Privacy Policy

SolaraForge Privacy Policy

Exponential Technologies Corp

Effective Date: July 13, 2026

Last Updated: July 13, 2026

1. Introduction

This Privacy Policy explains how Exponential Technologies Corp (β€œwe”, β€œus”, or β€œour”), the owner and operator of the SolaraForge platform (including ProtocolForge, ValidationForge, ChangeForge, AuditForge, ContentForge and future Forges (modules)), collects, uses, discloses, and protects your personal information.

We are committed to protecting your privacy and handling your data responsibly, with a strong emphasis on compliance with applicable data protection laws and industry regulations (including GxP requirements).

2. Zero Raw Data Retention Policy (Core Principle)

Zero Raw Data Retention is a foundational principle of the SolaraForge platform.

  • All uploaded documents (including protocols, User Requirement Specifications (URS), Validation Plans, Configuration Specifications (CSIL), audit trails, access request forms, and any other files) are processed in secure memory or temporary storage.

  • Original uploaded files are permanently deleted immediately after processing and analysis is complete.

  • Only structured, non-identifiable analysis results (such as gaps, risk scores, recommendations, summaries, and audit findings) are retained.

  • We do not use your raw uploaded data to train AI models or for any purpose other than delivering the services you requested.

This policy significantly reduces privacy and security risks associated with long-term storage of sensitive regulatory and clinical documents.

3. Information We Collect

We collect only the minimum information necessary to provide and improve our services:

  • Account Information: Name, email address, company/organization, job title, and contact details.

  • Usage Data: Information about how you interact with the platform, including features used, frequency of use, and navigation patterns.

  • Structured Analysis Outputs: Results generated by our AI (e.g., gap analyses, risk assessments, recommendations, and summaries).

  • Technical Information: IP address, browser type, device information, and log data (collected automatically for security and performance purposes).

  • Communications: Information you provide when contacting support or providing feedback.

We do not collect sensitive personal data (such as health data or special categories of data) unless you explicitly upload it as part of your regulated documents.

4. How We Use Your Information

We use your information to:

  • Provide, operate, and maintain the SolaraForge platform, including ProtocolForge and ValidationForge.

  • Deliver AI-powered analysis, recommendations, and insights.

  • Improve and develop new features and services.

  • Ensure platform security, prevent fraud, and troubleshoot issues.

  • Communicate with you about your account, updates, and support.

  • Comply with legal and regulatory obligations.

5. Legal Basis for Processing (GDPR)

Where the General Data Protection Regulation (GDPR) applies, we process your personal data on the following legal bases:

  • Performance of a contract (to provide the services you requested)

  • Legitimate interests (to improve our services and ensure platform security)

  • Compliance with legal obligations

6. Data Sharing and Subprocessors

We do not sell your personal data.

We may share your information only with:

  • Trusted subprocessors who assist us in operating the platform (e.g., cloud hosting providers, analytics services). All subprocessors are bound by strict data processing agreements.

  • Legal authorities when required by law or to protect our rights.

We maintain a list of current subprocessors and will provide it upon request.

7. Data Retention

  • Raw uploaded documents: Deleted immediately after processing (per our Zero Raw Data Retention policy).

  • Structured analysis results: Retained for as long as your account is active or as needed to provide the service.

  • Account information: Retained until you request deletion or as required by law.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Right to access your personal data

  • Right to request correction or deletion

  • Right to restrict or object to processing

  • Right to data portability

  • Right to withdraw consent (where applicable)

To exercise these rights, please contact us at: legal@solaraforge.ai

9. Security

We implement industry-standard technical and organizational security measures to protect your data, including encryption, access controls, regular security assessments, and secure infrastructure.

While we take reasonable precautions, no system is 100% secure. We encourage you to use strong passwords and protect your account credentials.

10. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we use appropriate safeguards (such as Standard Contractual Clauses) to protect your information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the β€œLast Updated” date. Your continued use of the platform after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Exponential Technologies Corp

Email: legal@exponentialtechnologies.ai