Privacy Policy

This site and the Soljacast service are operated by Solja Tech S.L. (NIF B88935234), registered at Carrer de Tamarit 155 Bis, esc. D, 3º, pta. 2, 08015 Barcelona, Spain, which is the data controller. Full company details are in our legal notice. This policy describes how we collect, use, and protect personal data under the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD). We have not appointed a Data Protection Officer; privacy requests go to info@soljacast.com. This service is not directed at children under 16, and we do not use automated decision-making or profiling.

1. Data we collect

• Account & contact: name, email and (optionally) phone number when you request a demo, rent a unit or sign in to manage devices.
• Device heartbeat: once a device is enrolled in Soljacast Cloud it reports, every few minutes, its device identifier, firmware version, online and screen status, local IP address and its private-network (Tailscale) address, node ID and DNS name, so we can show it online and reach it. Nothing is sent before enrolment.
• Error reports: after enrolment the device and its web interface send anonymised error reports: error type and code location only. Message text is dropped and URLs are reduced to their path.
• Cast session metadata: filenames, source types and timestamps for content cast through your devices. Cast content itself is stored only for the duration of the session.
• Usage data: aggregate product analytics and error reports from this marketing site and any signed-in admin console.

2. Lawful bases (GDPR Art. 6)

• Contract performance: fulfilling demo, rental and purchase requests; operating devices you own or rent.
• Legitimate interest: securing devices, preventing abuse, and improving the product based on aggregate analytics.
• Legal obligation: retaining transaction records required by Spanish tax and accounting law.
• Consent: any optional analytics, error diagnostics, or marketing communication. You can withdraw consent at any time.

3. Sub-processors

We share the minimum data needed with these providers. All non-EU providers operate under Standard Contractual Clauses for cross-border transfers.

• Resend: transactional email delivery (US, SCCs).
• Cloud hosting and Cloudflare: EU-region hosting for the marketing site and admin console, with Cloudflare in front of it for delivery and security.
• Google Translate: optional in-page translation. The widget is loaded only while a language other than English is selected, and nothing is requested from Google Translate while you stay in English.
• Google Analytics: traffic measurement (US, SCCs). Analytics cookies are set only after you accept via the cookie banner.
• PostHog: product analytics (EU region). Starts only after you accept via the cookie banner.
• Gleap: in-app feedback and support widget, processing the messages and diagnostics you submit.

4. Cast content

When attendees cast content through a SoljaCast device, that content is processed locally on the device and streamed to the connected displays. We do not retain cast content on our servers; uploaded files are deleted at the end of the session.

Remote screen preview is off by default. If you switch it on in the device settings, periodic snapshots of the screen are sent to your cloud device page and shown only to you and the people you share the device with. The device keeps a local security log of logins, client pairings, updates and settings changes that never leaves the device. A factory reset erases all data, keys and credentials stored on the device. The device does not upload backups of its data to us.

5. Cookies and trackers

Analytics is off by default. Nothing from Google Analytics or PostHog is downloaded, and no analytics cookie is set, unless you accept it in the cookie banner. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time through Cookie settings in the footer, which stops collection immediately and clears the identifiers; anything already collected stays lawful up to that point.

Strictly necessary entries are the session cookie that keeps you signed in, your site preferences, and Cloudflare's security cookies. Gleap (support chat) and Google Translate also sit here: neither loads until you open the chat or switch language. Every entry is listed in our cookie policy.

6. Retention

• Account & contact data: kept while your account is active.
• Sales and rental records: up to six years after the transaction, as required by the Spanish Código de Comercio.
• Cast session metadata: 90 days, then aggregated.
• Device heartbeats and error reports: 30 days.
• On account deletion, your name, email, and phone are erased. Sales records are retained in anonymised form.

7. Your rights (GDPR Art. 15–22)

• Access & portability: request a copy of your data.
• Rectification: correct inaccurate information.
• Erasure: delete your account and personal data, subject to legal retention.
• Restriction & objection: write to us at info@soljacast.com.
• Lodge a complaint: with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8. Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is limited to authorised personnel on multi-factor-authenticated accounts.

9. Changes

We will notify you of material changes by posting a notice on the Service and updating the date at the top of this page.

10. Contact

For data-related questions or to exercise any of the rights above, write to info@soljacast.com. We respond within 30 days as required by GDPR.