Solvespace Privacy Policy
Effective date: 6 September 2026
Controller: Solvespace
Scope: Global operations, including users in the European Economic Area, the United Kingdom, and other jurisdictions
This Privacy Policy explains how Solvespace collects, uses, shares, and retains personal data when you use the Platform, including Problem Rooms, AI audits, escrow, and enterprise single sign-on.
1. Data we process
We process:
- Account data: name, email, biography, social links, and onboarding status;
- Collaboration data: room memberships, thread messages, canvas proposals, votes, and Git metadata;
- Audit data: commit-entropy scores, human-variance flags, trust-graph statistics, and generated dossiers;
- Enterprise data: company name, billing email, SSO configuration, NDA flags, and bounty records;
- Payment data: bounty amounts, escrow status, payee identifiers, and transaction history (card or bank details are typically handled by a payment partner);
- Technical data: IP address, device, logs, and security events; and
- KYC/AML data: identity documents, beneficial-ownership information, and screening results for enterprise sponsors and payout recipients.
2. Purposes and legal bases (GDPR)
| Purpose | Example | Primary legal basis |
|---|---|---|
| Provide the Platform | Account creation, room access | Contract, Art. 6(1)(b) GDPR |
| Escrow and payouts | Lock, release, refund | Contract; legitimate interests in fraud prevention |
| KYC/AML and sanctions screening | Sponsor and payee verification | Legal obligation, Art. 6(1)(c); public-interest AML rules |
| Automated AI auditing | Entropy, friction, and trust scoring | Contract; legitimate interests in marketplace integrity |
| Enterprise NDA enforcement | Access-control and audit logs | Contract; legitimate interests |
| Security and anti-vandalism | Rate limits, abuse detection | Legitimate interests, Art. 6(1)(f) |
| Product communications | Service notices | Contract or legitimate interests |
| Marketing to enterprise contacts | Sales outreach | Consent or legitimate interests, with opt-out |
Where we rely on legitimate interests, we balance those interests against your rights and expectations.
3. Automated decision-making
The AI auditor produces verification signals that can gate escrow release. These signals are decision-support tools. A human sponsor administrator remains responsible for manual-release policies. You may request a human review of an audit outcome that materially affects a payout by contacting legal@solvespace.com.
4. KYC and AML notice
Solvespace may verify the identity of enterprise sponsors, beneficial owners, and bounty recipients before locking or releasing funds. We may share data with regulated payment partners and screening providers. We may refuse, delay, or reverse a transaction where required by anti-money-laundering, counter-terrorist-financing, or sanctions law. Providing requested KYC information is mandatory for escrow features.
5. Sharing
We share personal data with:
- enterprise sponsors and invited room members as needed to operate a challenge;
- infrastructure, analytics, email, and payment processors under contract;
- professional advisors and authorities when legally required; and
- a successor in the event of a corporate transaction, subject to this Policy.
We do not sell personal data.
6. International transfers
Solvespace operates globally. Where we transfer EEA or UK personal data abroad, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, and supplementary technical measures including encryption of NDA payloads at rest.
7. Retention
Account data is retained for the life of the account plus a limited archival period. Escrow, KYC, and audit records are retained for the period required by financial-crime and tax law, typically five to ten years. NDA room content is retained according to the enterprise order form, then deleted or returned.
8. Your rights
Subject to law, you may request access, correction, deletion, restriction, portability, or objection, and you may withdraw consent. EEA and UK users may lodge a complaint with a supervisory authority. California and similar state residents may have additional rights regarding disclosure and deletion. Use legal@solvespace.com to submit a request. We may need to verify your identity.
9. Children
The Platform is not directed to children under 16. We do not knowingly collect their data.
10. Contact
Privacy and compliance: legal@solvespace.com
Enterprise sales (non-privacy): enterprise@solvespace.com
Designated Legal Representative: Stanislau Chykiliou, Legal Operations