Consumer Health Data Privacy Policy
Effective September 23, 2026 ยท Last updated September 23, 2026
This policy is provided under Washington's My Health My Data Act and Nevada's consumer health data law. It explains how Solstice handles "consumer health data": personal information that identifies, or could reasonably identify, a person's past, present or future physical or mental health. It supplements our Privacy Policy.
Why Solstice may have consumer health data
Solstice does not ask for health information, and it does not track your health. But family and court cases often involve it, so you may choose to share it: for example, a medical record or counseling report you upload, or a conversation about a disability, a pregnancy, a diagnosis or treatment that matters to your case.
Categories of consumer health data we collect
- Health information contained in documents you upload, such as medical, counseling, therapy or evaluation records.
- Health information you mention in your conversations, notes, tasks and drafts.
- Inferences about health that could be drawn from that content, for example from a document's title or the questions you ask.
Where it comes from
Only from you: the documents you upload and the information you type. We do not collect consumer health data from other sources, and we do not buy it.
How we use it
Only to provide the service you asked for: to store it for you, to let you search it and ask questions about it, and to help you prepare drafts that use it. We do not use it for advertising, we do not use it to train AI models, and we do not use it for any other purpose without your consent.
Categories of consumer health data we share, and with whom
We do not sell consumer health data, and we do not share it with third parties for their own use. The only disclosures are to processors that handle it on our behalf, under contract, only to provide the service you requested:
| Recipient | What they receive | Why |
|---|---|---|
| Search-indexing provider (Isaacus) | Passages of uploaded documents, which may contain health information | To make your documents searchable by meaning. Its published policy is not to retain the text. |
We have no affiliates that receive consumer health data. We may also disclose it where the law requires, for example in response to a valid court order, as described in our Privacy Policy.
Your rights
You have the right to:
- confirm whether we collect, share or sell your consumer health data, and to see it;
- get a list of the third parties and affiliates with whom we have shared it, and how to contact them;
- delete it, and to have us tell our processors to delete it;
- withdraw any consent you have given us.
You can delete documents, conversations and your whole account yourself in the Portal at any time. For any other request, email privacy@solstice-legal.com. We will confirm your identity through the email address on your account and respond within 45 days. If we decline your request, you may appeal by replying to our answer, and we will respond to the appeal within 45 days. If the appeal is denied, you may contact the Washington State Attorney General or the Nevada Attorney General.