Privacy Policy

We collect information you give us directly — your name, work email, organization, role, and any details you enter while setting up or operating your account. When your organization uses Sillops as its ERP, the platform also stores the business records you put into it: people, projects, finances, attendance, and similar operational data.

We automatically collect limited technical information when you visit our site or sign in — IP address, browser and device type, pages viewed, and timestamps — so we can keep the service secure and reliable. We do not knowingly collect data from children.

We use your information to provide, operate, and improve the platform: authenticating you, resolving your tenant and permissions, delivering the modules you use, and keeping an audit trail of significant actions.

We also use it to communicate with you about your account, respond to support requests, send service and security notices, and — where you have opted in — occasional product updates. We do not sell your personal information.

We share data with vetted subprocessors that help us run Sillops — hosting, database, email delivery, and error monitoring — each bound by contract to protect it and use it only on our instructions.

We may disclose information when required by law, to enforce our agreements, or to protect the rights and safety of our users and the public. If Sillops is involved in a merger or acquisition, we will notify affected customers before any data transfers.

We keep personal and business data for as long as your account is active and as needed to provide the service. When an organization closes its account, we delete or anonymize its data within a reasonable window, except where we must retain records to meet legal, tax, or security obligations.

Because Sillops runs on plain PostgreSQL with open export, your organization can retrieve its own data at any time through the documented API or a one-click CSV export.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise most of these directly in the app or by contacting us.

Where your organization is the controller of platform data, we will direct your request to that organization and support them in responding. We will not discriminate against you for exercising any privacy right.

We use a small number of strictly necessary cookies to keep you signed in and to secure your session. We keep analytics minimal and privacy-respecting, and we do not use third-party advertising trackers on the platform.

You can control cookies through your browser settings, though disabling essential cookies may prevent you from signing in.

We protect data with multi-tenant isolation, a role-based permission model resolved on every request, encryption in transit, and a signed audit trail. Access to production systems is limited and logged.

No system is perfectly secure, but we design defensively and review our controls regularly. You can read more on our Security page.

Sillops may process and store data in countries other than your own. When we transfer personal data across borders, we rely on appropriate safeguards — such as standard contractual clauses — to ensure it remains protected to the standard described here.

We may update this Privacy Policy as the product and applicable law evolve. When we make material changes, we will update the date above and, where appropriate, notify you in the app or by email. Continued use after an update means you accept the revised policy.

If you have questions about this policy or how we handle your data, email us at legal@sillops.com or book a demo and we'll route you to the right person.