Privacy Policy
Last updated: October 2026
About Soloroot
Soloroot is operated by Blue Speck Ltd, a company registered in England and Wales.
Company number: 14084890
Registered address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Blue Speck Ltd is the data controller for personal data collected through this website and the Soloroot service. Questions about this policy or how data is handled can be directed to contact@soloroot.com.
What data Soloroot collects and why
Waitlist sign-ups
Submitting an email address to join the Soloroot waitlist means that address will be stored in order to make contact when access becomes available. The legal basis is consent. Consent can be withdrawn at any time by emailing contact@soloroot.com, and the address will be removed.
Account and service data
Soloroot stores email messages received to Soloroot addresses on its servers. This is necessary to provide the service — specifically the approval-based inbox model, which requires messages to be held server-side until approved or rejected. Message content (subject, body, headers and attachments, including file names) is encrypted when it arrives, before it is stored, using keys that are held only on your devices. Soloroot's servers cannot read stored message content. Sender and recipient addresses and contact details are not encrypted, because they are needed to route mail and apply your contact rules. Mail received before an account's encryption keys are set up is stored unencrypted until it is encrypted by a one-time migration. When you send an email, its content passes through Soloroot's servers unencrypted so that it can be delivered. The legal basis is the performance of a contract.
Account information is also stored, including email identities, preferences, and activity logs necessary to operate the service.
IP addresses
IP addresses of connections to this website and the Soloroot service are logged in order to detect and prevent misuse. The legal basis is legitimate interests.
Analytics
Soloroot uses PostHog to understand how visitors use this website. PostHog is configured in cookieless mode, so no cookies are set and no persistent identifiers are stored on your device. PostHog receives information about each visit, such as pages viewed, browser type and IP address, and Soloroot uses it only in aggregate. The legal basis is legitimate interests.
AI training
Soloroot does not use data — including email content, account information, or usage data — to train artificial intelligence or machine learning models, and does not share data with third parties for that purpose.
How long Soloroot keeps data
Waitlist email addresses are retained until removal is requested or the waitlist closes.
Email messages are retained for as long as an account is active, plus 30 days after account closure.
Who data is shared with
Soloroot uses the following service providers to run the service. Each processes data on Soloroot's behalf as a data processor under a data processing agreement.
- Fly.io hosts Soloroot's servers and databases, including stored email (encrypted as described above) and account information.
- Cloudinary stores email attachments. Attachments are encrypted before upload, so Cloudinary cannot read their contents or file names.
- Amazon Web Services (AWS) sends outbound email via Amazon SES. Sent messages pass through AWS to be delivered. AWS also returns delivery, bounce and complaint notifications for sent mail.
- Cloudflare hosts this website and handles requests to it.
- PostHog provides website analytics, as described in the Analytics section above.
Data is not sold or shared with third parties for marketing purposes.
Your rights
Under UK GDPR you have the right to access the personal data held about you, request correction of inaccurate data, request erasure of your data, object to processing, and request restriction of processing. To exercise any of these rights, contact contact@soloroot.com.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
This policy may be updated from time to time. The date at the top of this page reflects when it was last revised. Continued use of the service after changes are posted constitutes acceptance of the updated policy.