Privacy policy

Last updated: 6 September 2026

1. Data controller

The data controller is the publisher of SILA, identified in the legal notice.

• Privacy contact: contact@silasuite.com
• Data Protection Officer (DPO), where one is appointed: [to be completed]
• Representative in the European Union (GDPR article 27), where the service is offered to people located in the EU: [to be completed]

2. Data we process

• Account data: name, email address, organization, role.
• Data entered into the service: contacts, opportunities, documents, invoices, tickets… — entered by the customer, who remains responsible for it.
• Technical data: connection information, logs, and cookies strictly necessary for operation.

3. Purposes

Data is processed to: provide and secure the service, manage accounts and subscriptions, deliver support, improve the product, and comply with legal and tax obligations.

4. Legal basis

Processing is based on the performance of the contract (provision of the service), legitimate interest (security and improvement), compliance with legal obligations, and consent where it is required.

5. Hosting & sub-processors

SILA relies on technical providers acting as processors:

• Supabase — database, authentication and storage.
• Cloudflare — delivery and protection of the site/application.
• Resend — transactional email delivery.

These providers access data only as far as necessary to deliver their services, and on the publisher's instructions.

Transfers outside the country of establishment

As these providers are established outside Algeria and, for some, outside the European Union, delivering the service involves transferring data to those countries.

• For people located in the European Union, these transfers are covered by the safeguards of GDPR chapter V — the European Commission's standard contractual clauses and, where applicable, the recipient's certification under the Data Privacy Framework. A copy of the applicable safeguards may be requested at contact@silasuite.com.
• For processing governed by Algerian law, transferring personal data outside Algeria is subject to authorisation by the National Authority for the Protection of Personal Data, under law no. 18-07. Status: [to be completed].

6. Isolation & security

Each organization is partitioned: one customer's data is not accessible to another (multi-tenant architecture with row-level security rules). Exchanges are encrypted in transit (HTTPS). Role-based permissions, per-record configurable visibility and an audit log govern access to data.

7. Retention period

Data is kept only as long as necessary for the purposes pursued:

• Account data and data entered into the service: for the whole duration of the contractual relationship, then deleted or anonymised within 90 days of the end of the contract, unless a legal retention duty applies.
• Prospects and demo requests: 3 years from the last contact.
• Accounting records and invoices: 10 years, under accounting and tax obligations.
• Connection and security logs: 12 months.
• Information stored on your device (preferences, campaign attribution): 13 months at most.

Customers can also configure retention periods of their own inside the application.

8. Your rights

Depending on the regulation that applies to you, you have the following rights over your personal data:

• Access, rectification and erasure of your data;
• Restriction of processing and objection to it, including to any direct marketing;
• Portability of the data you provided to us;
• Withdrawal of your consent at any time where processing relies on it, without affecting the lawfulness of processing already carried out;
• Setting directives as to what happens to your data after your death.

The application provides export and erasure functions for an individual's data on request. To exercise your rights: contact@silasuite.com. You will receive a reply within one month, extendable by two months for complex requests.

Complaints. If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the competent supervisory authority: in Algeria, the National Authority for the Protection of Personal Data (ANPDP); in the European Union, the authority of your country of residence — in France, the Commission nationale de l'informatique et des libertés (CNIL), www.cnil.fr.

9. Cookies

The site uses no advertising cookies, no third-party trackers and no analytics tool. Typefaces are hosted on our own domain: no request is made to a third-party service when a page loads.

Only the following information is stored on your device:

• Display preference (light or dark theme) — saved only when you use the switch;
• Campaign parameters (utm_* present in the address) — kept for the duration of your visit, for the sole purpose of linking any request you make to its origin;
• Application session — on app.silasuite.com only, required to keep you signed in.

None of this information is used for advertising or profiling, nor shared with a third party. The chat assistant is loaded only when you open it.

10. Changes

This policy may be updated. Substantial changes are flagged; the last-updated date appears at the top of the page.

Contact

For any question regarding this policy: contact@silasuite.com.