Terms & Privacy · August 10, 2026
sha256:3ff538fb6353d567433d55c1cd80f637915bf3ca8748db8248e300d2e0afccd1 · August 10, 2026
Terms of Service
1. Agreement to these Terms
These Terms of Service ("Terms") are a binding agreement between you (and, if you accept on behalf of an organization, that organization · "you") and Aureum Growth Solutions LLC, a Wyoming limited liability company ("Solipsis," "we," "us," or "our"), governing your access to and use of the Solipsis applications, websites at solipsis.org, and related services (collectively, the "Service").
By creating an account, clicking to accept, or using the Service, you agree to these Terms, our Privacy Policy, and our Acceptable Use Policy, each incorporated by reference. If you do not agree, do not use the Service.
2. Eligibility
You must be at least 18 years old to use the Service. By using the Service you represent that you are 18 or older, that you have the authority to enter into these Terms, and that you are not barred from using the Service under the laws of the United States or any other applicable jurisdiction.
If you use the Service on behalf of an organization, you represent that you are authorized to bind that organization to these Terms.
3. The Service and end-to-end encryption
Solipsis is end-to-end encrypted. Your messages and files are encrypted on your device before they reach us; we · and our infrastructure providers · store only ciphertext we cannot read. Calls are peer-to-peer wherever the network allows, are encrypted in transit, and are not recorded or stored by us; connecting a call does disclose the participants' IP addresses to a public STUN server, and where a direct connection is impossible and we have enabled a relay (TURN), the still-encrypted call media passes through that relay — both are named on our Subprocessors page. One further, narrow exception: if you use the Slack importer, the files you choose to bring across are fetched by our server and passed back to your browser in the clear, which then encrypts them; those bytes (and the Slack API token you may supply to authorize the download) exist only in our server's memory for the length of that one request and are never written to our disks, our database, or our logs. Your private keys and master seed never leave your devices and we never receive them; the per-workspace keys that let members read shared content are themselves encrypted to each member's device (and if you generate an incoming-webhook URL, that URL embeds a channel key and passes through our servers transiently — treat it as a secret). Apart from that transient import path, we cannot access, disclose, monitor, moderate, or recover the content you send, and we cannot restore it if you lose all of your devices and your transfer code.
Because of this design, you are solely responsible for safeguarding your account password, your device, and your transfer code (the recovery code that moves your keys to a new device). We cannot reset your encryption keys or recover your encrypted content. Loss of all of your devices together with your transfer code will result in permanent, unrecoverable loss of your content. This is a deliberate property of the Service, not a defect.
Irreversible deletion features
The Service includes features that permanently and irreversibly delete content. Because we hold only ciphertext and keep no backup we can read, deleted content cannot be restored by us. By using the Service you acknowledge and accept that:
- A workspace owner can delete an entire workspace — every channel, message, file, and membership — in a single action.
- Removing a member from a workspace ends that member's access and deletes their direct messages and the content sealed to them.
- A workspace can be set to require a second authentication factor; a member who has not enrolled one by the stated deadline may have their access, seat, and the content sealed to it removed automatically.
- A workspace owner may arm an inactivity ("dead-man") switch that permanently erases the entire workspace — every channel, message, file, and key — if the owner does not sign in within the configured window. Any warning notice we send is a courtesy and best-effort; the erasure occurs whether or not you receive it.
- Channels or rooms may be configured to expire and be deleted.
These deletions are intentional and permanent. To the maximum extent permitted by law, we are not liable for content lost through these features, whether triggered by you, by a workspace owner or administrator, or automatically as described above.
4. Accounts and security
You must provide accurate account information and keep it current. You are responsible for all activity under your account. Notify us at [email protected] promptly if you suspect unauthorized use. We are not liable for losses arising from your failure to secure your credentials, device, or transfer code.
Workspaces have roles (owner, admin, member, guest). The workspace owner and admins control membership, settings, and · for paid workspaces · billing. If you join a workspace administered by someone else, that administrator controls the workspace and its membership and may remove you or your access; as described in Section 3, removal permanently deletes your direct messages and the content sealed to you in that workspace, and workspace-level actions can permanently delete the whole workspace.
5. Acceptable use
Your use of the Service must comply with our Acceptable Use Policy. Because the Service is end-to-end encrypted, we cannot proactively monitor content; you are fully responsible for the content you create, send, and store, and for the conduct of everyone you invite to your workspace.
6. Plans, fees, and billing
Paid plans are billed per seat on a recurring basis (monthly or annually) through our payment processor, Stripe. By subscribing, you authorize us and Stripe to charge your payment method the applicable fees, plus any taxes, on a recurring basis until you cancel.
Auto-renewal
Subscriptions renew automatically at the end of each billing period at the then-current rates unless you cancel before the renewal date. You may cancel at any time from the in-app billing settings; cancellation takes effect at the end of the current billing period and is reversible until then.
Seats, changes, and proration
Adding seats or changing plans mid-cycle is prorated by Stripe. You are responsible for fees for all seats on your subscription. Seat and plan limits for each tier are described on our pricing page and enforced by the Service.
Taxes
Fees are exclusive of taxes. You are responsible for all applicable sales, use, VAT, GST, and similar taxes, other than taxes on our net income.
Refunds
Except as required by law or as expressly stated in our Refund & Cancellation Policy, fees are non-refundable. Failed payments may result in dunning and, ultimately, locking or suspension of the workspace as described in that policy.
7. Your content
You retain all rights in the content you and your workspace members create, upload, or send through the Service ("Your Content"). You grant us only the limited rights necessary to operate the Service · namely to store and transmit the encrypted form of Your Content and to display metadata (such as timing and membership) required to route it. We do not acquire any rights to read, use, sell, or train on Your Content, and our encryption prevents us from doing so.
You represent that you have all rights necessary to submit Your Content and that it does not violate these Terms, the Acceptable Use Policy, or any law or third-party right.
8. Our intellectual property; license to you
The Service, including its software, design, and trademarks, is owned by Aureum Growth Solutions LLC and its licensors and is protected by intellectual-property laws. Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable license to use the Service for its intended purpose during your subscription.
You may not copy, modify, distribute, sell, reverse engineer, or create derivative works of the Service, except to the extent this restriction is prohibited by applicable law, and you may not remove any proprietary notices.
9. Feedback
If you send us suggestions or feedback, you grant us a perpetual, irrevocable, royalty-free license to use it without restriction or obligation to you.
10. Third-party services
The Service relies on third-party providers (for example, hosting, database, payments, and email · listed in our Subprocessors page) and may interoperate with services such as identity providers (SSO/SCIM) and incoming webhooks that you choose to configure. We are not responsible for third-party services, and your use of them is governed by their terms.
11. Beta and enterprise features
Some features may be offered on a trial, beta, or enterprise-negotiated basis and may be modified or discontinued. Enterprise customers may enter a separate written agreement or order form that, where it conflicts with these Terms, controls for that customer.
12. Suspension and termination
You may stop using the Service at any time. We may suspend or terminate your access if you breach these Terms or the Acceptable Use Policy, if required by law, or to protect the Service or others. Where practicable and lawful, we will give notice.
On termination, your license ends. Because of end-to-end encryption, exporting or deleting Your Content is your responsibility using in-app tools; deletion of your account or workspace removes the ciphertext and metadata we hold, which cannot thereafter be recovered.
13. Disclaimers
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE AGAINST ALL THREATS.
WITHOUT LIMITING THE FOREGOING, YOU ACKNOWLEDGE THAT END-TO-END ENCRYPTION MEANS WE CANNOT RECOVER YOUR CONTENT OR KEYS, AND WE DISCLAIM ALL LIABILITY FOR CONTENT LOSS RESULTING FROM LOST DEVICES, LOST PASSWORDS, OR LOST TRANSFER CODES, OR FROM THE IRREVERSIBLE DELETION FEATURES DESCRIBED IN SECTION 3 (WORKSPACE DELETION, MEMBER REMOVAL, THE INACTIVITY SWITCH, SECOND-FACTOR-DEADLINE REMOVAL, CHANNEL EXPIRY, AND ANY RESULTING ACCOUNT DELETION), WHETHER TRIGGERED BY YOU, BY A WORKSPACE OWNER OR ADMINISTRATOR, OR AUTOMATICALLY. Some jurisdictions do not allow certain disclaimers, so some of the above may not apply to you.
14. Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, AUREUM GROWTH SOLUTIONS LLC AND ITS OFFICERS, EMPLOYEES, AND SUPPLIERS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, DATA, OR GOODWILL, ARISING FROM OR RELATED TO THE SERVICE.
OUR TOTAL AGGREGATE LIABILITY FOR ANY CLAIM ARISING FROM OR RELATED TO THE SERVICE WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID US FOR THE SERVICE IN THE TWELVE (12) MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS ($100). These limitations apply even if a remedy fails of its essential purpose and regardless of the theory of liability.
15. Indemnification
You will defend, indemnify, and hold harmless Aureum Growth Solutions LLC from and against any claims, damages, liabilities, and expenses (including reasonable attorneys' fees) arising from your use of the Service, Your Content, your breach of these Terms or the Acceptable Use Policy, or your violation of any law or third-party right.
16. Governing law
These Terms are governed by the laws of the State of Wyoming, United States, without regard to its conflict-of-laws rules, and by applicable U.S. federal law. Subject to Section 17, the exclusive venue for any dispute not subject to arbitration is the state and federal courts located in Wyoming, and you consent to their jurisdiction.
17. Dispute resolution; arbitration; class-action waiver
Most concerns can be resolved by contacting [email protected]. If we cannot resolve a dispute informally within 30 days, you and we agree to resolve any dispute arising out of or relating to these Terms or the Service through binding individual arbitration administered under the rules of a recognized U.S. arbitration provider, rather than in court, except that either party may bring a claim in small-claims court or seek injunctive relief for intellectual-property or unauthorized-access claims.
YOU AND WE AGREE THAT EACH MAY BRING CLAIMS ONLY IN AN INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY CLASS OR REPRESENTATIVE PROCEEDING. If this class-action waiver is found unenforceable, the arbitration agreement is void for that dispute. Where applicable law does not permit arbitration of a claim, that claim will be resolved in the courts identified in Section 16.
18. Export and sanctions compliance
You must comply with all applicable export-control and sanctions laws. You represent that you are not located in, or a resident of, any country or on any list subject to U.S. embargo or sanctions that would prohibit your use of the Service.
19. Changes to the Service and these Terms
We may modify the Service and these Terms. If we make material changes, we will provide notice (for example, by posting the updated Terms with a new date or notifying you in-app or by email). Changes are effective when posted unless stated otherwise; your continued use after changes take effect constitutes acceptance.
20. Miscellaneous
These Terms, together with the policies incorporated by reference and any enterprise order form, are the entire agreement between you and us regarding the Service. If any provision is unenforceable, the rest remains in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of assets. We are not liable for delays or failures caused by events beyond our reasonable control.
21. Contact
Aureum Growth Solutions LLC
1000 Brickell Avenue, Suite 715, Miami, FL 33131, United States
Legal notices: [email protected] · Support: [email protected]
Privacy Policy
1. Our approach to privacy
Aureum Growth Solutions LLC ("Solipsis," "we," "us") operates the Solipsis Service. This Privacy Policy explains what information we handle and your rights. For business customers, our Data Processing Addendum also applies.
Our business model is selling seats · not data. We do not sell or rent personal information, we do not serve advertising, and we do not use third-party analytics or tracking on the application. We collect the minimum needed to run the Service and bill for it.
2. Information we handle
Account information
- Your email address (used to sign in and for essential Service and billing notices).
- Your display name.
- Your password is sent to our authentication provider (Supabase) over an encrypted connection when you sign up or sign in, and is stored only as a salted hash. We never store your password in plaintext, and your password is never used to derive your encryption keys. We never receive your private keys or your master seed.
- Your public keys and salted authentication material · the public halves used to seal content to you and to verify sign-in.
Workspace metadata (not encrypted)
- Workspace, channel, and room names; roles; membership and the invite graph (who invited whom, who belongs to which workspace); and thread structure. These are stored in the clear so the Service can route and display them — they are not encrypted content, and people in your workspace can see them.
- An audit log of workspace administrative actions (metadata only · who did what and when, never content).
Content · ciphertext only
- Messages and files are encrypted on your device. We store only the ciphertext and the minimal routing metadata required to deliver it (for example: which encrypted blob belongs to which channel, message timing, thread structure, and message/file size and type). We cannot read this content.
- Calls are peer-to-peer where the network allows and are encrypted in transit · we do not record or store them. Establishing a call reveals the participants' IP addresses to the public STUN server we use, and where a direct connection is impossible and we have enabled a relay (TURN), the encrypted media passes through that relay. Both are listed on our Subprocessors page.
Importing from Slack · a transient exception
- If you use the Slack importer, the files you select are fetched from Slack by our server and streamed straight back to your browser, which encrypts them before they are stored. For the length of that single request those file bytes are in our server's memory in the clear. We do not write them to disk, to our database, or to our logs, and nothing about them survives the request.
- That import can use a Slack API token that you paste in. We send it only to Slack, only to authorize those downloads, and only for that one request · we never store it, log it, or reuse it. You can revoke it in Slack once the import is done.
- The importer also hands you a plain, unencrypted zip of your files to drop back into the app. That file sits on your own device until you delete it.
Billing information
- Payments are processed by Stripe. We do not store full card numbers. We retain limited billing metadata such as your plan, seat count, subscription status, and a Stripe customer/subscription identifier. Stripe processes your payment details under its own privacy policy.
Technical and log information
- Standard server and security logs, which may include IP address, timestamps, and basic device/browser information, used to operate, secure, and debug the Service and to prevent abuse.
- If you enable push notifications, a push subscription token from your browser/OS push provider; notifications we send contain only metadata (for example, a channel name), never message content.
Support information
- If you contact support, the information you choose to share. Support attachments you submit are encrypted to a support key; we open them only to help you.
3. What we do NOT collect
- The content of your messages, files, or calls (we hold only ciphertext, and calls are never stored). The one exception is the Slack importer described in Section 2, where imported files pass through our server's memory in the clear during a single request and are never retained.
- Your password in plaintext (our authentication provider stores only a salted hash), your private keys, or your master seed.
- Third-party advertising or cross-site tracking identifiers.
- Analytics profiles built from your behavior in the app.
4. How we use information
- To provide, maintain, and secure the Service and route encrypted content.
- To create and administer accounts and workspaces and enforce roles and limits.
- To process payments, manage subscriptions, and send billing and transactional emails.
- To respond to support requests and to detect, prevent, and address abuse, fraud, or security incidents.
- To comply with legal obligations and enforce our Terms and Acceptable Use Policy.
5. Legal bases (EEA/UK)
Where the EU or UK GDPR applies, we rely on: performance of a contract (to provide the Service you request); our legitimate interests (to secure and improve the Service and prevent abuse), balanced against your rights; compliance with legal obligations; and, where required, your consent (for example, optional push notifications), which you may withdraw at any time.
6. Sharing and subprocessors
We share information only with the service providers ("subprocessors") whose infrastructure and services we use to run the Service, listed on our Subprocessors page, each bound by contract to protect it. We may also disclose information if required by valid legal process (see our Law Enforcement Guidelines) or to protect rights, safety, and the integrity of the Service, and in connection with a merger, acquisition, or asset sale (with notice). We do not sell personal information.
7. International transfers
We and our subprocessors are based in the United States, and information is processed there. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. Contact [email protected] for details.
8. Data retention
We keep information for as long as it is needed to run the Service. We would rather tell you what actually happens than quote a schedule we do not run, so: except where stated below, nothing is deleted on a timer · it stays until it is deleted, by you or with the workspace or account it belongs to.
- Account information (email, display name, public keys): kept while the account exists.
- Encrypted content (message and file ciphertext): kept until you or your workspace administrator delete it, or the channel or workspace it belongs to is deleted. It is not deleted on any schedule unless a workspace owner turns on the optional retention setting · available on our Studio and Enterprise plans, off by default · which deletes ciphertext older than the number of days that owner chooses. A workspace owner may also arm an inactivity switch or idle-room expiry, which delete on the terms shown in-app.
- Workspace metadata and the administrative audit log (metadata only, never content): kept for the life of the workspace and deleted with it.
- Billing records (plan, seat count, subscription status, and payment-processor identifiers): kept for as long as we need them to meet tax and accounting obligations · normally several years, and outlasting the account. Your card details are held by Stripe, not by us, under Stripe's own retention.
- Support tickets and the messages in them: kept until we delete them. We do not delete them on a schedule today. Email [email protected] to ask us to delete a support conversation.
- Server, network, and security logs: these are the logs kept by the hosting, database, and network providers on our Subprocessors page, under those providers' own retention schedules. We do not operate a separate long-term log archive of our own.
Deletion is irreversible and removes the ciphertext and metadata we hold, except for records we are legally required to keep (such as billing and tax records). Copies may also persist for a time in our providers' automatic infrastructure backups until those backups age out under the providers' schedules; content in them is ciphertext we cannot read.
9. Security
Security is the core of the product. Content is end-to-end encrypted; server-side access is governed by row-level security so that keys sealed to you are readable only by you; transport is encrypted in transit. No system is perfectly secure, and you play a critical role by protecting your password, device, and transfer code.
If we become aware of a personal-data breach affecting you, we will notify affected users and, where required, the relevant authorities without undue delay and consistent with applicable law. Because your message and file content is end-to-end encrypted, a breach of our servers would expose ciphertext we cannot read rather than your content; it could, however, expose the metadata described in this Policy, such as email addresses and workspace membership.
10. Your rights
EEA / UK (GDPR)
You may request access to, correction of, deletion of, or a copy (portability) of your personal data; object to or restrict certain processing; and withdraw consent. You may also lodge a complaint with your local data-protection authority.
California (CCPA/CPRA) and other U.S. states
You may request to know, access, correct, and delete your personal information, and to opt out of "sale" or "sharing" of personal information and of targeted advertising. We do not sell or share personal information and do not use it for cross-context behavioral advertising. We will not discriminate against you for exercising these rights.
Deleting your account yourself
You do not need to ask us. Settings → Account → delete my account removes it directly: we immediately erase your profile, your memberships, your keys, and every message and file you authored — including in workspaces you have already left. You must first delete or hand over any workspace you own, because deleting an owner would destroy the other members' data with them; the screen names the workspaces still blocking you. Two things survive by nature rather than by choice: billing records, which we keep as described above, and anything other members have already decrypted onto their own devices or saved as a backup, which is outside our reach — that is a property of end-to-end encryption, not a retention policy.
How to exercise
Email [email protected]. We will verify your request and respond within the time required by law. Note that, because of end-to-end encryption, we cannot access or provide the plaintext of your content · only the limited account and metadata described above. If your data lives in a workspace administered by someone else, we may direct your request to that administrator (controller).
11. Children
The Service is not directed to children. You must be at least 18 years old to use it, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact [email protected] and we will delete it.
12. Cookies and local storage
We use only strictly-necessary cookies and browser storage to keep you signed in and to hold your encrypted vault on your device. We do not use advertising or analytics cookies. See our Cookie Policy for details.
13. Changes
We may update this Policy. Material changes will be posted here with a new date and, where appropriate, notified in-app or by email.
14. Contact
Data controller: Aureum Growth Solutions LLC, 1000 Brickell Avenue, Suite 715, Miami, FL 33131, United States.
Privacy requests and questions: [email protected].