Privacy Policy

We may collect the following categories of information:

• Account information - email address, name, and password when you create an account.
• Usage data - what is needed to run your plan, such as crawl and AI usage counted against your plan limits. The desktop app does not include analytics or automatic crash reporting.
• Device information - basic technical details such as app version and operating system, included when the app checks for updates or contacts our services. We do not collect hardware identifiers.
• Diagnostics you choose to send - if you use Send Diagnostics or contact support, the log file you attach. Passwords and access tokens are removed before the log is written.
• Payment information - processed securely by our third-party payment provider. We do not store card details.

Silkra is local-first. Crawling, content extraction, embeddings, the semantic map, and issue detection run on your machine, and your crawls are stored in a local database on that device. The desktop app does not upload your crawls to our servers. The exceptions are the AI features described under AI Processing, which send limited excerpts to generate their results, and the optional cloud sync described below.

If you enable optional cloud sync, crawl-derived data (pages, content, issues, and embeddings) is uploaded to secure cloud infrastructure scoped to your organisation, so that features you choose — such as connecting external AI tools — can access it. You can stop syncing at any time, and synced data is deleted when you delete the associated site or close your account.

Some Silkra features use third-party AI model providers. Requests are routed through our proxy, and only the content each feature needs is sent:

• Group names and site summary (automatic after a crawl while signed in) - page titles and a few short excerpts (a few hundred characters each) are sent to OpenAI to name the semantic groups on the map and summarize the site. If this step is unavailable, Silkra names groups on your device instead.
• Entity enrichment (automatic after a crawl, on plans that include it) - the short names and terms Silkra extracts are sent to TypeSafe to classify them as people, organizations, places, products, or concepts. For ambiguous terms only, a page title, heading, and short excerpt around the term are included. Full pages are not sent.
• The analysis agent (when you use it) - your messages and the crawl content the agent looks up to answer them are sent to the model provider you are using (currently Anthropic, OpenAI, or Google). Web searches the agent runs are sent to Perplexity, and voice input is transcribed by OpenAI.
• We do not use your prompts or crawl content to train AI models.
• AI providers process this data under their own terms; routing through our proxy means providers do not receive your account credentials.
• Avoid including sensitive personal information in AI prompts.

If you connect Google Search Console or Google Drive, we access only the data covered by the OAuth scopes you grant (for example, read-only Search Console metrics, or the ability to export files you create to your Drive).

Silkra's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google user data is used only to provide the user-facing features you request (displaying Search Console metrics alongside your crawl data, exporting reports to your Drive).
• We do not sell Google user data, use it for advertising, or transfer it to third parties except as necessary to provide these features.
• We do not use Google user data to train AI models.
• OAuth tokens are stored securely and you can disconnect an integration at any time from within the app, which removes our stored credentials.

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process transactions and manage your subscription.
• Send transactional emails (receipts, security alerts, product updates).
• Diagnose technical issues and improve stability.
• Comply with legal obligations.
• We do not sell your personal information to third parties.

We may share information with trusted third parties solely to operate the Service:

• Payment processors - to handle billing and subscriptions.
• AI model providers - to run the AI features described under AI Processing.
• Infrastructure providers - hosting and cloud services that store account data.
• All third parties are contractually required to protect your data and use it only for the purposes we specify.

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it.

We implement industry-standard technical and organisational measures to protect your data. All data transmitted between the desktop application, our website, and our services is encrypted in transit (TLS). Account data and synced content stored with our cloud infrastructure providers is encrypted at rest at the infrastructure level. Crawl data you keep on your own device is stored locally on that device and is protected by your operating system's user-account controls and any full-disk encryption you have enabled (such as FileVault on macOS); we do not apply additional application-level encryption to local files. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict certain processing.
• Export your data in a portable format.
• To exercise any of these rights, contact us at privacy@usesilkra.com.

Our website uses essential cookies to maintain sessions and preferences. We do not use third-party advertising cookies. You can manage cookie preferences through your browser settings.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top and, for material changes, notify you via email or an in-app notice.

If you have questions about this Privacy Policy, please contact us at privacy@usesilkra.com. Silkra is a SearchMoat LLC company.