Legal

Privacy Policy

Last updated: June 29, 2026

Summary (not a substitute for reading the full policy): Document content is encrypted and stored locally on your device — X Point cannot read your essays. We collect your account email, keystroke timing metadata (not content), and submission metadata. We do not sell your data. Institutional customers can request a FERPA Data Processing Agreement.

1. Who we are

X Point ("X Point," "we," "us," or "our") operates the Solus writing application and related services at soluseditor.com. Our contact email is cameroncgilbert@gmail.com.

2. What we collect

Account information

When you create a Solus account, we collect your email address and a hashed password. For institutional accounts, we also collect the institution name and your role (admin, teacher, or student).

Keystroke metadata — not content

Solus records keystroke timing and count data — specifically, the timestamps at which typing events occur and the total number of keystrokes. We do not record or transmit the characters you type. The keystroke log embedded in your .solus file contains timing and count information only; the actual text of your document is stored separately in encrypted form.

Paste events

When you paste content into the Solus editor, the pasted text is recorded in a "paste quarantine" section of your document's certificate. This is stored locally in your .solus file and is transmitted to your teacher as part of your submission. X Point's servers do not store the plaintext of pasted content.

Document metadata

When you submit a document to a class, we store submission metadata: document ID, timestamp, student account ID, class ID, and verification status. We do not store the plaintext of your essay on our servers.

Encrypted document content

Document content is encrypted with AES-256-GCM before being transmitted or stored. The encryption key is derived from the class password, which is held by your teacher. X Point does not have access to the decryption key and cannot read the content of your essays.

Usage data

We collect basic usage data (app launches, features used, error logs) to improve the Service. This data is anonymized and does not include document content or keystroke text.

3. How we use your data

  • To operate the Service (accounts, class management, submission handling)
  • To generate and verify cryptographic certificates
  • To communicate with you about your account, updates, and security issues
  • To improve the Service (using anonymized usage data)
  • To comply with legal obligations

We do not use your data for advertising, and we do not sell your data to third parties.

4. Who we share data with

Your teacher and institution

When you submit a document to a class, the document (including the certificate and encrypted content) is shared with your teacher and any institutional admins with access to that class. This is the intended function of the Service.

Public verifier users

If you or your teacher uses the public verifier (verify.soluseditor.com or the in-app verifier), the verification process runs locally in the user's browser. No data is transmitted to X Point during verification.

Service providers

We use a small number of third-party service providers to operate the Service, including cloud infrastructure (for account storage and class management). These providers process data only on our behalf under appropriate data processing agreements.

Legal requirements

We may disclose data if required by law, subpoena, or court order, or to protect the rights, safety, or property of X Point, our users, or the public.

5. FERPA

Solus is used in educational settings and we take FERPA compliance seriously. Key facts:

  • Document content is encrypted and stored locally by default; X Point does not access the plaintext of student essays.
  • We collect and process "education records" as defined by FERPA only on behalf of educational institutions that have engaged us as a "school official" with a legitimate educational interest.
  • We do not disclose education records to third parties without appropriate consent or legal authorization.
  • Enterprise customers may request a FERPA-compliant Data Processing Agreement (DPA). Contact cameroncgilbert@gmail.com.

6. Data security

We use industry-standard security practices including:

  • TLS 1.3 for all data in transit
  • AES-256-GCM encryption for document content
  • ECDSA-P256 for document signing
  • Bcrypt for password hashing
  • Regular security reviews

No security system is perfect. If you discover a security vulnerability in Solus, please report it to cameroncgilbert@gmail.com.

7. Data retention

Account data is retained as long as your account is active. If you delete your account, your account information and submission metadata are deleted within 30 days. Encrypted document content stored in class submissions may be retained by your teacher or institution according to their own retention policies.

Keystroke metadata and paste logs stored in .solus files on your local device are subject to your own device's storage management — we do not have access to delete them.

8. Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing
  • Data portability

To exercise any of these rights, contact us at cameroncgilbert@gmail.com. We will respond within 30 days.

9. Children's privacy

Solus is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately.

For K-12 institutional deployments, educational institutions are responsible for obtaining appropriate parental consent under COPPA and applicable state law.

10. Cookies and tracking

The Solus website (soluseditor.com) uses minimal cookies: a session cookie for authenticated users and a preference cookie for theme settings. We do not use third-party advertising cookies or cross-site tracking. We do not use Google Analytics or other behavioral tracking services on this site.

11. International transfers

X Point is based in the United States. If you use Solus from outside the United States, your data may be transferred to and processed in the United States. By using the Service, you consent to this transfer.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email (for registered users) and by updating the "Last updated" date above. Continued use of the Service after the effective date constitutes acceptance of the revised policy.

13. Contact

Privacy questions, data access requests, and security disclosures:
X Point · cameroncgilbert@gmail.com