Privacy policy

This Privacy Policy explains how Solidroad, Inc. (“Solidroad,” “we,” “us,” or “our”) processes personal data in connection with its websites, applications, browser extensions, APIs, and related services (collectively, the “Services”).

Solidroad provides enterprise software to business customers. In most cases, Solidroad processes personal data on behalf of its customers and acts as a data processor, while customers act as data controllers.

This Privacy Policy is intended to provide transparency regarding Solidroad’s data practices and does not replace or override any contractual obligations, including any Data Processing Agreement (“DPA”) entered into with a customer.

Last updated: December 25, 2025

1. Company Information

Solidroad, Inc.
1111B South Governors Avenue, #6159
Dover, DE 19904
United States

Solidroad, Inc. wholly owns Solidroad Ltd, an Irish subsidiary supporting European operations.

Contact: security@solidroad.com

2. Scope of This Policy

This Privacy Policy applies to personal data processed in connection with:

● The Solidroad web application

● The Solidroad Chrome browser extension

● Solidroad APIs

● The Solidroad web application

This policy applies only to business users. The Services are not intended for children.

3. Roles and Responsibilities

Solidroad as a Data Processor

When customers use the Services to upload, record, or otherwise process content (including browser workflows, audio, video, or integration data), Solidroad acts as a data processor and processes such data solely on documented customer instructions.

Customers are responsible for:

● Determining the lawful basis for processing

● Providing required notices to end users

● Obtaining any required consents

Solidroad as a Data Controller

Solidroad acts as a data controller with respect to personal data processed for its own business purposes, including:

● Account administration

● Authentication and access management

● Billing

● Marketing communications

● Security, compliance, and legal obligations

Where a DPA applies, it governs in the event of any conflict with this Privacy Policy.

`4. Personal Data We Process`

A. Account and Identity Information

● Name

● Business email address

● Company name

● User identifiers

● Authentication and access credentials (stored securely)

B. Customer Content

Processed strictly on behalf of customers, which may include:

● Audio and video recordings

● Browser workflow recordings

● Text, images, and other content captured during workflows

● Data transmitted through customer-enabled integrations

C. Chrome Extension Data

When a user explicitly initiates a recording session, the Solidroad Chrome extension may process:

● Web page content necessary to capture the initiated workflow

● User interactions required to generate guides or simulations

The extension:

● Activates only after user action

● Captures only data required for the requested workflow

● Uses session-capture technology (including rrweb)

● Applies PII redaction

● Does not collect unrelated browsing history

● Does not operate in the background

D. Usage and Technical Data

● IP address

● Device and browser metadata

● Log files and audit logs

● Security and performance telemetry

`5. How We Use Personal Data`

Solidroad processes personal data solely for legitimate and limited purposes, including:

1. Service Delivery

○ Recording workflows, audio, and video at the user’s request

○ Generating AI-powered guides and simulations

○ Securely storing and synchronizing customer content

2. Account and Access Management

○ User authentication (including SSO and MFA)

○ Subscription and workspace administration

3. Customer-Directed Integrations

○ Processing data from third-party systems only when enabled by the customer

4. Security and Reliability

○ Preventing fraud and abuse

○ Maintaining system integrity and availability

○ Monitoring and logging

5. Customer Support

○ Responding to inquiries

○ Troubleshooting and issue resolution

6. Marketing and Communications

○ Sending service-related communications

○ Sending marketing communications where permitted by law

○ Users may opt out of marketing communications at any time

7. Legal and Compliance

○ Meeting contractual obligations

○ Complying with applicable laws and regulations

`6. AI and Machine Learning`

Solidroad does not use customer data to train generalized artificial intelligence or machine learning models. Customer data is used solely to generate outputs for that specific customer in accordance with contractual obligations and documented instructions.

`7. Data Sharing and Subprocessors`

Solidroad may engage third-party subprocessors to support delivery of the Services, including providers of:

● Cloud hosting

● Infrastructure

● Security

● Analytics

● Customer support

All subprocessors are subject to contractual obligations requiring appropriate confidentiality, security, and data protection safeguards.

Solidroad does not sell personal data and does not share personal data for advertising purposes.

`8. International Data Transfers`

Personal data may be processed in the United States and other jurisdictions where Solidroad or its subprocessors operate. Where required, Solidroad relies on lawful transfer mechanisms, including Standard Contractual Clauses and other recognized safeguards.