Privacy

Solutions Platform LLC is the controller of the personal data described here. Write to privacy@solutions-platform.com with any question about it, including a request to exercise one of the rights set out below.

Postal address: 44 Granite Ridge Road, 06896 Connecticut.

This is a public description of an institutional platform. Reading it requires no account and no personal data. Three things are collected, and only three.

• The contact form. When you send it, we receive the name, organization, role, work email address and message you typed. Nothing is prefilled and nothing is inferred.
• Server records. Our host records the requests it serves, including the IP address the request came from. The contact endpoint uses the IP address to limit how many messages one connection can send in an hour, which is what keeps the form usable.
• The client platform. If you have been given access to the application, your username is held in a signed session cookie while you are logged in. The mandates you build are stored in your own browser rather than on our servers, and stay on the device you built them on.

Contact messages are handled to answer them, which is a legitimate interest under Article 6(1)(f) GDPR: you wrote to us and expect a reply. Server records and the rate limit rest on the same basis, in their case the interest in keeping a public endpoint available and free of abuse.

Where you hold access to the client platform, the processing needed to give you that access rests on Article 6(1)(b), performance of the agreement under which the access was granted.

No personal data is used for profiling, advertising, or any automated decision with legal effect.

This site sets one cookie, and only after a client signs in to the application. It holds a signed session so the platform knows the request is yours. It is marked HttpOnly and SameSite=Strict, it is not readable by script, and it expires twelve hours after it is issued. Signing out deletes it.

There is no analytics, no advertising, no tracking pixel, no embedded video or map, and no third-party script of any kind. Typefaces are served from this site rather than fetched from a font host, so loading a page contacts no one else. That is why you are not being asked to accept cookies: there is nothing here that consent would apply to.

The application also uses your browser's own storage to keep the products you are working on. That is data on your device, not a cookie, and it is never transmitted to us. Clearing site data removes it.

Only the service providers that run the site and our email, and only as processors acting on our instructions: our hosting provider, our email provider, and the cloud provider that runs the client platform. Contact messages are delivered to our own inbox. Nothing is sold, rented, or shared for anyone else's purposes.

We are established outside the European Economic Area, so a message you send reaches us there. Transfers are made under the safeguards Chapter V GDPR requires for the country concerned.

Contact messages are kept while the conversation they belong to is live and for as long afterwards as our records require, then deleted. Server records are kept for a short operational period and then rotated out. The session cookie expires after twelve hours.

If the GDPR or a comparable law applies to you, you may ask for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, ask for it in a portable form, and object to processing we base on a legitimate interest. Write to the address above and we will answer.

You may also complain to the supervisory authority for the country you live or work in. We would rather you told us first, but the right does not depend on that.

If this text changes, the date at the top changes with it. Material changes will be described here rather than made silently.