Privacy Policy

1. Information We Collect

Information you provide directly:

• Account data: username, email address, and password (stored as a one-way hash) when you register.
• Profile data: information you add to your profile or support requests.
• Communications: the content of messages you send to support, legal, or billing.

Information collected automatically:

• Usage & technical data: IP address, browser type, operating system, device identifiers, referring URLs, timestamps, and interaction logs.
• API activity: request logs, endpoints called, timestamps, response status, and quota consumption, used for billing, rate limiting, and security.
• Cookies and local storage: session tokens and preferences (see our Cookie Policy).

Payment data: payments are processed by our payment processor Stripe, Inc. We do not collect or store full card numbers or sensitive card data on our servers. We may retain limited transaction metadata (e.g., plan, amount, date, status) for record-keeping and tax purposes.

2. How We Use Your Information

We process personal data for the following purposes:

• To provide, operate, maintain, and improve the Service;
• To create and manage your account and authenticate you;
• To process subscription payments and deliver invoices;
• To monitor usage, enforce quotas and rate limits, and prevent fraud or abuse;
• To respond to your support, billing, and legal inquiries;
• To send service-related communications (e.g., security alerts, policy changes);
• To comply with legal obligations; and
• With your consent, for marketing communications, which you can opt out of at any time.

3. Legal Basis for Processing (GDPR)

For users in the EEA, UK, and Switzerland, we rely on the following legal bases under Article 6 of the GDPR:

• Performance of a contract: to provide the Service you requested and manage your account and subscription;
• Legal obligation: to comply with tax, accounting, and other legal duties;
• Legitimate interests: for security, fraud prevention, network integrity, and service improvement, balanced against your rights;
• Consent: for optional marketing communications and certain cookies, which you may withdraw at any time.

4. Payment Data & PCI-DSS

Card and payment details are handled entirely by Stripe, which is certified as a PCI-DSS Level 1 service provider. Silaar never sees, transmits through its own systems, or stores your full card number or CVV. We only store references and metadata necessary for billing and accounting.

5. Cookies & Tracking Technologies

We use essential cookies and local storage (including JWT authentication tokens) to keep you signed in and remember your preferences. We do not sell your data to advertisers. Full details, including the types of cookies used and how to control them, are in our Cookie Policy.

6. Data Sharing & Service Providers

We do not sell your personal data. We may share information with the following categories of recipients, only as necessary to operate the Service:

Our service providers are contractually bound to protect your data and use it only for the purposes we specify.

7. International Data Transfers

Silaar is based in the United States. If you access the Service from outside the U.S., your information will be transferred to, stored, and processed in the U.S. and other countries where our service providers operate. We take steps to ensure such transfers are protected under appropriate safeguards, such as Standard Contractual Clauses (SCCs) where required by the GDPR.

8. Data Retention & Security

Retention. We retain personal data only as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Account data is retained while your account is active and deleted or anonymized after a reasonable period following deletion, subject to legal retention requirements (e.g., for tax records).

Security. We implement reasonable technical and organizational measures to protect your data, including encryption in transit (TLS), hashed passwords, access controls, and monitoring. However, no method of transmission or storage is 100% secure. See our Security page for more details.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you;
• Rectification — request correction of inaccurate or incomplete data;
• Erasure — request deletion of your personal data (subject to legal exceptions);
• Restriction & objection — request we limit or stop certain processing;
• Data portability — receive your data in a structured, machine-readable format;
• Withdraw consent — withdraw consent for processing that relied on it;
• Opt-out of sale/share — under CCPA, we do not sell personal data; you may still opt out of any "sharing" for cross-context behavioral advertising.

To exercise any right, contact privacy@silaar.com. We will respond within the timeframe required by applicable law (generally 30 days). We will not discriminate against you for exercising your rights.

10. "Do Not Track" Signals

Some browsers offer a "Do Not Track" signal. Because there is no consistent industry standard for interpreting these signals, we do not currently respond to them. You can manage cookies through our Cookie Policy and your browser settings.

11. Children's Privacy

The Service is not directed to children under the age of 16 (or the age of digital consent in your jurisdiction), and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact privacy@silaar.com and we will delete it.

12. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected and sold/shared, the right to delete, and the right to non-discrimination. Silaar does not sell personal information. To submit a verifiable consumer request, email privacy@silaar.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page, update the "Last updated" date, and provide notice of material changes through the Service or by email. We encourage you to review this page periodically.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact our privacy team: