to it later. Please do not send us passwords, API keys or your customers’ personal data — if you need to show us something, redact it first.
If you join the email list
If you subscribe, we store your email address and, if you give it, your first name, in MailerLite, along with basic engagement data such as whether a message was opened. Every email has an unsubscribe link, and unsubscribing takes effect immediately.
3.Videos on this site
The two videos on the homepage are embedded from YouTube and Descript. Neither loads until you click it. Until you press play, a locally hosted image is shown and no request goes to either company, so they set no cookies and receive no data about you. If you do click, that company then receives your IP address and sets its own cookies under its own privacy policy.
4.Partner links
Some people recommend SoloStore to their audience and earn a commission when someone buys through them. Their link looks like getsolostore.com/?via=their-name. If you did not arrive through one of those links, none of this applies to you — the tracking script is not even loaded, so no request is made and nothing is stored on your device.
If you did arrive through a partner link, your browser stores a short reference (aff_ref) recording which partner sent you, so that if you buy, they get paid. It is kept in this site’s local storage, and as a cookie on our affiliate server’s own address. That server — affiliates.getsolostore.com — is one we host ourselves, and it receives the page you landed on, the site you came from, and the partner’s code. No advertising network is involved, and nothing is shared with one.
The reference lasts 60 days and is used for nothing but paying the right partner. Clearing your browser’s site data removes it. Your purchase, and the price you pay, are identical either way — a partner’s commission comes out of our margin, never out of your pocket.
5.Why we process it, and on what basis
- To sell and deliver the license — performance of our contract with you.
- To provide support — performance of our contract, and our legitimate interest in helping customers.
- To keep tax, accounting and transaction records — compliance with a legal obligation.
- To keep the site up and defend it against abuse — our legitimate interest in a working, secure website.
- To send marketing emails — your consent, withdrawable at any time.
- To credit a partner who referred you — our legitimate interest in running a referral programme, and in paying the person who actually sent you. Only applies if you arrived through a partner link.
We do not make automated decisions with legal or similarly significant effects, and we do not profile you.
6.Who we share it with
We do not sell personal data, we do not share it for cross-context behavioral advertising, and we do not give it to data brokers. We use a small number of service providers, each of which processes data only to provide their service to us:
| Provider | What for | What it sees |
|---|---|---|
| Stripe | Payments for the license | Name, email, billing address, payment details |
| Cloudflare | Hosting and delivery of this website | IP address, user agent, requests |
| MailerLite | Email list, if you subscribe | Email address, first name, engagement |
| Our email provider | Support and order correspondence | Your email address and the contents of your messages |
We may also disclose data where we are legally required to, or to establish, exercise or defend a legal claim, or to a successor if the business is sold — in which case this policy continues to apply.
7.Where it is processed
Our providers operate globally and may process data in the United States and elsewhere. Where data moves out of the EEA or the UK, our providers rely on the European Commission’s Standard Contractual Clauses or an equivalent approved mechanism.
8.How long we keep it
- Order and tax records — as long as tax and accounting law requires, typically seven years.
- Support email — up to three years after the conversation ends.
- Email list — until you unsubscribe, then a suppression record so we do not email you again.
- Server and security logs — short term, per Cloudflare’s retention.
9.Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive a portable copy, to withdraw consent, and — for California residents — to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal data, so there is nothing to opt out of. We will never treat you differently for exercising a right.
To exercise any of these, email matt@mattgiaro.com. We answer within 30 days. If you are in the EEA or the UK and are unhappy with our answer, you may complain to your local data protection authority.
10.Security
We keep the personal data we hold to a minimum, restrict access to it, and rely on established providers for payments and hosting. No system is perfectly secure, and we cannot guarantee absolute security. Security of your own store and its data is your responsibility as its operator.
11.Children
SoloStore is sold to adults for business use. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, email us and we will delete it.
12.Changes
If this policy changes we update the date at the top of the page. Material changes affecting how we use data already collected will be notified by email where we have your address.
13.Contact
ELEVATELY, LLC
matt@mattgiaro.com