SOLOMON is a personal assistant for your whole life. You give it access to parts of your life — calendar, email, bank accounts, journal entries and, if you turn faith mode on, your Scripture reading and prayers — so it can help you look after them well. This page describes what we collect, why, where it lives, and the rights you keep over it.
One sentence
Your data is stored on an isolated, encrypted volume on a server in the United States; nothing leaves it except when you trigger an action that requires an outside service (your AI model, your bank via Plaid, Google Calendar, Telegram, etc.), and you can export or delete everything at any time.
Who runs SOLOMON
SOLOMON is operated by Bethel Ventures, LLC. You can reach us at support@hellosolomon.com for any privacy question.
What we collect
Account information
- Email address and password hash (for sign-in)
- Name and self-described role (founder, pastor, parent, etc.)
- Time zone, language preference, faith mode
- Two-factor authentication secret if you enable it
Content you create
- Journal entries, prayer logs, reflections, receipts, photos you upload
- Tasks, habits, goals, OKRs, decision logs
- People and relationships you choose to track
- Conversations with SOLOMON in chat, voice transcripts, command history
- Memories SOLOMON extracts from those interactions to be helpful over time
Financial data (when you connect your bank)
If you choose to connect a bank account, we use Plaid Inc. as our credential broker. You authenticate directly with Plaid; we never see your bank username or password. Plaid returns to us:
- Account names, types, last-4 mask, current and available balances
- Transaction history (date, amount, merchant, category)
- The institution's name (e.g. "Chase")
We use this data only to display your finances inside SOLOMON, calculate net worth and cash flow, and tag expenses to your businesses for tax preparation. We do not sell it, share it, or use it for advertising. Plaid's own privacy policy is at plaid.com/legal.
Connected services (only with your permission)
When you connect a third party (each is optional and individually revocable):
- Google — calendar events, Gmail messages, Drive files, YouTube uploads
- Telegram — chat messages between you and your SOLOMON bot
- Hospitable — short-term rental reservations + guest messages
- Buffer — your scheduled social posts
- Apple HealthKit / health wearables — sleep, activity, vitals you choose to share
Google user data
If you connect a Google account, SOLOMON asks only for the access the features you use need. You can disconnect at any time from Settings → Connectionsor from your Google account's security page.
- Gmail (read and modify) — to triage your inbox (archive, label, or suggest a reply), spot inquiries such as speaking or partnership requests, and draft replies for you to review. To sort your inbox, the sender, subject line and first 260 characters of each new message are sent to an AI model once; the result is saved so the same message is never sent twice. Full message bodies are sent to an AI model only for senders on your allowlist (anyone in your People list or domains you add), or when a message looks like a speaking, partnership or booking inquiry. SOLOMON never deletes or sends mail on its own unless you turn that on.
- Gmail (send) — to send a reply only after you approve it, or automatically only if you have turned that on for a specific contact or category.
- Google Calendar — to read your schedule for your daily briefing and to create events, for example when someone books time with you.
- Google Drive and YouTube — not requested from customer accounts.
SOLOMON's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular: Google user data is used only to provide the features above to you; it is never sold, never used for advertising, and never used to train or improve any AI model; it is transferred to an AI provider only to perform a task you asked for; and no person at Bethel Ventures, LLC reads it unless you ask us to for support, it is needed for security or to comply with the law.
Where your data lives
SOLOMON's database is a SQLite file on a private encrypted volume, on a server in the United States (Chicago). Connections between your browser and SOLOMON are HTTPS-only. On top of the volume encryption, the credentials SOLOMON holds for you are individually encrypted at rest with AES-256-GCM, using a key derived from a passphrase only the operator holds: your Plaid bank-connection tokens, Google and brokerage OAuth access and refresh tokens, bot tokens, API keys and mailbox passwords you enter for integrations, and your two-factor (TOTP) secret. Your SOLOMON password is never stored; we keep only a bcrypt hash of it. Nightly backups are encrypted with the same passphrase before they leave the server, and a copy of each is kept in separate off-site storage. The newest 14 are kept.
Third-party processors
When SOLOMON takes an action you asked for, the relevant data goes out to the service performing that action:
- AI model providers — Groq, OpenRouter (which routes to model hosts such as DeepSeek), DeepSeek, Google AI, Anthropic and OpenAI, or a model running on your own device if you set one up. Your prompt and any context SOLOMON adds (recent chat, recalled memories) are sent to the model handling that request. Requests through OpenRouter are restricted to hosts that do not store or train on prompts; other providers may retain prompts under their own policies, so check each one. SOLOMON itself does not train any model on your data.
- Plaid — bank connection broker. See above.
- Stripe — payment processing for paid plans. Stripe receives your email and payment details directly; SOLOMON never sees or stores your full card number, only Stripe's customer and subscription IDs and your plan status.
- Brevo — transactional email (sign-in verification, password resets, and notices you've turned on). Brevo receives your email address and the content of those messages.
- Google — when you've connected Google.
- ElevenLabs — when you've enabled premium voice output; the text being read is sent to ElevenLabs to synthesize speech.
- Brave Search / Tavily — web search queries, when SOLOMON answers a question that needs current information.
- Crossway (ESV) and API.Bible — Bible verse lookups (just the reference, not your reading list).
- Apple Push / FCM — when push notifications are enabled.
We do not sell your data, run advertising on you, or share data between SOLOMON users without your explicit setup of a shared household.
How long we keep it
- Account record and content you've created: until you delete it or your account.
- Session tokens: 30 days from last use.
- Sign-in activity (successful and failed attempts): 90 days, for security audit.
- Receipts and bank transactions: retained as long as you keep the account, since they're often needed for past-year tax filings.
- Inbox sorting results (a category and one-line reason per Gmail message — never the message itself): 90 days, and deleted at once when you disconnect your last Google account. Disconnecting also revokes SOLOMON's access at Google.
Your rights
You can, at any time:
- Export your entire dataset as JSON from /settings. Exports include everything you created and everything SOLOMON stores about you, but never credentials (tokens, keys, password hashes or two-factor secrets).
- Delete any single item, any entire surface, or your whole account from /settings. Deleting your account takes effect immediately: SOLOMON cancels your subscription with Stripe, asks Plaid to sever every bank connection, revokes its access to your Google account, and then erases your profile, content, sessions, bank data, audit logs and uploaded files. Encrypted backups that were taken before the deletion are kept for up to 14 days after it and then permanently overwritten; they are never used to restore your account unless you ask.
- Disconnect any third-party integration from /settings → Connections. Disconnecting Plaid scrubs every account, every transaction, every receipt link associated with the institution.
- See what SOLOMON has remembered about you on /memory, and remove anything you don't want kept.
Cookies
We use a single session cookie (solomon.session) to keep you signed in. It's HttpOnly, Secure, and SameSite=Lax. No analytics cookies, no ad cookies, no third-party trackers.
Children
SOLOMON is not directed at children under 13. If you become aware that a child has signed up, please email us and we'll delete the account.
Changes
When we materially change this policy we'll update the date at the top and surface a notice the next time you sign in. Continued use after that constitutes acceptance.
Contact
Privacy questions, data export requests, deletion requests, or disputes: support@hellosolomon.com.