Data Minimization Policy

Siloet, inc. ("Siloët") collects the least information that will make the product work, keeps it for the shortest time that is useful, and discloses the narrowest slice of it that answers any legitimate request.

This is a design constraint rather than a preference. Siloët reads a creator's work before they publish it, which is about as sensitive as a creative tool gets. The most reliable protection for that material is not to hold it.

This policy sits alongside our Privacy Policy, which describes rights and legal bases, and our Government and Law Enforcement Data Requests policy, which describes what happens when an authority asks for data.

• Necessity. A field is collected only if a feature fails without it. Convenience, future plans, and analytics curiosity are not reasons to collect.
• Least privilege. When we connect to another platform we request the narrowest permission that does the job, and no permission we are not currently using.
• Locality. Where work can stay on a creator's own device, it stays there.
• Expiry. Data that exists for a moment is deleted when the moment passes rather than left to accumulate.
• Minimum disclosure. When we must disclose, we disclose the named fields and nothing adjacent to them.

Account records. An email address and password so an account can exist and be signed in to. Authentication is operated for us by Google, and we do not hold the password itself.

Connection records. When a creator links a TikTok or Instagram account, we store the account identifier that platform issues, the permissions granted, the time the connection was made, and the time it expires. We also store the credential that allows us to read on the creator's behalf, for as long as the connection lasts.

Transient sign-in state. While a creator is part-way through connecting a platform, we hold a short-lived record to complete the exchange securely. It is deleted when the connection completes, and ceases to be usable ten minutes after it is created.

Processed but not stored. When a creator opens the Instagram or TikTok view, Siloët requests that account's own media from the platform and passes it to the browser so it can be displayed. Captions, cover images and media links are handled in the course of serving that request. The connector does not write them to our database, and they are not intentionally persisted.

The distinction matters: the records above are kept until something deletes them, while the material in this paragraph exists only for the length of the request that carried it.

This section matters more than the one above it, and we intend to be held to it.

• Post content, as stored data. Captions, images, video and cover art from a connected account are read live from TikTok or Instagram when a creator opens the view and passed through to their browser. The connector does not write them to our database.
• Drafts. Files a creator selects from their own device stay on that device. They are not uploaded.
• Messages, comments, and followers. We do not request the permissions that would let us read them, so they are not available to us at all.
• Other accounts. We read only the connected account, never public content belonging to anyone else, and we do not use hashtag or public content search.
• Payment and identity documents. Not collected.
• Cross-site tracking. We do not sell personal information and do not share it for cross-context behavioural advertising.

We ask each platform for the narrowest scope that supports the feature, and we do not request permissions against future plans.

TikTok. Permission to read the connected account's basic profile, so a creator can confirm which account they linked, and to list that account's own videos, so they can choose which to work on.

Instagram. Permission to read the connected professional account's basic profile and its own media, for the same two reasons.

Siloët does not currently request publishing permissions, and with the permissions it holds it cannot publish, edit or delete content on a connected account. Were that ever to change, it would require a new authorization from the creator and a new review by the platform.

Siloët runs on infrastructure operated by other companies, which process data on our behalf and under contract:

• Amazon Web Services hosts the application and holds our application secrets.
• Google provides authentication and the database in which account and connection records are stored.

They are limited to processing data for the purposes we set. We do not send connected-platform data to any analysis service, and we do not disclose personal information to third parties for their own purposes.

Connection records last as long as the connection. A creator can disconnect a platform from within Siloët at any time, which deletes the connection record and the credential stored with it; for TikTok we also ask TikTok to revoke that credential. Transient sign-in state ceases to be usable after ten minutes. Account records last as long as the account.

Deletion and disconnection are described in section 9 of the Privacy Policy.

A request from a public authority is answered with the specific fields named, for the specific accounts named, for the specific period named. Our strong presumption is against disclosing the credentials held for a connected platform account, because those are live keys to an account held by another company rather than records about it, and no request for them is answered without legal advice.

Because of section 4, a request for a creator's posts cannot be answered by Siloët at all. We say so, and point the requester to the platform that holds them.

We review this policy, the inventory in section 3, and the permissions in section 5 at least annually, and whenever we add a feature that would collect something new. A feature that requires a new category of data is a decision recorded against this policy, not an incidental consequence of shipping.

Where a review finds we are holding something section 3 does not list, the resolution is to stop holding it.

Questions about this policy can be sent to privacy@siloet.ai.