Privacy Policy

1. Introduction

SilkRoad LLC ("we," "us," or "our") operates the SilkRoad mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By downloading or using the App, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not use the App.

2. Information We Collect

Personal Information

• User's Name
• Email address
• Phone number
• Payment information (processed through Apple/Google and Square - we do not store your payment details)

User Content

• Photos and videos you upload to the App
• Job notes and descriptions
• Client information you add

Device & Usage Data

• Device type and operating system
• App usage data and analytics

3. How We Use Your Information

We use your information to:

• Provide and improve our services
• Process transactions and subscriptions
• Communicate with you about your account
• Store your data securely in our cloud infrastructure
• Enable job management, scheduling, and inventory features
• Sync your scheduled jobs to your Google Calendar (only if you choose to connect a Google account from the in-app Settings screen)

4. Data Storage & Security

• All data is stored on secure AWS servers
• Data is encrypted at rest and in transit
• We use industry-standard security measures to protect your information
• Your data belongs to you - you can delete your information at any time

5. Third-Party Services

We use third-party services to operate the App:

• AWS - Cloud hosting and storage
• Apple/Google - App distribution
• Square - Payment processing
• Google Maps - Location services
• Google Calendar API - Optional sync of your SilkRoad job schedule to your Google Calendar (see Section 6 below)

These parties have their own privacy policies governing their use of your information.

6. Google API Services and Limited Use Disclosure

SilkRoad uses Google API Services (specifically the Google Calendar API) to provide an optional feature that synchronizes the jobs and appointments you schedule inside SilkRoad with your personal Google Calendar.

What we access

When you choose to connect your Google account from the SilkRoad Settings screen, you are asked to grant the https://www.googleapis.com/auth/calendar.events scope. This permission allows SilkRoad to:

• Create calendar events on your Google Calendar that correspond to jobs you schedule in SilkRoad
• Update those events when you reschedule, complete, or cancel the related job
• Delete those events if you remove the corresponding job

SilkRoad only manages events that SilkRoad itself created. We do not read, modify, or otherwise access events created by you or other applications on your calendar.

How we store and protect this data

• OAuth access and refresh tokens are stored encrypted at rest on our AWS infrastructure and are bound to a single user account.
• Tokens are transmitted only over TLS (HTTPS).
• You can disconnect your Google account at any time from the SilkRoad Settings screen, which deletes the stored tokens.
• You can additionally revoke access at any time from your Google Account permissions page.

Limited Use

SilkRoad's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the in-app calendar sync feature.
• We do not transfer Google user data to third parties except as necessary to provide the calendar sync feature, in compliance with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.
• We do not use Google user data to serve advertisements.
• We do not allow humans to read Google user data unless we have your affirmative consent for specific events, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or for internal operations where the data has been aggregated and anonymized.
• We do not use Google user data to develop, improve, or train generalized or non-personalized AI/ML models.

7. Data Sharing

We do NOT sell, trade, or otherwise transfer your personal information to outside parties. Your data is private to your account and not shared with other users or third parties, except as necessary to provide our services.

8. Your Rights

You have the right to:

• Access your personal information
• Request correction of inaccurate data
• Request deletion of your data
• Disconnect any linked Google account and have SilkRoad delete the associated OAuth tokens

To exercise these rights, contact us using the information below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Effective Date."

10. Contact Us

If you have questions about this Privacy Policy, please contact us through the App or visit our website.

SilkRoad LLC
www.silkroadapp.com