Privacy Notice

Sillage is operated by [Your Legal Business Name] ("we", "us"). We are the data controller for the personal data described in this notice. Contact us about privacy at [contact email address].

• Account data. Your email address and authentication credentials.
• Collection data. The perfumes you add (name, brand, notes), including photos you take of your bottles.
• Journal data. Your notes, moods, ratings and wear logs.
• Location. Your coarse location (city level), if you allow it, to tailor daily picks to your weather. This is only used when you grant permission and is not stored with your identity beyond the session.
• Usage and device data. Features used, error and performance logs, IP address and device identifiers needed to operate and secure the Service.
• Support messages. Anything you send us when contacting support.

Payment card details are collected directly by Paddle.com as Merchant of Record and are not stored by us.

• To provide the Service — accounts, your collection, daily picks, journal, insights, and purchase suggestions. Legal basis: performance of our contract with you.
• Location-based weather — only with your consent, which you can withdraw at any time.
• Security and fraud prevention — protecting accounts and preventing abuse. Legal basis: our legitimate interests.
• Product improvement — understanding which features are used and fixing errors. Legal basis: our legitimate interests.
• Customer support — answering your messages. Legal basis: performance of contract or legitimate interests.
• Marketing — only if you opt in, and you can opt out at any time. Legal basis: consent.
• Legal obligations — keeping required records and responding to lawful requests. Legal basis: legal obligation.

• Service providers (subprocessors). Hosting and database providers, authentication, AI providers that power perfume recognition and recommendations, web extraction used to fetch public fragrance details and images, analytics and error-tracking tooling, and email delivery.
• Paddle.com. As our Merchant of Record, Paddle processes payments, manages subscriptions, handles tax compliance and invoicing, and deals with refunds and payment-related customer service.
• Professional advisers. Lawyers, accountants and auditors, under confidentiality.
• Authorities. Where required by law or to protect rights and safety.

We do not sell your personal data.

Your data may be processed outside your country, including outside the UK and EEA. Where that happens, we rely on safeguards such as the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision for the destination country.

We keep account, collection and journal data for as long as your account is active. If you permanently delete your account from the Account page, we remove your saved photos, collection, journal, wishlist, Discover history, subscription records and sign-in account. We retain only an account ID and deletion date to prevent delayed payment events from recreating deleted data. Paddle may retain legally required billing records, and backup copies expire under our providers' retention schedules. Support messages and security logs are kept for up to [e.g. 12] months.

Depending on where you live, you have the right to access your data, correct it, delete it, restrict or object to its processing, receive a portable copy, and withdraw consent where we rely on consent. Where GDPR applies you also have the right to complain to your local supervisory authority. We respond to requests within one month.

You can download your saved data and photos or permanently delete your account on the Account page. For other privacy requests, contact us at [contact email address].

We use appropriate technical and organisational measures, including encryption in transit and at rest, access controls, and least-privilege access to data. No system is completely secure, so please also protect your account credentials.

We use only essential cookies (and equivalent local storage) to keep you signed in and secure the Service. We do not currently use advertising or third-party analytics cookies. If that changes, we will update this notice and ask for your consent where required. You can clear cookies and local storage in your browser settings at any time; signing out removes your session.

We may update this notice as the Service evolves. We will post the updated version on this page with a new "last updated" date.