Cookie Policy

What cookies are

Cookies are small text files placed on your device by a website. Related technologies include localStorage and sessionStorage, which store data in your browser without transmitting it automatically with every request. This policy covers all of these collectively as "cookies".

Cookies we use

We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies that profile you across the web. We use only the following:

• Authentication tokens (strictly necessary) — When a business owner signs in to the Solys CRM, session tokens issued by our authentication provider (Supabase) are stored in your browser to keep you signed in securely. Without these, the dashboard cannot function.
• Session security values (strictly necessary) — Short-lived values used to protect your session against cross-site request forgery (CSRF) and session hijacking.
• Chat widget session ID (functional) — When you chat with a Solys-powered AI assistant on a business's website, a random session identifier is stored so the conversation can continue if you refresh the page. It does not track you across other websites.
• Preference values (functional) — Interface preferences such as light or dark theme.

Cookies we do not use

• No advertising or marketing cookies
• No cross-site or third-party tracking pixels
• No sale or sharing of cookie data with data brokers
• No fingerprinting for advertising purposes

Third-party services

Some strictly necessary cookies are set by infrastructure providers acting on our behalf — for example, our authentication provider (Supabase) sets the session tokens described above. These providers process this data only to deliver the Services and are bound by data processing agreements. See our Privacy Policy for the full list of processors.

Your choices

Because we use only strictly necessary and functional cookies, no cookie consent banner is required for basic use of the Services. You can clear or block cookies at any time through your browser settings. Blocking strictly necessary cookies will prevent you from signing in to the CRM dashboard.

If we ever introduce non-essential cookies (such as analytics), we will update this policy and request your consent first, in line with Jamaica's Data Protection Act, 2020.

Retention

Authentication tokens expire automatically and are removed when you sign out or when your session ends. Chat widget session identifiers expire after a period of inactivity. Preference values persist until you clear your browser storage.

Contact

Questions about this Cookie Policy: