Privacy policy

Sylk Marketing Manager is operated by Sylk Tech Ltd, a company registered in England and Wales (“we”, “us”). This policy explains what personal data we process when you use the service, why, and your rights under UK GDPR and the Data Protection Act 2018.

Who is responsible

For your account data, Sylk Tech Ltd is the controller. For data that our customers bring into the service about their own customers and contacts, the customer is the controller and we act as their processor under our terms.

What we collect

• Account data: your name, email address, organisation and role, and sign-in records.
• Data from services you connect (for example Google Analytics, Search Console, LinkedIn or your email provider), limited to the scopes you approve. Access tokens are stored encrypted and are never shown in the browser.
• Content you create or approve in the service, and an audit log of approvals and actions taken.
• Technical data needed to run the service securely, such as IP address and browser type.

Why we use it

• To provide the service you signed up for (contract).
• To keep the service secure, prevent abuse and keep records of actions (legitimate interests).
• To send service emails such as sign-in links, briefs and reports (contract).
• To meet legal obligations, such as accounting records.

AI processing

The service uses AI models (including Anthropic, OpenAI, Google and Perplexity) to analyse your business data and draft work for your approval. Nothing is published or sent on your behalf without an approval you control. We do not allow these providers to train their models on your data under our agreements with them.

Who we share it with

Our sub-processors include Supabase (database and authentication), Vercel (hosting), Resend (email), Stripe (billing) and the AI providers above. Some are based outside the UK; where they are, we rely on the UK International Data Transfer Agreement, an adequacy decision or equivalent safeguards. We do not sell personal data.

How long we keep it

We keep account data while your account is active and for up to 12 months afterwards, unless the law requires longer. You can disconnect a connected service at any time, which deletes its stored tokens.

Your rights

You can ask to access, correct, delete or export your data, and object to or restrict processing. Contact us at privacy@sylktech.co.uk. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Cookies

We use only the cookies needed to keep you signed in. We do not use advertising cookies.