Privacy Policy

Effective date: June 10, 2026 · Last updated: June 10, 2026

Epiko Hub LLC (DBA SoloDesq) (“we,” “us,” or “our”) operates a mobile invoicing and payment application for US solopreneurs. This Privacy Policy explains what data we collect, how we use it, and how we protect it.

1. Data We Collect

We collect the following categories of information when you create an account or use the SoloDesq app:

• Account information: Your name, email address, and password.
• Business information: Your business name, address, and tax identification number (if provided).
• Invoice data: Client names, addresses, line items, amounts, and payment status for invoices you create.
• Client contact data: Names and email addresses of clients you add to SoloDesq.
• Location data (opt-in): GPS location while you actively log a mileage trip. Location is used in the foreground only, solely for mileage tracking, and is never collected in the background.
• Receipt images: Photos of receipts you capture or select for expense tracking, processed with optical character recognition (OCR).
• Usage and diagnostics data: Log data, device type, operating system, and crash reports.

2. Payment Processing

SoloDesq uses Stripe to process all payments. When your clients pay an invoice, they enter their payment details directly on Stripe’s secure payment page. SoloDesq never stores, processes, or has access to credit card numbers, bank account numbers, or other sensitive payment credentials. Stripe’s handling of payment data is governed by Stripe’s Privacy Policy.

Payouts to your bank account are processed by Stripe and governed by your Stripe Connect agreement. SoloDesq receives confirmation of payout status but does not store your full bank account details.

3. How We Use Your Data

• To provide, maintain, and improve the SoloDesq service.
• To generate invoices, send them to your clients on your behalf, and track payment status.
• To send you transactional emails (invoice confirmations, payment notifications, account updates).
• To provide customer support.
• To comply with legal obligations, including tax reporting requirements.

4. Data Sharing

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We share data only with the following service providers, each solely to provide the corresponding feature:

• Stripe: For payment processing and payout.
• Supabase (hosted on Amazon Web Services): Cloud database, authentication, and file storage that host your SoloDesq data (encrypted at rest and in transit).
• Google Cloud Vision: Optical character recognition (OCR) on receipt images you choose to scan.
• Google Gemini: AI-assisted expense categorization — only for transactions you explicitly consent to send, and you approve the suggestion before it is applied.
• Resend: Delivery of transactional email, including invoice emails sent to your clients.
• RevenueCat: Subscription management for your SoloDesq subscription.
• Sentry: Crash reporting and error diagnostics (not linked to your identity).
• Law enforcement or regulators: When required by applicable law or valid legal process.

5. Data Retention

We retain your account data and invoice records for as long as your account is active. When you delete your account, your data is permanently deleted within 30 days, except records we are legally required to retain (for example, payment and transaction records held by Stripe under their own policies). Because tax record-keeping obligations remain with you, we recommend exporting your data (Settings → Export) before deleting your account.

6. Security

We use industry-standard security measures including TLS encryption for data in transit, AES-256 encryption for data at rest, and access controls that limit employee access to your data. No system is completely secure; if you believe your account has been compromised, contact us immediately at support@solodesq.com.

7. Your Rights

Depending on your location, you may have the right to access, correct, or delete the personal data we hold about you. To exercise any of these rights, email us at support@solodesq.com. We will respond within 30 days.

8. Children’s Privacy

SoloDesq is intended for use by adults conducting business. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has created an account, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice at least 14 days before the change takes effect. Your continued use of SoloDesq after that date constitutes acceptance of the updated policy.

10. Contact

Questions about this Privacy Policy? Email us at support@solodesq.com.