Privacy Policy

Last updated: August 25, 2026

SILOCRM
Terms of Service & Privacy Policy
Effective Date: March 4, 2026
Last Updated: August 25, 2026

PART II - PRIVACY POLICY

17. Introduction

This Privacy Policy explains how SiloCRM, Inc. ("SiloCRM," "we," "us," or "our"), operating at 8410 Hwy 90 Alt Suite 140, Sugar Land, TX 77478, collects, uses, shares, and protects information in connection with the Service. It applies to all users of the Service and supplements the Terms of Service in Part I.

By using the Service, you consent to the practices described in this Privacy Policy. If you disagree with this Privacy Policy, do not use the Service.

18. Information We Collect

18.1 Information You Provide

Account registration data (name, email, phone, billing address, company name)
Payment information (processed and stored by our third-party payment processors; we do not store full payment card numbers)
Content and data you import, upload, or create in the platform (contacts, leads, campaign content, files)
Communications you send to or through SiloCRM (support tickets, emails, chat)
Feedback and survey responses

18.2 Automatically Collected Information

Log data (IP addresses, browser type, pages visited, timestamps, referral URLs)
Device identifiers and usage analytics
Cookies, web beacons, and similar tracking technologies
API access logs and integration activity
Performance and error data

18.3 Information from Third Parties

Data from third-party integrations you authorize (CRMs, marketing platforms, social media)
Data from Google APIs, where you connect a Google integration (Google Calendar, Gmail, Google Drive, Google Sheets). We receive this only after you complete Google's consent screen, and only within the permissions shown there. Its collection, use, storage, sharing, retention, and deletion are governed exclusively by Section 19.1
Enrichment data from data providers to supplement your lead and contact records. We do not enrich, append to, or supplement Google user data, and we do not use Google user data to enrich any other record
Payment confirmation data from payment processors

19. How We Use Information

SiloCRM uses collected information to:

Provide, operate, maintain, and improve the Service
Process payments and manage your subscription
Send transactional communications (receipts, notifications, account alerts)
Provide customer support and respond to inquiries
Enforce these Terms and protect against fraud, abuse, and security threats
Develop new features, products, and services
Train and improve AI models, algorithms, and automation systems (excluding Google user data — see Section 19.1)
Generate aggregated, anonymized analytics and market intelligence (excluding Google user data — see Section 19.1)
Comply with legal obligations and respond to lawful government requests
Send marketing and promotional communications (with opt-out rights)
Conduct research and analysis to improve platform performance

The two uses above relating to AI model training and to aggregated analytics or market intelligence do not apply to Google user data. Data obtained through Google APIs is governed exclusively by Section 19.1 below, which overrides this section wherever the two conflict.

19.1 Google User Data and Limited Use

SiloCRM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

This section governs all data SiloCRM receives from Google APIs and prevails over any more general statement elsewhere in this Privacy Policy.

What we access, and why. SiloCRM requests only the narrowest Google permissions needed for features you explicitly connect:

Google permission	What it enables	What we access
Calendar (events, read-only)	Creating, updating, and cancelling appointments you book through SiloCRM, and checking availability	Appointment times on the calendar you connect
Gmail (send)	Sending email you compose or trigger from SiloCRM through your own Gmail account	Send access only. We do not read, list, or store your mailbox
Drive (metadata read-only)	Letting you pick one of your spreadsheets in the Google Sheets automation	File names and IDs, so the picker can list them. Not file contents
Sheets	Reading and writing the specific spreadsheet you select	Only the spreadsheet you choose
Basic profile and email address	Identifying your account when you sign in or connect an integration	Name and email address

How we do not use Google user data. SiloCRM does not, and will not:

Use Google user data, whether raw, aggregated, derived, or de-identified, to develop, train, retrain, fine-tune, or improve any generalized or foundational artificial intelligence or machine learning model, whether our own or a third party's
Transfer Google user data to any third party that would use it to train or improve such a model
Sell, license, or rent Google user data
Use Google user data for advertising, remarketing, audience building, market intelligence, or credit assessment
Allow humans to read Google user data, except with your explicit consent for a support request you initiate, where required by law, for security or abuse investigations, or on data that has been fully aggregated and anonymized

AI features and Google user data. SiloCRM uses third-party AI services (currently Anthropic, OpenAI, and ElevenLabs) to power features such as automated scheduling assistance and in-product search. Where an AI feature needs to know your availability, SiloCRM sends only derived busy and free time intervals, meaning start and end times alone.

Gmail message content is never sent to any AI provider. SiloCRM holds send-only Gmail access and does not read, list, or store your mailbox. Drive file contents are never sent to any AI provider; SiloCRM requests Drive metadata only, so that a file picker can list your spreadsheet names.

SiloCRM accesses these AI services under commercial API terms that prohibit the provider from using submitted data to train or improve their models. SiloCRM does not enable, and will not enable, any setting or program that would permit a provider to train on data submitted through our integrations. A current list of our AI subprocessors is available at silocrm.com/subprocessors.

Retention and deletion. Google user data is retained only as long as needed to provide the feature you connected it to. You may disconnect any Google integration at any time from Settings, which revokes SiloCRM's access token and stops all further access. You may request deletion of Google user data SiloCRM holds by contacting legal@silocrm.com. The indefinite-retention provision in Section 22 does not apply to Google user data.

20.1 Service Providers and Subprocessors

We share information with carefully vetted third-party vendors and service providers who assist us in operating the Service, subject to confidentiality obligations. These include cloud hosting providers, payment processors, email delivery services, SMS gateway providers, AI service providers, and analytics platforms. A current list of key subprocessors is available at silocrm.com/subprocessors.

Google user data. Google user data is shared with a service provider only where doing so is necessary to deliver the specific feature you connected, and only under terms that prohibit that provider from using the data to train or improve its models. It is never shared with analytics platforms, advertising vendors, data brokers, or enrichment providers. See Section 19.1, which controls.

20.2 Business Transfers

In the event of a merger, acquisition, sale of assets, financing, or other corporate transaction, information we hold may be transferred to the acquiring or successor entity. We will notify you via email or prominent in-service notice of any such change and any choices you may have.

20.3 Legal Compliance

We may disclose information when required by law, court order, subpoena, or governmental authority, or when we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation; (b) protect the rights, property, or safety of SiloCRM, our users, or the public; or (c) detect, prevent, or address fraud or security issues.

20.4 Aggregated and De-Identified Data

We may use and share aggregated, anonymized, or de-identified data derived from the platform for any purpose, including commercial purposes, without restriction. De-identified data does not include information that could reasonably identify you or your individual customers.

This Section does not apply to Google user data. No data received from Google APIs — whether raw, aggregated, anonymized, de-identified, or otherwise derived — is used or shared under this Section. Google user data is used solely to provide and improve the user-facing features you connected it to, as set out in Section 19.1, which controls.

20.5 What We Do Not Sell

SiloCRM does not sell your individually identifiable customer or lead data (names, emails, phone numbers) to third parties for their own independent marketing purposes. Notwithstanding the foregoing, California law broadly defines "selling" and "sharing" personal information to include certain common business activities including advertising and marketing. Please see Section 23 for California-specific rights.

Google user data is never sold, licensed, rented, or shared for advertising or marketing, under the California definition or any other. This commitment is unconditional and does not depend on the analysis in the paragraph above. See Section 19.1.

21. Cookies and Tracking Technologies

SiloCRM uses cookies, pixels, web beacons, and similar technologies to: authenticate users, remember preferences, analyze usage, and support marketing activities. You may control cookies through your browser settings, though disabling cookies may affect Service functionality. We may use third-party analytics tools (for example, Google Analytics) subject to their own privacy policies.

22. Data Retention

SiloCRM retains account data for as long as your account is active and for a reasonable period thereafter for backup, audit, and business continuity purposes. Platform Data (as defined in Section 6.2) may be retained indefinitely in accordance with SiloCRM's rights thereunder. You may request deletion of Your Content (Section 6.4) at any time subject to legal retention obligations. We retain data as long as required to comply with applicable law, resolve disputes, and enforce agreements.

Google user data is excluded from the indefinite-retention provision above. Google user data is not Platform Data (Terms Section 6.2), is retained only as long as needed to provide the feature you connected it to, and is deleted when you disconnect the integration or on request to legal@silocrm.com. See Section 19.1, which controls.

23. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: Request disclosure of categories and specific pieces of personal information collected, used, disclosed, or sold
Right to Delete: Request deletion of your personal information, subject to legal exceptions
Right to Correct: Request correction of inaccurate personal information
Right to Opt-Out: Opt out of the "sale" or "sharing" of your personal information (as broadly defined under California law, which may include advertising-related activities)
Right to Limit Use of Sensitive Personal Information
Right to Non-Discrimination: We will not discriminate against you for exercising these rights

To exercise these rights, submit a verifiable request to: legal@silocrm.com or call (832) 769-8855. We will respond within 45 days (extendable by an additional 45 days with notice). We may verify your identity before processing requests.

Note: These rights apply to SiloCRM's own data collection practices. If you are a lead or contact within a SiloCRM customer's account (that is, a contact in someone else's CRM), you must direct your privacy requests to that SiloCRM customer, not to SiloCRM directly.

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws, you may have additional rights including: right of access, rectification, erasure, restriction of processing, data portability, objection to processing, and rights related to automated decision-making. To exercise these rights, contact us at legal@silocrm.com.

SiloCRM's primary processing is in the United States. For transfers of personal data from the EEA or UK, SiloCRM relies on appropriate safeguards as required by GDPR and UK GDPR, which may include Standard Contractual Clauses. Contact us for more information on our transfer mechanisms.

25. Children's Privacy

The Service is not directed to individuals under 18 years of age. SiloCRM does not knowingly collect personal information from minors. If you become aware that a minor has provided personal information to us, please contact legal@silocrm.com and we will take steps to delete such information.

26. Security

SiloCRM employs commercially reasonable administrative, technical, and physical safeguards designed to protect data against unauthorized access, alteration, disclosure, and destruction. These include encryption in transit (TLS) and at rest, access controls, multi-factor authentication support, intrusion detection, and security monitoring. Despite these measures, no security system is impenetrable, and we cannot guarantee absolute security. You use the Service at your own risk and should implement your own security measures to protect your data.

27. Changes to This Privacy Policy

SiloCRM may update this Privacy Policy at any time. If we make material changes, we will notify you by email or by posting a prominent notice within the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated Privacy Policy.

Section 19.1 (Google User Data and Limited Use), and every Google user data carve-out elsewhere in this Policy, took effect immediately on posting and are not subject to the 30-day notice period above. Those provisions restrict what SiloCRM may do with your data rather than expand it, so no notice period applies. Any future change to them that would broaden SiloCRM's use of Google user data would require your consent.

28. Contact Information

For questions, concerns, or requests related to these Terms or this Privacy Policy, contact us at:

SiloCRM
8410 Hwy 90 Alt Suite 140
Sugar Land, TX 77478
United States
Email: legal@silocrm.com
Phone: (832) 769-8855

NOTICE: These Terms of Service and Privacy Policy were last reviewed August 25, 2026. SiloCRM recommends periodic review by qualified legal counsel to ensure continued compliance with evolving federal, state, and international laws.

For complete service terms, see Terms of Service.