Privacy Policy

Siloët ("Siloët," "we," "us," or "our") provides a private workspace for reading drafts, media, audiences, and social context before content is published. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit siloet.ai, create an account, use Siloët, or connect a third-party account such as TikTok or Instagram.

This Policy applies to Siloët's own services. Third-party platforms and service providers may also process information under their own terms and privacy policies.

Depending on how you use Siloët, we may collect:

• Account and contact information, such as your email address, display name if you provide one, Firebase user identifier, authentication status, and related account records.
• Content you provide, such as videos, images, captions, thumbnails, transcripts, messages, files, links, notes, prompts, drafts, and other material you choose to upload, import, or select.
• Connected-account information. If you choose to connect a third-party service, such as TikTok or Instagram, we may receive information that you authorize that service to share with us. This may include account identifiers, usernames, profile details, public media, captions, thumbnails, media metadata, engagement or audience information, access tokens, and other data covered by the permissions you grant.
• Usage and device information, such as browser type, device type, IP address, approximate location derived from IP address, pages viewed, feature interactions, timestamps, referring URLs, authentication events, and diagnostic information.
• Communications, including information you send us when you request support, provide feedback, participate in research, or otherwise contact us.
• Information from service providers and partners, such as authentication, hosting, database, storage, analytics, communications, and connected-platform providers.

We may use personal information to:

• Provide, personalize, maintain, and improve Siloët.
• Import, organize, analyze, and display the content and media that you upload or authorize Siloët to access.
• Operate connected-account features that you explicitly enable, including retrieving authorized TikTok or Instagram profile and media information.
• Maintain accounts, authentication, session persistence, access controls, support, security, and debugging.
• Communicate with you about the Services, including support, security, product updates, and waitlist or launch information.
• Detect, investigate, and prevent fraud, abuse, security incidents, or violations of our terms.
• Comply with legal obligations and protect the rights, safety, and property of Siloët, our users, and others.

Some Siloët features may use automated analysis, machine learning, or artificial intelligence systems to process information you submit or authorize us to access. These systems may identify patterns or generate outputs about content, audiences, communication, identity, or social context.

We may use third-party infrastructure or model providers to perform this processing. Where we do so, we disclose information only as reasonably necessary to provide the requested feature, maintain security, and operate Siloët.

If you connect Siloët to a third-party platform, your use of that platform remains subject to its own terms and privacy policy. We access platform data only through authorized means and only for the permissions and purposes you enable.

For TikTok, Siloët may request access to basic profile information and public video information so you can select TikTok videos for use inside Siloët. For Instagram, Siloët may request access to profile and media information from accounts that are eligible for the Instagram APIs used by the service.

We do not sell data obtained from third-party platform APIs, and we do not use such data for purposes prohibited by the applicable platform's developer policies. Siloët does not currently request publishing permissions, and with the permissions it holds it cannot publish, edit, or delete content on a connected account.

Instagram. Siloët connects to Instagram using the Instagram API with Instagram Login. The permission we currently request is instagram_business_basic, and it is used for two things only: to identify the connected professional account, so you can confirm which account you authorized, and to retrieve that account's own media so you can select posts to work on inside Siloët. We do not request or hold permissions for publishing, comments, messaging, insights, advertising, or searching public content, and we do not read media belonging to any other account.

You may disconnect a connected account from within Siloët, which deletes the stored connection record and the credential held with it. For TikTok we also ask TikTok to revoke that credential. Instagram does not offer an equivalent step to us, so if you also want to withdraw the authorization itself you can do that in Instagram under Apps and websites. After disconnection, we may retain limited records where needed for security, legal compliance, debugging, or to honor deletion requests.

Our Data Minimization Policy sets out the full inventory of what we collect, the categories we have chosen not to hold at all, and the permissions we request from each platform.

We may disclose information to:

• Service providers that host, store, secure, analyze, process, authenticate, or support the Services.
• Connected platforms, such as TikTok, Instagram, or Meta, when you choose to connect or use a platform feature.
• Professional advisers, such as lawyers, accountants, auditors, insurers, and consultants, where reasonably necessary.
• Authorities or other parties where required by law or where reasonably necessary to protect rights, safety, or security. How we handle requests from courts, law enforcement, and other public authorities, including the review we apply and when we challenge a request, is set out in Government and Law Enforcement Data Requests.
• Transaction counterparties in connection with a merger, financing, acquisition, reorganization, sale of assets, or similar corporate transaction, subject to appropriate confidentiality protections.
• Other parties at your direction or with your consent.

We do not sell personal information for money. We also do not knowingly share personal information for cross-context behavioral advertising.

We and our service providers may use cookies, local storage, and similar technologies to operate the site, remember preferences, maintain sessions, understand usage, and improve performance. For example, Siloët may use these technologies to maintain an authenticated session, remember theme preferences, support an environment access gate, or preserve temporary interface state.

You can control cookies through your browser settings. Disabling certain technologies may affect the functionality of the Services.

We retain personal information only for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, enforce agreements, and maintain security. Retention periods vary depending on the type of information, the feature involved, and applicable legal requirements.

When information is no longer required, we may delete it, de-identify it, or retain it in a form that no longer identifies you.

You may request deletion of personal information associated with your use of Siloët by emailing privacy@siloet.ai. Please include enough information for us to identify the relevant account or data.

If you connected a third-party account, you may also revoke Siloët's access through that platform's settings. After receiving a valid deletion request or revocation signal, we will delete or de-identify applicable data unless retention is required or permitted by law.

We use administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Siloët and its service providers may process information in the United States and other countries. Where required, we use appropriate safeguards for international transfers of personal information.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information; object to or restrict certain processing; withdraw consent; or appeal a privacy decision. You may also have the right to opt out of certain sales, sharing, or targeted advertising practices.

To exercise a privacy right, contact privacy@siloet.ai. We may need to verify your identity before completing a request. We will not discriminate against you for exercising an applicable privacy right.

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including rights to know, access, correct, delete, and obtain information about certain disclosures of personal information, and to opt out of sale or sharing where applicable.

We do not sell personal information for money and do not knowingly share personal information for cross-context behavioral advertising. We do not knowingly sell or share personal information of consumers under 16 years of age.

Siloët is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information in violation of this Policy, contact us so we can take appropriate action.

We may update this Privacy Policy from time to time. We will post the revised Policy on this page and update the effective date. If changes are material, we may provide additional notice where required by law.

Questions or requests regarding this Privacy Policy or Siloët's privacy practices may be sent to privacy@siloet.ai.