Privacy Policy

Introduction

SilkRoute AI, Inc. ("SilkRoute," "we," "us," or "our") is committed to processing personal data in a lawful, fair, and transparent manner. This privacy policy explains how we collect, use, store, protect, and share personal data when you use our website and our artificial intelligence software products for supply chain management (the "Services").

SilkRoute acts as a Data Controller for personal data we collect directly and as a Data Processor for customer-submitted data processed within our platform.

Questions or concerns? Contact us at privacy@getpraxis.ai.

1. Personal Data We Collect

Information You Provide

We collect personal data you voluntarily provide, including:

• Name, work email address, job title, and company affiliation
• Account credentials and authentication information
• Content submitted for AI processing
• Payment information (handled by third-party processors and never stored by SilkRoute)
• Communications you send to us

Information Collected Automatically

When you use our Services, we automatically collect:

• IP address, browser type, device characteristics, and operating system
• Usage logs, timestamps, and referring URLs
• Cookie data used for authentication and security
• Country and general location information

Information We Do Not Collect

We do not process sensitive personal information. We do not receive personal data from third parties.

2. Legal Basis for Processing

We process personal data based on:

• Contractual Necessity: To perform our obligations and provide the Services
• Legitimate Interest: For platform security, fraud prevention, analytics, support operations, and business communications
• Consent: For optional marketing communications or non-essential cookies
• Legal Obligation: When required to comply with applicable laws

3. How We Use Personal Data

We use personal data to:

• Operate, maintain, and improve the Services
• Facilitate account creation and authentication
• Provide customer support and respond to inquiries
• Secure and monitor platform activity
• Develop new features and functionality
• Prevent fraud and misuse
• Send administrative and service-related communications
• Communicate product updates and, with consent, marketing materials
• Comply with applicable laws

SilkRoute does not sell personal data. We do not use customer-submitted content to train public or shared machine learning models.

4. Sharing and Disclosure

We share personal data only under controlled conditions:

• Service Providers: With verified vendors who perform services on our behalf (cloud computing, data analytics, payment processing, communication tools, website hosting), bound by Data Processing Agreements
• Legal Requirements: To comply with legal obligations, court orders, or government requests
• Safety and Security: To protect the rights, safety, or property of SilkRoute, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users
• At Your Direction: When you instruct us to share your data

A list of sub-processors is available upon request.

5. International Data Transfers

Your personal data may be transferred to and processed in the United States or other countries where our service providers operate. For transfers outside the European Economic Area, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

6. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or to meet contractual and legal requirements. Retention periods vary by data type:

• Account Data: Retained while your account is active and for a reasonable period thereafter
• Usage Data: Retained for analytics purposes, typically 24 months
• Customer Content: Retained per your service agreement and deleted upon request or account termination

You may request deletion unless retention is required by law.

7. Data Security

We maintain technical and organizational safeguards designed to protect personal data, including:

• Encryption in transit and at rest
• Access controls and least-privilege permissions
• Monitoring and logging
• Incident response procedures
• Regular security reviews and improvements

No electronic transmission over the Internet can be guaranteed 100% secure, but we take reasonable measures to protect your data.

8. Cookies and Tracking Technologies

We use essential cookies required for authentication and secure operation of the Services. Optional cookies for analytics or personalization are only used with your consent.

Most web browsers include a Do-Not-Track ("DNT") feature. We do not currently respond to DNT browser signals as no uniform technology standard has been finalized.

9. Your Privacy Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your personal data
• Restrict processing of your data
• Object to processing based on legitimate interests
• Data Portability: Receive your data in a structured, machine-readable format
• Withdraw Consent at any time for processing based on consent
• Lodge a Complaint with your Data Protection Authority

To exercise these rights: Contact us at privacy@getpraxis.ai.

Opting out of marketing: Unsubscribe via the link in any marketing email or contact us directly.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Categories and specific pieces of personal information collected
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: We do not sell or share personal information for cross-context behavioral advertising
• Non-Discrimination: We will not discriminate against you for exercising your rights

To submit a request, contact privacy@getpraxis.ai.

11. Automated Decision-Making

We do not perform automated decision-making that produces legal or similarly significant effects. Our AI features assist users by generating insights based on content provided, but you always retain control over decisions and outputs.

12. Children's Data

SilkRoute does not knowingly collect or process personal data from children under 18. The Services are intended exclusively for professional use by individuals acting on behalf of their employer or organization. If children's data is submitted in error, we will delete it promptly.

13. Changes to This Privacy Policy

We may update this privacy policy to reflect product changes or legal requirements. When we make material changes, we will revise the "Last Updated" date and provide notice where required by law.

14. Contact Us

For questions about this privacy policy or our data protection practices: privacy@getpraxis.ai.