Privacy Policy

Registration

• Email address — provided during demo signup, stored on the proxy server for account identification, usage limits, and product communications
• Demo token — a random identifier linking your browser to your account, stored locally and on the proxy server

Configuration you provide

• Fluxx instance URL and OAuth client ID

Tokens

• OAuth access and refresh tokens issued by your Fluxx instance during authorization

Cached operational data

• Schema metadata - field names, model structures, themes, workflow state definitions. Structural configuration only; no record content.
• Dashboard pins - saved query configurations (filters, columns, display settings)
• Workflow backups - pre-edit graph snapshots
• Instance vocabulary - user-flagged terms for improved search accuracy

Usage tracking

• Aggregate query counts per user per day, stored on the proxy server for usage limit enforcement. Search content, query results, and browsing behavior are not tracked.

Not collected

• Browsing history or activity outside Fluxx pages
• Search content, query results, or AI responses (only aggregate counts are tracked)

Extension-stored data resides in your browser via Chrome extension storage APIs. Registration and usage data are stored on the proxy server (§3). Chat messages and uploaded documents are sent transiently to the AI service (§3–4) but are not persisted by the extension or proxy server. Anthropic's data handling is governed by their own privacy policy (§3).

Delete everything at once: Options → Advanced → Clear All Data.

Solder contacts three services. All connections use HTTPS.

Your Fluxx instance

Authenticated REST API calls to your Fluxx server (*.fluxxlabs.com or *.fluxx.io) for record search, schema reads, and form/workflow edits. Requests go directly from your browser using your OAuth token.

AI proxy

AI requests route from your browser through a proxy server (solder-demo-server.onrender.com) to the Anthropic Claude API. The proxy holds the Anthropic API key so it does not need to reside in your browser. The proxy also stores your registration (email, demo token) and aggregate query counts for usage limit enforcement. It does not store AI conversation content, query results, or record data.

Anthropic

The proxy forwards requests to api.anthropic.com for language model processing. Anthropic handles that data under their own privacy policy.

AI features are off by default. No data reaches Anthropic until you grant consent in the Options page. When active, the boundary is:

Consent can be revoked at any time. Revoking immediately stops all AI traffic.

• All network traffic encrypted via HTTPS
• OAuth access tokens held in session storage (cleared on browser close); refresh tokens persisted locally (cleared on disconnect)
• AI proxy access restricted via CORS origin filtering — no credentials stored in the extension
• Initial form edits create a new stencil; subsequent edits update it in place. Workflow operations modify existing configuration records. All changes are logged in the Fluxx audit trail.
• Write operations restricted to a hardcoded allowlist of Fluxx API endpoints

Solder does not sell, license, or share data with any party beyond the three services listed in §3. There is no advertising or behavioral tracking. Your email address may be used for product communications related to Solder (e.g., service updates, demo expiration notices). You may unsubscribe from these communications at any time.

• AI consent - grant or revoke in Options at any time
• Clear all data - Options → Advanced → Clear All Data
• Disconnect - revokes your OAuth token and clears session data
• Uninstall - removes the extension and all locally stored data
• Delete registration - contact support@solderapp.com to delete your email, usage data, and demo token from the proxy server

Material changes will be reflected in the revision number above and, where practical, communicated through the extension changelog.