Privacy policy
Privacy Policy
Effective date: 6 October 2026
Last updated: 6 October 2026
Summary
Who we are. Go Sollo Limited (Sollo) is a New Zealand company. We make Sollo, a CRM and sales platform for consultants, coaches and other solo businesses.
What this privacy notice covers. This privacy notice covers the processing of personal data where Sollo acts as the data controller. This includes when we process personal data collected via our website, for marketing purposes and to fulfil our legal obligations. It does not cover the processing of personal data when we are the data processor, including when we process data on behalf of our customers. For more information about how your personal data is processed by our customers when they use Sollo, please refer to their respective privacy notices.
How to contact us. If you have any questions about how we process your data or want to exercise your data protection rights, please get in touch with us at support@gosollo.com.
Where you live matters. Section 14 contains extra information for the EU, UK and Switzerland, the United States, Canada, Australia, New Zealand and other countries.
1. Who we are and how to contact us
1.1 This Privacy Policy explains how Go Sollo Limited (company number 9429712, NZBN 9429053685360), of Auckland, New Zealand (Sollo, we, us or our) collects, uses, shares and protects personal information.
1.2 Privacy Officer. You can contact our privacy officer at support@gosollo.com.
2. Our role, and when this policy applies
2.1 This policy applies when we are the data controller. This means, we decide why and how personal information is used.
2.2 It does not apply when we act as the data processor on behalf of our Sollo customers. Our Customers use Sollo to store and manage information about their own contacts, prospects, clients and leads (Customer Data). In that case, the Customer's own privacy notice applies instead.
2.3 Third-party platforms. When you connect Sollo to another platform, such as LinkedIn, Google or WhatsApp, that platform's own privacy policy applies to the information it holds. We are not responsible for how those platforms handle information.
If you are a Sollo customer and want to better understand how we process personal data on your behalf, please get in touch with us or refer to these FAQs.
3. Personal information we collect
3.1 Information you give us
Account and profile information: name, email address, password (stored only in hashed form), business name, website, job title, location, and profile details you add.
Billing information: billing name, email and address, and plan details. Our payment processor, Stripe, collects your card details. We do not see or store full card numbers.
Communications: messages you send to us, support requests, survey answers, feedback, and call or meeting notes when you speak with us.
Content you share in our community, events, programmes or podcast: posts, comments, questions, recordings, images and testimonials.
Referral programme information: your details and payout information, if you join our referral programme.
3.2 Information we collect automatically
Device and log information: IP address, browser type, operating system, device identifiers, pages viewed, referring URLs and the date and time of each request.
Usage information: the features you use, the actions you take in the app, and errors you see.
Session data: including how you use the app and the Website (clicks, scrolling and pages viewed) to find and fix problems.
Approximate location: country and city, worked out from your IP address.
3.3 Information we get from other sources
Google sign-in: if you sign in with Google, we receive your name, email address and profile picture.
Business contact sources: to find people who may be interested in Sollo, we use public sources such as LinkedIn and company websites, and introductions from people who know you.
Referral partners: if someone refers you to Sollo, our referral platform tells us about the referral.
As explained above, Sollo processes personal data on behalf of our Customers. This includes the use of data providers in certain Sollo features. In particular, our lead search and enrichment features get professional contact details (for example work email, phone number, job title, company and public LinkedIn profile information) from third-party data providers. When a Customer uses these features, we are acting as the data processor and the results are Customer Data (section 2.2).
4. How we use personal information
We use personal information to:
(a) provide Sollo: create and manage your account, connect your platforms, run the features you use, store your data, and send the messages and emails you ask us to send (we include this for completeness, but for most of this processing we act as the data processor);
(b) bill you: process payments, manage subscriptions and credits, and prevent payment fraud;
(c) support you: answer questions, fix problems, run onboarding calls, and send service messages (for example security alerts, billing notices and changes to our terms);
(d) keep Sollo safe: detect and prevent fraud, spam, abuse, security incidents and breaches of our Terms and Conditions, and apply usage limits that protect your connected accounts and other customers;
(e) improve Sollo: understand how people use Sollo, fix errors, test new features, and develop new ones. We use aggregated or de-identified information where we can;
(f) market Sollo: send our newsletter and product news, contact business prospects, run events and programmes, publish our podcast, and measure our marketing (see section 10);
(g) run our community and programmes: manage memberships, courses, coaching and events;
(h) meet legal obligations: keep tax and accounting records, respond to data subject rights and law enforcement requests, and comply with law; and
(i) protect our rights: establish, exercise or defend legal claims, and enforce our agreements.
If you are in the EU, the UK or Switzerland, section 14.1 sets out the legal basis we rely on for each of these purposes.
5. Who we share personal information with
5.1 Whether we sell personal information. In some jurisdictions, particularly in the US, the use of cross-context behavioural advertising can be considered a sale of personal information. At the time of this notice, we use advertising pixels, such as LinkedIn Insight Tags and Google Analytics. However, we otherwise do not sell your personal data.
5.2 We share personal information with:
(a) service providers who help us run Sollo and our business. They may use the information only to provide services to us. Please see our sub-processor list for more information.
(b) platforms you connect, such as LinkedIn, Google and WhatsApp, when you tell Sollo to send, sync or import through them;
(c) our community, referral and event platforms, when you take part;
(d) professional advisers, such as lawyers, accountants, auditors and insurers;
(e) authorities, such as regulators, courts and law enforcement, when the law requires it or when it is necessary to protect rights, property or safety;
(f) a buyer or successor, if we are involved in a merger, sale, financing or restructuring; and
(g) advertising platforms.
6. International transfers
6.1 While we are based in New Zealand, our service providers are in other countries, mainly the United States and the European Union. This means your information may be stored and processed outside the country where you live.
6.2 New Zealand is recognised by the European Commission, the United Kingdom and Switzerland as having data protection regulations that provide an adequate level of data protection. This means that any transfers of personal data to Sollo in New Zealand from those places do not need additional safeguards.
6.3 However, when we, or our providers, transfer personal information to a country that is not considered to have an adequate data protection regime, we use appropriate safeguards. These are normally the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and the Swiss equivalents. Where a US provider is certified under the EU-US Data Privacy Framework (and its UK and Swiss extensions), we may rely on that certification instead.
6.4 For transfers from New Zealand, Australia and Canada, we make sure our providers are subject to comparable safeguards, by contract or under the law of their country.
6.5 To get a copy of the safeguards we use, email support@gosollo.com.
7. How long we keep personal information
We keep personal information only as long as we need it for the purposes in this policy, or as long as the law requires. When we no longer need it, we delete it or anonymise it.
If you would like more information on how long we keep personal data for, please email support@gosollo.com.
8. How we protect personal information
We use technical and organisational measures to help protect your personal data. These include encryption in transit and at rest, access controls that separate each customer's data, limited staff access, monitoring for errors and security events, and careful selection of our service providers. Unfortunately, no system is completely secure. If a breach affects your personal information, we will notify you and the relevant data protection authority, where required by law.
9. Your rights and choices
9.1 Your rights. Depending on where you live, you may have the right to:
access the personal information we hold about you, and get a copy;
correct information that is wrong or incomplete;
delete your information;
move your information to another service (portability);
object to or restrict how we use your information;
withdraw consent, where we rely on consent. This does not affect earlier processing;
opt out of marketing, of the "sale" or "sharing" of personal information, and of certain kinds of profiling; and
complain to a regulator.
Please see section 14 for more detail on the rights available in your region.
9.2 How to make a request. Email support@gosollo.com. You can also do many things yourself in the app: update your profile, export your data, disconnect integrations, and delete records.
9.3 Verification. We may ask you to confirm your identity before we act on a request, for example by replying from the email address on your account. We use the information you give us for verification only for that purpose.
9.4 Agents. Someone you authorise can make a request for you. If this happens, we will ask for proof of their authority to act on your behalf.
9.5 Timing and cost. We respond within the time the law of your region allows (one calendar month in the EU and UK). Requests are usually free, unless they are clearly unfounded or excessive.
9.6 Requests about Customer Data. If your request is about information that a Sollo customer holds, please get in touch with that Customer to exercise your rights (see section 2.2).
10. Marketing
10.1 We send product news and our newsletter to Customers, and to people who subscribe. We may contact business people who we think could benefit from Sollo, by email or on LinkedIn, where the law allows.
10.2 Every marketing email has an unsubscribe link. You can also email support@gosollo.com, or reply "stop" to any message. We will stop within the time the law requires, and in any case within 10 working days. We will still send service messages about your account.
11. Children
Sollo is a business tool for adults. We do not knowingly collect personal information from anyone under 18. If you think a child has given us personal information, email support@gosollo.com and we will delete it.
12. Automated decisions
12.1 We do not make decisions about you that have legal or similarly significant effects only by automated means.
12.2 Some Sollo features use automated processing, including AI, to help Customers. For example, when we act as the data processor, Sollo scores how closely a LinkedIn connection matches a Customer's ideal client, suggests prospects, and drafts messages. These features use professional information, such as job title, headline, company and industry, to give suggestions to the Customer, and the Customer decides what to do.
12.3 We use automated tools to detect fraud, abuse and security risks. These can limit or pause an account. If this happens to you and you disagree, email support@gosollo.com and a person will review it.
13. Changes to this policy
We may update this policy. When we do, we will change the "Last updated" date. If a change is significant, we will tell Customers by email. Earlier versions are available on request.
14. Information for your region
14.1 European Economic Area, United Kingdom and Switzerland
Controller. Go Sollo Limited is the controller for the processing described in this policy.
Legal bases. We rely on these legal bases under the EU GDPR, the UK GDPR and the Swiss Federal Act on Data Protection:
Purpose (section 4) | Legal basis |
(a) Provide Sollo, including connected accounts and AI features | Performance of our contract with you (when you are a sole trader) Legitimate interests (to enter and maintain a business relationship with you, when you are a corporate entity) |
(b) Billing | Performance of our contract (when you are a sole trader) Legitimate interests (to bill customers, recover debts, provide refunds, as well as general accounting purposes) Legal obligation (tax records) |
(c) Support and service messages | Performance of our contract (when you are a sole trader) Legitimate interests (to improve our product and service, and assist/resolve issues for customers) |
(d) Security, fraud and abuse prevention | Legitimate interests (keeping Sollo, our customers and connected accounts safe) |
(e) Product analytics and improvement | Consent for non-essential cookies and session recording. Otherwise legitimate interests (understanding and improving Sollo) |
(f) Marketing to Customers | Legitimate interests, or consent where the law requires it. You can object or withdraw consent at any time |
(f) Newsletter | Consent |
(f) B2B outreach to prospects | Legitimate interests (telling business people about Sollo). You can object at any time |
(f) Podcast and testimonials | Consent, our contract with you, or our legitimate interests (to help grow Sollo) |
(g) Community and programmes | Consent, our contract with you, or our legitimate interests (to enable you to join and participate in the Sollo community) |
(h) Legal obligations | Legal obligation |
(i) Legal claims | Legitimate interests (protecting our rights) |
Where we rely on legitimate interests, we have balanced our interests against your rights. You can ask us for details of that balance.
Where we rely on contract or legal obligation as our legal basis, or we are relying on our legitimate interests to provide Sollo to you, this information is required to be provided, otherwise we cannot enter into a business relationship with you.
Your rights. You have the rights in section 9.1. You also have an absolute right to object to direct marketing. You also have the right to object to processing based on legitimate interests.
Information not from you. If we got your information from a source other than you (for example LinkedIn or a data provider, for our own marketing), the categories and sources are in section 3.3. We will tell you about this when we first contact you, and in any case within one month.
Transfers. See section 6.
Complaints. If you have a complaint about how we have handled your personal data, please contact us first, so we can try to fix the problem. We will acknowledge your complaint as soon as we can, and in the required timeframe for your jurisdiction. Depending on where you live, you can also complain to:
the data protection authority in the EU country where you live, work, or where the problem happened (list of EU authorities);
the UK Information Commissioner's Office (ico.org.uk);
the Swiss Federal Data Protection and Information Commissioner (edoeb.admin.ch);
the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information (cai.gouv.qc.ca);
the NZ Office of the Privacy Commissioner (privacy.org.nz);
the Office of the Australian Information Commissioner (oaic.gov.au).
14.2 United States
This section applies to residents of US states with consumer privacy laws, including California (CCPA, as amended by the CPRA), Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others. It gives our "notice at collection". It applies to the extent these laws apply to us.
Categories of personal information. In the last 12 months we collected:
Category | Examples | Sources | Purposes (section 4) | Disclosed for a business purpose to |
Identifiers | Name, email, IP address, account ID | You, your device, Google sign-in | (a)–(i) | Hosting, AI, analytics, email and payment providers |
Customer records | Billing name and address | You, Stripe | (b), (h) | Stripe, accountants |
Commercial information | Plan, purchases, credits used | You, Stripe | (a), (b), (e) | Stripe, analytics providers |
Internet and network activity | Pages viewed, features used, session recordings | Your device | (d), (e) | Analytics and error-monitoring providers |
Approximate geolocation | Country and city from IP address | Your device | (d), (e) | Hosting and analytics providers |
Audio and electronic information | Recordings of calls, podcast or events you take part in | You | (c), (f), (g) | Meeting, podcast and community providers |
Professional information | Job title, company, LinkedIn profile, offers | You, LinkedIn, public sources | (a), (f) | Hosting and AI providers |
Sensitive personal information | Account sign-in details (email and password) | You | (a), (d) only | Hosting provider |
We do not collect other kinds of sensitive personal information, and we do not use sensitive personal information to infer characteristics about you.
Retention. See section 7.
Sale and sharing. See section 5.
Your rights. Depending on your state, you have the right to:
know what personal information we collect, use and disclose, and access a copy;
delete it;
correct it;
get it in a portable format;
opt out of its sale, of targeted advertising, and of profiling that produces legal or similarly significant effects;
limit the use of sensitive personal information; and
not be treated differently because you used your rights.
How to use your rights. Email support@gosollo.com. We will verify your request (section 9.3). An authorised agent can make a request for you (section 9.4).
Appeals. If we refuse your request, you can appeal by replying to our decision with the subject "Privacy appeal". We will answer within 45 days (or 60 days where the law allows). If you are not satisfied, you can contact your state Attorney General.
14.3 Other countries
If you live somewhere else, you may have rights under your local law. These can include rights to access, correct or delete your information, and to complain to a regulator. We will respect those rights. Email support@gosollo.com and tell us where you live.
15. Contact us
Go Sollo Limited
Attention: Privacy Officer
Auckland, New Zealand
Email: support@gosollo.com