Privacy Policy

Effective date: June 10, 2026 · Last updated: August 19, 2026

Epiko Hub LLC (DBA SoloDesq) (“we,” “us,” or “our”) operates a mobile invoicing and payment application for US solopreneurs. This Privacy Policy explains what data we collect, how we use it, and how we protect it.

1. Data We Collect

We collect the following categories of information when you create an account or use the SoloDesq app:

2. Payment Processing

In-app card payment collection is not enabled in this version of SoloDesq. Invoices are delivered as PDFs through your own mail account, and no card or bank credentials are collected by the app. If card collection is enabled in a future release, it will be processed by Stripe on Stripe’s own secure pages, and SoloDesq will still never store, process, or have access to credit card numbers, bank account numbers, or other sensitive payment credentials.

3. How We Use Your Data

4. Data Sharing

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We share data only with the following service providers, each solely to provide the corresponding feature:

5. AI Features and What They Send

SoloDesq has three optional features that send data to Google. All three are off by default, each has its own separate consent, and you can decline any of them and keep using the app. Requests are made by our server, not by your phone: the app calls our own backend, which holds the API credentials and calls Google. Your device never contacts Google directly.

Receipt text recognition (Google Cloud Vision)

If you turn this on, the receipt photograph itself is sent to Google Cloud Vision so the vendor, date and amount can be read off it. With it off, photos are still captured and stored on your device and nothing is sent.

AI expense categorization (Google Gemini)

If you turn this on, we send the expense description and the amount so a Schedule C category can be suggested. The vendor name and the date are deliberately removed before the request is sent. You approve the suggestion before it is applied. Without this consent, the feature does not run at all and you choose the category yourself.

AI assistant (Google Gemini)

When you send a message to the in-app assistant, we send to Google:

Your client names, your clients’ email addresses, vendor names, invoice line items and individual transactions are never attached to an assistant question. Only the totals and counts listed above are sent, and our server rejects any request whose figures block contains anything other than those fields. Your name, email address and account identifiers are not sent either.

If you have not granted the figures consent, your question is still answered — it is simply answered without your numbers, and the app tells you when that happened. One thing to be aware of: whatever you type yourself is transmitted as written. If you type a client’s name or email address into your question, that text is sent with it, so avoid including details you would rather not share.

Assistant conversations are not stored. The transcript lives in the app’s memory for the duration of the conversation; it is not saved to your device and not saved on our servers. Our servers keep only a running count of tokens used, for cost control — not the questions and not the answers. The one exception is if you choose to report an answer: that answer is then saved to a local log on your device and placed into a prefilled email to our support address, so we can look into it. Nothing is reported unless you tap Report.

Google’s handling of the data described in this section is governed by Google’s Privacy Policy and the terms of the Google API service we use.

6. Data Retention

We retain your account data and invoice records for as long as your account is active. When you delete your account, your records are hidden immediately and permanently erased after a 30-day grace period. Deleting your account also erases the local copy on that device, including your receipt photographs and any invoice PDFs saved to the app’s Documents folder. A record that changes were made — not the records themselves — is kept for 36 months to cover the 3-year IRS audit window.

Deletion does not send you a copy of your data, and tax record-keeping obligations remain with you, so export before you delete: in the app, open the More tab and use Data export → Export Schedule C CSV (or tap “Export my data” on the subscribe screen if the app has sent you there). Full instructions, and how to request deletion by email if you cannot open the app, are on our Delete Your Account page.

7. Security

We use industry-standard security measures including TLS encryption for data in transit, AES-256 encryption for data at rest, and access controls that limit employee access to your data. No system is completely secure; if you believe your account has been compromised, contact us immediately at support@solodesq.com.

8. Your Rights

Depending on your location, you may have the right to access, correct, or delete the personal data we hold about you. To exercise any of these rights, email us at support@solodesq.com. We will respond within 30 days.

9. Children’s Privacy

SoloDesq is intended for use by adults conducting business. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has created an account, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice at least 14 days before the change takes effect. Your continued use of SoloDesq after that date constitutes acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy? Email us at support@solodesq.com.