Information we collect

• Account information, including name, email address, authentication identifiers, institution, and account status.
• Profile and fulfillment information, including phone number, address, and saved researcher details.
• Order records, including items, fees, fulfillment method, manual-payment status, tracking, referrals, and communications. Soléa does not collect payment-card or online-banking credentials through the website.
• Essential session and security information, such as authentication cookies, request metadata, IP address, device or browser information, and security logs generated by service providers.
• Information you voluntarily provide in customer-support, privacy, order, or research-qualification communications.

How information is used

• Create and secure accounts, verify email addresses, and manage researcher access.
• Review, accept, fulfill, deliver, track, cancel, and document orders.
• Send authentication, order, security, and service communications.
• Maintain inventory, referral points, records, fraud controls, and website reliability.
• Comply with legal obligations, enforce policies, protect rights and safety, and respond to lawful requests.

Service providers and disclosures

Soléa uses service providers for authentication and account infrastructure, website hosting and storage, email delivery and receiving, and domain services. These currently include Supabase, OpenAI Sites and its infrastructure providers, Resend, and the domain provider. Information is disclosed only as reasonably necessary for those services, an order requested by you, legal compliance, business protection, or a transaction involving the business.

Soléa does not sell personal data and does not use personal data for cross-context behavioral advertising. Soléa does not knowingly process personal data for medical treatment or create patient medical records.

Retention and security

Information is retained for as long as reasonably necessary for accounts, orders, tax and business records, dispute prevention, legal compliance, and security. Retention periods vary by record type. Soléa uses reasonable administrative and technical safeguards, but no system or transmission can be guaranteed completely secure.

Your choices and privacy requests

You may update many profile details in My Account. Depending on applicable law, you may request access, correction, deletion, or a portable copy of eligible personal data, or appeal a decision about a request. Soléa may verify identity, retain legally required records, and deny or limit a request where permitted by law.

Send privacy requests to support@solea.bio. Include the email associated with your account and do not send passwords, financial credentials, government identification, or sensitive medical information. Soléa will not discriminate against you for exercising an applicable privacy right.

Texas residents

Texas residents may have rights under the Texas Data Privacy and Security Act when it applies, including rights to confirm processing, access, correct, delete, obtain a portable copy, and opt out of certain targeted advertising, sale, or profiling. Soléa states that it does not sell personal data or conduct targeted advertising or qualifying profiling through this site.

Age restriction and international access

Soléa is restricted to persons at least 21 years old and is not directed to children. The site is operated from the United States. Do not submit information or place an order where doing so is prohibited by applicable law.

Policy changes and contact

This policy may be updated to reflect operational, legal, or service changes. Material changes will be communicated through the site or account experience when appropriate. Questions may be sent to support@solea.bio.