Legal

Privacy Policy

Your privacy matters to us. This policy explains how Silas collects, uses, and protects your information.

Last Updated: January 19, 2026

1. Introduction

Silas ("we," "us," or "our") operates the website https://staysilas.app (the "Site"). We provide hotel booking suite software solutions to hotel owners and managers (our "Services").

This Privacy Policy describes how we collect, use, disclose, and protect information that applies to our Site and Services, and your choices regarding our use of your information. By accessing or using our Site, you acknowledge that you have read and understood this Privacy Policy.

We are committed to protecting your privacy and ensuring transparency in how we handle your data. If you have any questions or concerns, please contact us at team@staysilas.app.

2. Information We Collect

2.1 Information You Provide Directly

When you use our contact form to inquire about our Services, we collect:

  • Name (required) - To identify and address you properly
  • Email address (required) - To respond to your inquiry and communicate with you
  • Hotel/Property name (required) - To understand your business context
  • Hotel website URL (optional) - To better understand your current online presence
  • Message (optional) - Any additional information you choose to share

2.2 Information Collected Automatically

When you visit our Site, we automatically collect certain information through cookies and similar technologies:

  • IP address - For security, fraud prevention, and general analytics
  • Device information - Including device type, operating system, and browser type
  • Usage data - Pages visited, time spent on pages, navigation patterns, and interaction events
  • Session recordings - Visual recordings of user sessions with text input fields masked for privacy
  • Timestamps - Date and time of your visits and form submissions

2.3 Cookies and Tracking Technologies

We use cookies and localStorage to enhance your experience and gather analytics data. For detailed information about our use of cookies, please see Section 6 (Cookies and Tracking) below.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Responding to inquiries - To address your questions and provide information about our Services
  • Business development - To follow up on leads and potential business relationships
  • Service improvement - To analyze how visitors use our Site and improve user experience
  • Product optimization - To understand user needs and enhance our offerings
  • Security and fraud prevention - To protect against spam, abuse, and unauthorized access
  • Legal compliance - To meet our legal obligations and enforce our terms

3.1 Legal Basis for Processing (GDPR)

For visitors from the European Economic Area (EEA), we process your personal data based on the following legal grounds:

  • Consent - When you voluntarily submit information through our contact form
  • Legitimate interests - For analytics and improving our Site, where our interests do not override your fundamental rights
  • Legal obligation - When required by applicable law

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with the following categories of third parties:

4.1 Service Providers

We work with trusted third-party service providers who assist us in operating our Site and Services:

  • PostHog (US data center) - Analytics and session recording services. PostHog helps us understand how visitors interact with our Site. Session recordings have text input masking enabled to protect sensitive information. Privacy policy: posthog.com/privacy
  • Resend - Email delivery service for sending contact form submissions to our team. Privacy policy: resend.com/legal/privacy-policy
  • Vercel - Website hosting and database services (US-East-1 region). Privacy policy: vercel.com/legal/privacy-policy
  • Google Fonts - Typography services (Montserrat and Cormorant Garamond fonts). Privacy policy: policies.google.com/privacy

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Site of any change in ownership or uses of your personal information.

5. Data Storage and Security

5.1 Data Storage

Your data is stored securely using the following infrastructure:

  • Contact form submissions - Stored in Vercel Postgres database hosted on AWS US-East-1 region
  • Analytics data - Stored in PostHog's US data center

5.2 Security Measures

We implement appropriate technical and organizational measures to protect your personal information:

  • HTTPS encryption - All data transmitted between your browser and our servers is encrypted
  • Bot protection - Honeypot fields and submission timing validation to prevent automated spam
  • Session recording privacy - Text input fields are masked in session recordings to protect sensitive data
  • Access controls - Limited access to personal data on a need-to-know basis

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. We use cookies and similar technologies (localStorage) to enhance your experience and collect analytics data.

6.2 Types of Cookies We Use

  • Analytics cookies (PostHog) - These cookies help us understand how visitors interact with our Site by collecting information about pages visited, time spent on pages, and user behavior. This data helps us improve our Site and Services.
  • Session cookies - Used to maintain session state and track unique visitors across pages.

6.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can:

  • View what cookies are stored on your device and delete them individually
  • Block third-party cookies
  • Block cookies from specific sites
  • Block all cookies
  • Delete all cookies when you close your browser

Please note that blocking or deleting cookies may impact your experience on our Site.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected:

  • Contact form submissions - Retained for the duration of our business relationship and as required for legal or business purposes
  • Analytics data - Retained according to PostHog's data retention policies

When your data is no longer needed, we will securely delete or anonymize it.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information.

8.1 Rights for All Users

  • Access - Request a copy of the personal information we hold about you
  • Correction - Request correction of inaccurate personal information
  • Deletion - Request deletion of your personal information
  • Opt-out - Opt out of marketing communications

8.2 European Economic Area (GDPR) Rights

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):

  • Data portability - Receive your personal data in a structured, commonly used format
  • Restriction - Request restriction of processing in certain circumstances
  • Objection - Object to processing based on legitimate interests
  • Withdraw consent - Withdraw consent at any time where processing is based on consent
  • Lodge a complaint - File a complaint with your local data protection authority

8.3 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to know - Request disclosure of personal information we have collected about you in the past 12 months
  • Right to delete - Request deletion of your personal information
  • Right to correct - Request correction of inaccurate personal information
  • Right to opt-out of sale/sharing - We do not sell or share your personal information for cross-context behavioral advertising
  • Right to non-discrimination - We will not discriminate against you for exercising your privacy rights

Categories of Personal Information Collected: Identifiers (name, email, IP address), commercial information (business name, website), and internet activity information (browsing behavior, device information).

Disclosure of Personal Information for Business Purposes: We disclose identifiers and internet activity information to our service providers (PostHog, Resend, Vercel) for the business purposes described in this Privacy Policy.

8.4 Exercising Your Rights

To exercise any of these rights, please contact us at team@staysilas.app. We will respond to your request within the timeframes required by applicable law (30 days for GDPR, 45 days for CCPA/CPRA). We may need to verify your identity before processing your request.

9. International Data Transfers

Silas is based in the United States, and your information is stored and processed in the United States. If you are accessing our Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

By using our Site, you consent to your information being transferred to our facilities and to the facilities of those third parties with whom we share it as described in this Privacy Policy. We take appropriate measures to ensure that your personal data receives an adequate level of protection in the jurisdictions in which we process it.

10. Children's Privacy

Our Site and Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at team@staysilas.app, and we will take steps to delete such information.

11. Do Not Track Signals

Some browsers have a "Do Not Track" (DNT) feature that sends a signal to websites requesting that they not track your browsing activity. Currently, there is no uniform standard for how to respond to DNT signals, and our Site does not currently respond to DNT browser signals or mechanisms. However, you can manage cookies and opt out of certain tracking as described in Section 6.

12. Third-Party Links

Our Site may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Notify you via email (if we have your email address) for significant changes
  • Post a notice on our Site

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to all inquiries within a reasonable timeframe. For privacy-related requests, we aim to respond within 30 days.