Privacy Policy

This Privacy Policy explains how Adversaria LLC (“Adversaria,” “we,” “us”), a Wyoming limited liability company, collects, uses, discloses and retains personal information in connection with the Solidly application for macOS, its Quick Look extension and its solidlycommand line tool, the websites at solidly.dev and app.solidly.dev, and your Solidly account (together, the “Services”).

Solidly is distributed in two versions. The “website version” is downloaded from solidly.dev and requires a Solidly account. The “App Store version” is distributed through the Mac App Store and does not use a Solidly account. Where this policy applies to only one version, it says so.

Adversaria is responsible for the personal information described in this policy, as its controller, except where the policy states that another company acts independently. You can contact us at support@getadversaria.com or by post at 30 N Gould St, Ste N, Sheridan, WY 82801.

1. Your 3D files

Solidly opens, edits, renders and saves your files on your Mac. It does not upload them or index them, and it does not send their contents to us or to anyone else. We receive a file only if you choose to send it to us, for example with a bug report, as Section 2.10 describes.

2. Information we collect

The information we collect depends on the version of Solidly you use and the settings you choose. The website version communicates with our account service to sign you in and to confirm your free trial or purchase. Apart from the version check described below, the App Store version does not communicate with our account service, and it sends us information only if you turn on crash reports or usage sharing.

Version checks. Both versions periodically check with our servers whether the installed version of Solidly is still supported. These checks do not include your account or a Mac identifier. Like any connection to a server, they include your IP address and standard technical details, which our server logs keep as Section 5 describes.

2.1 Account information

When you create a Solidly account, we collect your email address and the display name you choose, and we store your account settings, such as whether you want to receive product emails.

Your password, password reset tokens, email verification codes and any multi-factor authentication settings are held by our authentication provider, WorkOS, and are never stored by us. If you sign in with Google or Apple, that company confirms your identity and provides your email address and, if you allow it, your name.

2.2 Sign-in records

When you sign in to app.solidly.dev or sign in to your account in Solidly, we record session details including your IP address, browser or client type, timestamps, and whether a session has been revoked. We use these records to keep you signed in, to let you review and end active sessions, and to protect against unauthorized access.

2.3 The free trial and your Macs (website version)

To provide the free trial and purchases on your Macs, and to apply the limits in the License Agreement, the website version sends our account service the following information when you sign in and periodically while you use Solidly:

• A Mac identifier.Solidly reads your Mac’s hardware identifier, combines it with a value specific to Solidly, and sends us a one-way cryptographic hash of the result. The hardware identifier itself does not leave your Mac, and the hash cannot be used to recover it or to recognize your Mac outside Solidly.
• The name of your Mac, as set in macOS, which we show on your account page so that you can tell your Macs apart.

For each Mac registered to your account, we store its Mac identifier, its name, and the dates it was added and last checked in. For your account’s free trial, we store its start and end dates. For each Mac that has taken part in a free trial, we store its Mac identifier, the trial it took part in and the date it was recorded. We also store the dates on which Macs were removed from your account.

We use the Mac identifier to unlock Solidly on the Macs registered to your account, to limit each account to two Macs, and to ensure that each Mac takes part in only one free trial. Whether a Mac can start or join a free trial is decided automatically from these records. If you believe that such a decision is wrong, you can contact us, and a person will review it.

Providing this information is necessary to use the website version. Without it, Solidly cannot confirm a trial or purchase and cannot be unlocked.

2.4 Purchases on solidly.dev

When you buy Solidly on solidly.dev, Stripe sells it to you as merchant of record, and you provide your payment details to Stripe rather than to us. We never receive your full card number. Stripe returns to us, and we record against your account, that your account owns Solidly, the date of purchase, the amount, tax and currency, the payment method type or card brand and its last four digits, the billing email address, Stripe’s identifiers for the customer and the transaction, links to Stripe’s receipt and invoice, and any later refund or dispute. We use this information to provide the purchase, to answer billing questions, and to keep the records that tax and accounting law require.

2.5 The App Store version

The App Store version does not use a Solidly account and, apart from the version check described in Section 2, does not communicate with our account service. Its free trial and its purchase are in-app purchases made through Apple, which processes them under its own privacy policy. Solidly verifies Apple’s signed records of these purchases on your Mac and keeps copies of them in a storage area on your Mac that its Quick Look extension can read. Apple provides us with sales and financial reports and may provide information about individual transactions, which does not include your name, email address or payment details.

2.6 Information kept only on your Mac

Solidly stores application preferences, license state, and crash-recovery data locally on your Mac. In the website version, this includes a signed record of your trial or purchase so that Solidly remains usable without a connection for a limited period. These local records remain on your device and are shared with us only if you choose to export and send a support file to us yourself.

2.7 Crash reports (optional)

If you turn on crash reports, and Solidly quits unexpectedly or fails to open a model, Solidly sends a report describing where in the application the failure happened, the Solidly version and build, and the Mac model and macOS version, together with diagnostic information that macOS provides about the failure. File names, folder paths and material names are replaced with hashes before a report is sent. Crash reports never include screenshots, network payloads, user identities, or your 3D models. Crash reports are off unless you turn them on. Our crash reporting provider is Sentry.

2.8 Usage data (optional)

If you turn on usage sharing, Solidly reports which file formats you open, which panels and tools you use, load time ranges, the version of Solidly and whether it is running under a trial or a purchase, and the Mac model and macOS version you are running.

Usage events consist solely of pre-defined application actions and contain no free-form text or user content. Performance and model metrics are recorded in broad ranges rather than exact figures. Nothing from inside a file is sent, including file names, folder paths, the names of models, materials and objects, and image data.

Your IP address is not collected or stored with usage data, location lookup is disabled, and your time zone is removed. No profile is created for you, and usage data is not connected to your Solidly account. The only identifier is a random value generated on your Mac when usage sharing is turned on. Turning usage sharing off deletes that identifier and any pending events, and turning it on again generates a new identifier unconnected to the previous one. Usage sharing is off unless you turn it on. Our analytics provider is PostHog. This feature is present in the application only, and not in the Quick Look extension or the solidly command line tool.

2.9 The websites

We do not set cookies on solidly.dev, and it uses no analytics, advertising pixels or fingerprinting. It has no forms that collect personal information. app.solidly.dev sets only cookies that are strictly necessary to sign you in and to keep you signed in, and they are not used for analytics or advertising.

Some pages on solidly.dev include a video hosted on YouTube. Nothing is loaded from YouTube until you press play. When you do, the video plays from YouTube's privacy-enhanced mode (youtube-nocookie.com), and Google receives information about your request, such as your IP address, and may store information on your device, under Google's privacy policy.

Our hosting provider, Cloudflare, processes technical information about each request to our websites, such as your IP address, browser type and the pages requested, in order to deliver the websites and protect them from abuse, and it may set a strictly necessary security cookie for that purpose. To protect sign-in from automated attacks, our account service counts recent sign-in attempts by IP address and by email address. We keep logs of requests to our account service for a short period for security and reliability.

2.10 Communications

When you email us, we receive your email address, your message and anything you attach. If product emails are turned on in your account settings, we may send you release notes and occasional announcements about Solidly. You can turn them off in your account settings at any time, and each such email will include a way to unsubscribe. We, or our providers on our behalf, also send messages that are necessary to provide the Services, such as email verification codes, security notices and receipts.

3. How we use personal information

We use personal information for the following purposes. For people in the European Economic Area, the United Kingdom and Switzerland, the legal basis for each purpose is stated in parentheses.

• To create and operate your account, to provide the free trial and purchases, and to unlock Solidly on your Macs (performance of a contract).
• To apply the limits on free trials and on the number of Macs, and to prevent abuse of the free trial (our legitimate interest in preventing fraud and abuse, and performance of a contract).
• To keep the Services secure, to investigate suspicious activity, and to protect sign-in from automated attacks (our legitimate interest in the security of the Services).
• To process purchases and refunds and to keep accounting and tax records (performance of a contract, and compliance with legal obligations).
• To respond to your messages and support requests (performance of a contract, or our legitimate interest in answering enquiries).
• To diagnose crashes and to understand how Solidly is used, if you have turned on crash reports or usage sharing (consent).
• To send product emails, if you have them turned on (consent, or where the law permits it, our legitimate interest in informing customers about Solidly).
• To comply with the law, to enforce our terms, and to establish, exercise or defend legal claims (compliance with legal obligations, and our legitimate interest in protecting our rights).

We do not use personal information for advertising. Apart from the free trial eligibility decision described in Section 2.3, which determines only whether a free trial is available on a Mac, we do not make decisions about you based solely on automated processing.

4. How we disclose personal information

We disclose personal information only in the following cases.

• Service providers. We use a small number of providers to operate the Services. Each processes personal information only on our instructions and only to provide its service, under a contract that requires it to protect the information. They are listed, with what each one handles, on our Subprocessors page.
• Stripe. As merchant of record for purchases on solidly.dev, Stripe processes payment information as an independent controller under its own privacy policy, including for its Link service.
• Apple and Google. Apple processes purchases in the Mac App Store, and Apple and Google process sign-ins that you choose to make with them, under their own privacy policies.
• Legal requirements. We may disclose information where we believe in good faith that the law requires it, in response to a valid legal request, or to protect the rights, property or safety of our users, ourselves or others, including to prevent fraud.
• Business transfers. If Adversaria is involved in a merger, acquisition, financing, reorganization or sale of assets, personal information may be transferred as part of that transaction, subject to the commitments in this policy.
• With your consent. We may disclose information for any other purpose with your consent or at your direction.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

5. How long we keep information

• Account information and settings are kept while your account exists and are deleted when it is deleted, as Section 6 describes.
• Website sessions are deleted when the session expires or you sign out.
• Application sign-in records are kept while your account exists, so that you can review and revoke them.
• Mac registrations are kept until you remove the Mac from your account or delete your account. The dates on which Macs were removed are kept while your account exists.
• Free trial records, which consist of each trial’s start and end dates, an internal identifier for the account, and the Mac identifiers of the Macs that took part in it, are kept for as long as we offer free trials of Solidly, including after the account is deleted. They are kept because their purpose is to prevent the same Mac from receiving another free trial, which they could not do if they were deleted with the account. They do not contain your name or email address.
• Purchase records are kept while your account exists and afterwards for as long as tax, accounting and other legal obligations require, and for as long as needed to resolve disputes and to establish, exercise or defend legal claims.
• Crash reports and usage data are kept by our providers for the retention periods of their services, after which they are deleted. They are never connected to your account.
• Server logs are kept for a short period for security and reliability.
• Email you send us, and any files attached to it, are kept for as long as we need them to resolve the matter and for a reasonable period afterwards for our records. Files sent for support are deleted when they are no longer needed for that purpose.

6. Deleting your account

You can delete your Solidly account from your account settings. Deletion is staged: your sessions end immediately, and the deletion is carried out seven days later, after which it cannot be undone. During those seven days you can sign in and cancel it. The delay exists because deleting an account also deletes the record that it owns Solidly.

Deletion removes your credentials at WorkOS, and your account information, settings, sign-in records, Mac registrations, ownership records and receipt records from our service. Purchase records that we must keep for tax or accounting purposes are retained for that purpose only, and free trial records are retained as Section 5 describes, so deleting an account does not make its Macs eligible for another free trial. A purchase made in the Mac App Store is not affected, because it belongs to your Apple Account.

7. Your choices and rights

You can turn crash reports and usage sharing on or off at any time in Solidly’s settings. You can turn product emails off, remove a Mac from your account, and delete your account in your account settings at app.solidly.dev.

Depending on where you live, you may have the right to know what personal information we hold about you and to receive a copy of it, to correct it, to delete it, to receive it in a portable format, to object to or restrict our use of it, to withdraw consent, and not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects for you.

To exercise a right that you cannot exercise yourself in the Services, write to support@getadversaria.com. We will confirm your identity before acting on a request, normally by asking you to confirm control of the email address of your account, and we will respond within the time that the applicable law allows. You may use an authorized agent where the law permits it, and we may ask the agent for proof of authorization. We will not charge you or treat you differently for exercising a right.

If we decline your request, you may appeal by replying to our decision and asking us to reconsider it. We will respond to the appeal within the time that the applicable law allows. If you remain dissatisfied, you may contact your state attorney general or your data protection authority.

Our websites do not track visitors across other websites, so they do not respond differently to Do Not Track signals. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale and sharing of your personal information, which we do not engage in.

8. People in the European Economic Area, the United Kingdom and Switzerland

The legal bases on which we rely are stated in Section 3. Where we rely on our legitimate interests, you may object to the processing, and where we rely on consent, you may withdraw it at any time without affecting processing that took place before. You have the right to lodge a complaint with the data protection authority where you live or work.

We are based in the United States, and our providers may process personal information in the United States and in other countries. When personal information is transferred out of the European Economic Area, the United Kingdom or Switzerland, we rely on an adequacy decision, including the EU-U.S. Data Privacy Framework and its United Kingdom and Swiss counterparts where the recipient participates in them, or on the Standard Contractual Clauses approved by the European Commission and their United Kingdom and Swiss equivalents.

9. California residents

In the past twelve months, we have collected the following categories of personal information, from you, from your use of the Services, and from Stripe, Apple, Google and WorkOS as described in Section 2:

• identifiers, such as your name, email address, account identifier, IP address, Mac identifier and the name of your Mac;
• customer records described in California Civil Code section 1798.80(e), such as your name, billing email address and the brand and last four digits of your payment card;
• commercial information, such as records of your free trial, purchases and refunds;
• internet or other electronic network activity information, such as sign-in records, server logs and, if you have turned them on, crash reports and usage data; and
• account log-in information, which is sensitive personal information and is held by our authentication provider for the sole purpose of signing you in.

We collect this information for the purposes in Section 3, disclose it for business purposes to the recipients in Section 4, and keep it for the periods in Section 5. We do not sell or share personal information, and we have not done so in the past twelve months. We do not use or disclose sensitive personal information for any purpose that would give you the right to limit its use. You have the rights described in Section 7, including the rights to know, to delete and to correct, and we will not discriminate against you for exercising them. We do not disclose personal information to third parties for their own direct marketing purposes.

10. Children

The Services are not directed to children. You must be at least 13 years old to use them, and at least 16 in countries where that is the minimum age for consent to the processing of personal data. We do not knowingly collect personal information from anyone below those ages. If we learn that we have, we will delete it, and a parent or guardian who believes that we have may contact us at support@getadversaria.com.

11. Security

We protect personal information with measures appropriate to its nature. Passwords are held by our authentication provider and never by us. Session identifiers and access tokens are stored as hashes, so a copy of our database cannot be used to sign in as you. The Mac identifier is a one-way hash, and all communication with our services is encrypted in transit. No system is perfectly secure, so we also limit the information we hold to what the Services need. If a security incident affects your personal information, we will notify you as the law requires.

12. Changes to this policy

We may update this policy. A change takes effect when it is posted on this page with a new effective date. If a change is material, we will give notice by email to the address of your Solidly account, where we have one, or in the application.

13. Contact

Questions and requests about this policy or your personal information can be sent to Adversaria LLC at support@getadversaria.com or by post at 30 N Gould St, Ste N, Sheridan, WY 82801.