Privacy Policy

1. Introduction

DataSilo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at datasilo.ai and our services, including Video Search and Summarization, ChefAI, and any other products we offer (collectively, the "Services").

By using our Services, you consent to the data practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Account Information: Name, email address, password, and profile details
• Payment Information: Billing address and payment method details (processed securely through Stripe)
• User Content: Videos, recipes, search queries, and other content you upload or generate
• Communications: Messages you send to our support team or through our Services
• Preferences: Account settings, notification preferences, and product selections

2.2 Information Automatically Collected

When you use our Services, we automatically collect certain information, including:

• Usage Data: Features used, pages viewed, time spent, and interaction patterns
• Device Information: IP address, browser type, operating system, and device identifiers
• Location Data: General geographic location based on IP address
• Cookies and Tracking: Session data, authentication tokens, and preferences (see Section 7)
• Analytics Data: Service performance, error logs, and feature usage statistics

2.3 Information from Third Parties

We may receive information about you from third-party services:

• Authentication Providers: Google, Facebook, or other OAuth providers
• Payment Processors: Stripe for billing and subscription management
• Grocery Store APIs: Shopping cart data and order information (ChefAI only)
• Analytics Services: Google Analytics and similar tools

3. How We Use Your Information

We use the information we collect to:

• Provide Services: Operate, maintain, and deliver our AI-powered products
• Process Transactions: Handle payments, subscriptions, and billing
• Improve Services: Analyze usage patterns to enhance features and user experience
• Train AI Models: Improve AI accuracy and performance (using aggregated, anonymized data)
• Communicate: Send service updates, newsletters, and promotional materials (with your consent)
• Customer Support: Respond to inquiries and resolve technical issues
• Security: Detect, prevent, and address fraud, abuse, and security threats
• Compliance: Comply with legal obligations and enforce our Terms of Service
• Personalization: Customize content and recommendations based on your preferences

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party vendors who perform services on our behalf:

• Firebase (Google): Authentication, database, and hosting services
• Stripe: Payment processing and subscription management
• Google Gemini: AI model processing for recipe generation and content analysis
• Cloud Storage: AWS, Google Cloud, or similar providers for data storage
• Analytics Providers: Google Analytics, Mixpanel, or similar tools
• Email Services: SendGrid, Mailchimp, or similar providers for communications

These providers are bound by confidentiality agreements and may only use your data to perform services for us.

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders, subpoenas, or legal processes
• Government or regulatory requests
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activity
• Enforcement of our Terms of Service

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, such as when you choose to connect your account to third-party integrations.

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Role-based access and multi-factor authentication for staff
• Secure Infrastructure: Hosted on enterprise-grade cloud platforms with SOC 2 compliance
• Regular Audits: Security assessments and penetration testing
• Data Backup: Regular backups with disaster recovery procedures
• Monitoring: 24/7 system monitoring and intrusion detection

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide our Services and maintain your account
• Comply with legal, tax, or regulatory requirements
• Resolve disputes and enforce our agreements
• Maintain business records and analytics

Specific retention periods:

• Account Data: Retained while your account is active, plus 90 days after deletion
• User Content: Deleted within 30 days of account closure (unless legally required)
• Payment Records: Retained for 7 years for tax and accounting purposes
• Analytics Data: Aggregated and anonymized data may be retained indefinitely
• Support Communications: Retained for 3 years

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Authentication, security, and basic functionality
• Analytics Cookies: Understanding how users interact with our Services
• Preference Cookies: Remembering your settings and choices
• Marketing Cookies: Delivering relevant advertisements (with consent)

You can control cookies through your browser settings. Note that disabling cookies may affect functionality of our Services.

8. Your Privacy Rights

Depending on your location, you may have the following rights:

8.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Data Portability: Receive your data in a portable format
• Opt-Out: Unsubscribe from marketing communications
• Restriction: Limit how we use your information

8.2 GDPR Rights (EU/EEA Users)

If you are in the European Union or European Economic Area, you have additional rights under GDPR:

• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority
• Right to information about automated decision-making and profiling

8.3 CCPA Rights (California Users)

California residents have specific rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, and shared
• Right to delete personal information (with certain exceptions)
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

8.4 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@datasilo.ai. We will respond to verified requests within the timeframes required by applicable law (typically 30 days).

9. Children's Privacy

Our Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our systems.

Users aged 13-17 must have parental consent to use our Services.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from your jurisdiction.

We implement appropriate safeguards for international transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Privacy Shield certification (where applicable)
• Adequacy decisions by relevant authorities

11. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

Third-party services we integrate with include:

• Google (OAuth, Gemini AI, Analytics, Firebase)
• Stripe (payment processing)
• Grocery store APIs (for ChefAI functionality)
• Social media platforms (for sharing features)

12. AI and Machine Learning

Our Services use artificial intelligence and machine learning technologies. Here's how we handle AI-related data:

• Training Data: We may use aggregated, anonymized user data to improve our AI models. Individual user content is not used for training without explicit consent.
• Content Processing: Your uploaded content (videos, recipes, queries) is processed by AI services to provide features like transcription, summarization, and recipe generation.
• Data Minimization: AI processing uses only the minimum data necessary for functionality.
• Vendor Processing: Third-party AI providers (like Google Gemini) process data according to their privacy policies and data processing agreements.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending an email to the address associated with your account
• Displaying a notice within our Services

Your continued use of the Services after changes become effective constitutes acceptance of the revised Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

DataSilo Privacy Team
Email: privacy@datasilo.ai
Address: [Your Company Address]
Website: datasilo.ai

For GDPR-related inquiries, our EU representative can be contacted at: eu-privacy@datasilo.ai

15. Your Choices Summary