Privacy Policy

Welcome to Siloss Technology LLC ("Siloss," "we," "our," or "us").

Siloss is a cloud-based financial management and business operations platform that provides accounting, bookkeeping, invoicing, expense management, financial reporting, banking connectivity, client management, document processing, e-signature, mileage tracking, AI-assisted features, subscription management, and related services.

We are committed to protecting the privacy, confidentiality, and security of information entrusted to us.

This Privacy Policy explains how Siloss collects, uses, stores, discloses, and protects personal information when you access or use the Siloss website, applications, platform, integrations, portals, and related services (collectively, the "Services").

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy applies to information collected through:

• Siloss web applications and websites;
• Siloss mobile applications, where applicable;
• Siloss accounting, bookkeeping, invoicing, expense, and reporting features;
• Banking and financial-data connectivity features;
• Client portals and related communication features;
• E-signature and document-processing features;
• Mileage and business activity tracking features;
• AI-assisted features, including ELLA where applicable;
• Subscription and billing features;
• Siloss integrations and APIs; and
• Customer support and other services provided by Siloss.

This Privacy Policy does not apply to third-party websites, applications, financial institutions, or services that are not controlled by Siloss. Those services have their own privacy practices and policies.

For purposes of this Privacy Policy:

• Personal Information: These are the information that identifies, relates to, or can reasonably be associated with an individual.
• Customer Data: means information submitted to or stored in Siloss by a customer or authorized user in connection with use of the Services.
• Financial Data: means financial and accounting information processed through the Services, including transactions, invoices, bills, expenses, account balances, journals, ledgers, and financial reports.
• User: means an individual authorized to access or use the Siloss Services.
• Processing: means activities performed on information, including collection, storage, use, organization, retrieval, disclosure, or deletion.
• Service Provider: means a third-party organization that processes information on behalf of Siloss to provide or support the Services.

Depending on how you use Siloss, we may collect the following categories of information.

4.1 Account Information

This may include:

• Full name;
• Email address;
• Phone number;
• Login and authentication information;
• User role and permissions;
• Organization or workspace membership; and
• Profile information.

4.2 Business and Organization Information

This may include:

• Business or organization name;
• Business address;
• Industry;
• Tax or business identifiers;
• Business registration information;
• Accounting preferences;
• Currency and fiscal-year settings; and
• Other information necessary to configure a Siloss workspace.

4.3 Customer, Client, and Vendor Information

Users may enter information relating to people and organizations they work with, including:

• Names;
• Contact information;
• Email addresses;
• Addresses;
• Billing information;
• Vendor information;
• Customer or client records; and
• Other information necessary to manage business relationships.

4.4 Financial and Accounting Information

Siloss may process financial and accounting information entered, generated, or imported through the Services, including:

• Invoices;
• Bills;
• Expenses;
• Payments;
• Transactions;
• Journal entries;
• General ledger records;
• Trial balances;
• Financial reports;
• Fixed asset records;
• Reconciliation information;
• Budgets and financial comparisons; and
• Other accounting records.

4.5 Banking Information

When you connect a financial account to Siloss, we may receive information such as:

• Financial institution name;
• Account name;
• Account identifiers;
• Account type;
• Transaction information;
• Transaction descriptions;
• Account balances;
• Transaction categories; and
• Other information made available through the authorized connection.

Siloss does not intentionally collect or store your online banking password, security PIN, or other financial-institution login credentials.

4.6 Plaid and Financial Connectivity

Siloss may use Plaid Technologies, Inc. and other financial connectivity providers to facilitate authorized connections between Siloss and financial institutions.

When you connect an account through a financial connectivity provider:

• You authorize the connection;
• Authentication is handled through the applicable connectivity provider and/or financial institution;
• Permitted financial information is made available to Siloss;
• Siloss uses that information to provide requested Services; and
• Account and transaction information may be refreshed while the connection remains active.

The information made available to Siloss depends on the permissions granted by you, the connected financial institution, and the capabilities of the connectivity provider. Users should also review the applicable third-party provider's privacy policy.

4.7 Documents and OCR Data

If you upload documents, receipts, invoices, statements, or other files to Siloss, we may process the information contained in those documents to provide document management, OCR, extraction, accounting, reconciliation, and related Services.

4.8 AI and Automated Features

Siloss may provide AI-assisted features that help users analyze information, categorize transactions, extract information from documents, generate suggestions, or perform other supported tasks.

AI features may process information available within the relevant Siloss workspace to provide the requested functionality.

AI-generated suggestions or outputs may not always be accurate and should be reviewed by the user before being relied upon for financial, accounting, legal, tax, or business decisions.

Siloss does not intentionally use Customer Data to train third-party general-purpose AI models without appropriate authorization.

4.9 E-Signature Information

Where users use Siloss e-signature features, Siloss may process information associated with signing activities, including:

• Signer name;
• Email address;
• Signature information;
• Signing status;
• Timestamps;
• Documents submitted for signature; and
• Audit information associated with the signing process.

4.10 Mileage and Business Activity Information

Where applicable, Siloss may collect information necessary to provide mileage or business activity tracking features, including mileage records, dates, locations, trip information, and related business classifications.

4.11 Device and Usage Information

We may automatically collect technical and usage information such as:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Session information;
• Log information;
• Usage activity;
• Diagnostic information;
• Authentication activity; and
• Security-related information.

We may use cookies and similar technologies to operate, secure, analyze, and improve the Services. Additional information may be provided through applicable cookie notices or settings.

4.12 Support and Communications

When you contact Siloss or communicate with our support team, we may collect information contained in those communications, including support requests, attachments, and related account information.

Siloss may use information to:

• Create and manage accounts and workspaces;
• Provide accounting and financial management Services;
• Process invoices, expenses, payments, and transactions;
• Generate financial and management reports;
• Maintain ledgers and accounting records;
• Connect and synchronize authorized financial accounts;
• Facilitate reconciliation and financial data processing;
• Process uploaded documents and extract information;
• Provide e-signature functionality;
• Provide mileage and business activity features;
• Provide AI-assisted functionality;
• Process subscriptions and billing;
• Authenticate users and manage permissions;
• Provide customer support;
• Communicate with users about their accounts and Services;
• Detect, investigate, and prevent fraud or security threats;
• Monitor and improve platform performance and reliability;
• Maintain audit and security logs;
• Develop and improve the Services;
• Comply with legal and regulatory obligations; and
• Protect the rights, property, safety, and security of Siloss, its users, and others.

Where applicable law requires a legal basis for processing personal information, Siloss may rely on one or more of the following:

Contractual Necessity

We may process information when necessary to provide the Services requested under our agreement with you.

Consent

We may process information where you have provided consent, including for certain optional features or communications.

Legitimate Interests

We may process information where necessary for legitimate business interests, such as:

• Securing the Services;
• Preventing fraud;
• Maintaining and improving platform performance;
• Protecting users and systems;
• Understanding how the Services are used; and
• Supporting and improving our business operations.

Where required, we balance these interests against applicable privacy rights.

Legal Obligations

We may process information when necessary to comply with applicable laws, regulations, legal processes, court orders, or governmental requests.

Siloss does not sell personal information to data brokers.

We may share information with the following categories of recipients where necessary to provide or support the Services:

Service Providers

We may use third-party providers for services such as:

• Cloud hosting;
• Infrastructure;
• Data storage;
• Security;
• Communications;
• Payment processing;
• Document processing;
• Analytics;
• Customer support; and
• Other technology services.

Service providers are expected to process information only as necessary to provide their services to Siloss and in accordance with applicable contractual and legal requirements.

Financial Connectivity Providers

We may share or receive information through providers such as Plaid when you authorize a financial account connection.

Professional Advisors

We may disclose information to professional advisors such as legal counsel, auditors, accountants, consultants, or insurers when reasonably necessary for legitimate business purposes.

Legal and Government Authorities

We may disclose information when required or permitted by applicable law, legal process, court order, regulatory requirement, or where necessary to protect rights, safety, or security.

Business Transactions

Information may be transferred as part of a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to applicable privacy requirements.

Siloss uses reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, or destruction.

These safeguards may include:

• Encryption of information in transit and at rest;
• Access controls and authentication mechanisms;
• Role-based access restrictions;
• Security monitoring;
• Audit logging;
• Secure infrastructure;
• Backup and recovery controls;
• Vulnerability and security management; and
• Incident response procedures.

No method of transmission, storage, or electronic processing can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their account credentials and should promptly notify Siloss if they believe their account has been compromised.

Siloss retains information for as long as reasonably necessary to:

• Provide the Services;
• Maintain business and accounting records;
• Comply with legal, tax, and regulatory obligations;
• Resolve disputes;
• Enforce agreements;
• Detect and investigate security incidents or fraud; and
• Maintain necessary operational records.

Retention periods may depend on:

• The type and sensitivity of the information;
• The nature and duration of the customer relationship;
• Legal and regulatory requirements;
• Accounting and tax obligations;
• Security and fraud-prevention requirements;
• Dispute or litigation requirements; and
• Legitimate business needs.

When information is no longer required, Siloss will take reasonable steps to delete, anonymize, or otherwise securely dispose of it, subject to applicable legal and operational requirements.

Depending on your location and applicable law, you may have rights regarding your personal information.

These may include:

• Access: Request information about personal information we process about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of personal information, subject to applicable legal exceptions.
• Data Portability: Request certain information in a structured and commonly used format.
• Restriction: Request that certain processing activities be restricted.
• Objection: Object to certain processing activities where applicable.
• Withdraw Consent: Withdraw consent where processing is based on consent.
• Opt Out of Certain Uses: Where applicable, exercise rights relating to targeted advertising, sale, or sharing of personal information.

Additional rights may apply depending on your jurisdiction, including rights available under California privacy laws and other applicable state, federal, provincial, or national privacy laws. Siloss will not discriminate against users for exercising applicable privacy rights. To exercise a privacy right, contact us using the information provided in Section 15. We may need to verify your identity before completing certain requests.

Siloss may process and store information in countries other than the country in which you reside.

Where applicable law requires safeguards for international transfers, Siloss will take reasonable steps to implement appropriate mechanisms and protections for such transfers.

The Services may integrate with or contain links to third-party websites, applications, financial institutions, or services.

Examples may include financial connectivity providers, payment providers, cloud infrastructure providers, and other integrations selected or authorized by users.

Siloss does not control the privacy practices of third parties. Your use of a third-party service is subject to that provider's applicable terms and privacy policy.

Siloss is intended for business and professional use and is not directed to children under the age of 18.

Siloss does not knowingly collect personal information directly from children under 18. If you believe that a child has provided personal information to Siloss, please contact us so that we can investigate and take appropriate action.

Siloss maintains procedures designed to identify, investigate, contain, and respond to security incidents.

If a security incident results in unauthorized access to personal information and notification is required under applicable law, Siloss will provide notice to affected individuals and/or relevant authorities as required by law.

Notification requirements and timelines may vary depending on the applicable jurisdiction and circumstances of the incident.

For privacy-related questions, requests, or concerns, contact:

Siloss Technology LLC

Privacy / Data Protection Team

Email: [email protected]

When submitting a privacy request, please provide sufficient information for us to understand and process your request. We may request additional information to verify your identity where required or appropriate.

If you are located in a jurisdiction that provides a right to lodge a complaint with a privacy or data protection regulator, you may also contact the relevant supervisory authority.

Siloss may update this Privacy Policy from time to time to reflect changes to our Services, data-processing practices, legal requirements, or business operations.

When we make material changes, we may provide notice through appropriate channels, which may include:

• A notice within the Siloss platform;
• Email;
• Website notices; or
• Other appropriate communication methods.

The "Last Updated" date at the beginning of this Privacy Policy indicates when it was most recently revised.

Siloss is committed to responsible handling of personal information through principles including:

• Data minimization;
• Purpose limitation;
• Appropriate access controls;
• Confidentiality;
• Security;
• Transparency;
• Accountability; and
• Responsible data stewardship.

We continually review our data practices and security controls as our Services evolve. Effective Date: January 1, 2026. Last Updated: January 1, 2026. Siloss Technology LLC.