e.SOL Privacy Policy

DRAFT for review by e.SOL's lawyer. Items in [brackets] must be completed before launch.

1. Who is responsible for your data

[e.SOL legal company name], [registered address], is responsible for the personal data described here. Contact: [privacy/support email address].

2. What we collect

Account: your name, email address, password (stored only as a secure hash), phone number if you give one, country, language, currency and profile photo.
Groups: the groups you create or join, your role, your turn in the payout order, your electronic signature of each group's terms (typed name, date, time, IP address and terms version), and your requests to join.
Money records: the contributions, payments and payouts recorded for you. [When online payments launch: our payment partner collects your card or bank details; we receive only a reference and the last digits.]
Messages: what you write to your group admins, and what they write to you.
Identity documents: if you run a group, the ID you send us for review.
Referrals: if you joined through someone's personal link, who invited you.
Technical data: sign-in times, the device session, IP addresses and error logs. We use only the cookies needed to keep you signed in and to remember your language.

3. Why we use it

To run your account and your groups, and to show you your payments, turns and statements.
To send the emails and, if you switched them on, the text messages the service needs: confirmations, reminders, statements and group messages.
To keep e.SOL safe: identity checks for group admins, preventing fraud and abuse, and securing accounts.
To meet legal obligations, and to answer your questions.

[Counsel to state the legal basis for each use where required, for example contract, legitimate interest, consent or legal obligation.]

4. Who can see it

Other members: regular members of your group do not see your name, contact details or payments. They see only group totals.
Your group admins: the owner and co-admins of your group see your name, email, phone, role, turn, payments and your signature of the group terms.
The e.SOL team: authorised staff see what they need to support you and run the service, including identity documents under review.
Service providers who work for us under contract: web hosting ([hosting provider]), email delivery, text messages ([Twilio], if used) and payments ([Stripe], when online payments launch).
Authorities, when the law requires it.

We do not sell your personal data.

5. How long we keep it

We keep your account data while your account is open. Money records and signatures are kept for [7] years after a group ends so that members can settle any dispute and we can meet legal obligations. Identity documents are kept for [period] after review. Backups are deleted after 14 days. [Counsel to confirm periods.]

6. Security

e.SOL uses encrypted connections (HTTPS), stores passwords only as secure hashes, keeps identity documents outside the public website where only signed-in staff can open them, signs members out after a short time without activity, and allows one signed-in device per account.

7. Your choices and rights

Change your profile, language, email and password in your settings at any time.
Switch text messages on or off in your settings.
Ask us for a copy of your data, to correct it, or to delete your account, by writing to the address above. Some records must be kept, as described in section 5.
[Add the rights and the complaint authority that apply in the US, Canada, France/EU, Haiti and the Dominican Republic, as advised by counsel.]

8. International transfers

Our servers are located in [country]. If you live elsewhere, your data is transferred there. [Counsel to add safeguards where required.]

9. Children

e.SOL is for adults. We do not knowingly collect data from anyone under 18.

10. Changes

We will tell you about important changes to this policy and ask you to accept the new version the next time you sign in.

Version 2026-09-draft