This Privacy Policy explains how Dubsof Limited (“Dubsof”, “we”, “us”) collects and uses personal data when we act as a controller: when you visit our websites, contact us, sign up for or use Silkrun, or do business with us.
When our customers use Silkrun to process personal data about their own employees, customers or other contacts, we process that data on their behalf as a processor under our Data Processing Addendum at https://legal.dubsof.com/dpa. The customer’s own privacy notice governs that processing, and questions about it should go to the customer.
1. Who We Are
Dubsof Limited is a company incorporated in Ireland with company number 787713, with its place of business at 55 Merrion Square South, Dublin 2, Ireland. You can contact us about this Privacy Policy or your personal data at legal@dubsof.com.
2. Personal Data We Collect
| Category | Examples |
|---|---|
| Contact and business details | Name, email address, phone number, company, job title, and the content of messages you send us |
| Account data | Name, email address, login details, role and settings for your Silkrun account |
| Billing data | Billing contact details, company details, VAT number and payment records. Card and bank details are handled by our payment provider. |
| Usage data | How you use Silkrun, including features used, log data, device and browser type, and IP address |
| Website data | Pages visited, referring site, device and browser type, and IP address |
| Support data | Support requests and our correspondence with you |
3. How We Use Personal Data
| Purpose | Legal basis |
|---|---|
| Providing Silkrun, managing accounts and performing our contracts | Performance of a contract, or our legitimate interest in performing our contracts with your employer |
| Billing, accounting and tax | Performance of a contract and compliance with legal obligations |
| Responding to enquiries and providing support | Our legitimate interest in responding to people who contact us |
| Keeping our services and systems secure, and preventing fraud and abuse | Our legitimate interest in protecting our services and users |
| Understanding how Silkrun is used so we can improve it | Our legitimate interest in improving our products |
| Measuring use of our websites through analytics | Your consent |
| Sending information about our products to business contacts | Our legitimate interest in promoting our business, or your consent where the law requires it. You can opt out at any time. |
| Complying with the law and establishing, exercising or defending legal claims | Compliance with legal obligations and our legitimate interest in protecting our rights |
4. Cookies and Analytics
Our websites use cookies and similar technologies. Strictly necessary cookies keep the websites working and do not need consent. We use PostHog, hosted in the European Union, for analytics on our websites, and we set analytics cookies only if you consent. You can withdraw consent at any time through the cookie settings on our websites. Within Silkrun, we use PostHog to collect usage data about how the product is used, as described in Section 3.
5. Data from Google Accounts
Silkrun lets users connect a Google account, such as Gmail. When you connect one, Silkrun accesses only the data covered by the permissions you grant, such as email messages and their metadata, and uses it only to provide the features you have enabled, such as letting Silkrun agents read, draft and send email for you. Our customer controls that data, and we process it on the customer’s behalf under our Data Processing Addendum.
We do not sell data received from Google APIs, use it for advertising, or use it to train generalised AI models. We do not allow people to read it, except with your permission, where needed for security purposes, or where the law requires it. We share it with our subprocessors only as needed to provide the features you have enabled, and those subprocessors are bound by the same restrictions.
Silkrun’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. Who We Share Personal Data With
We do not sell personal data. We share it only with:
- service providers that process it on our behalf, including our hosting, network, analytics, email and payment providers and our AI model providers (those that process customer data are listed at https://legal.dubsof.com/subprocessors);
- professional advisers, such as lawyers and accountants;
- public authorities, where the law requires us to; and
- a buyer or successor, if Dubsof is involved in a merger, acquisition or sale of assets.
7. International Transfers
Some of our service providers process personal data outside the European Economic Area, including in the United States. Where they do, we rely on an adequacy decision of the European Commission, including the EU-US Data Privacy Framework where the recipient is certified under it, or on the European Commission’s standard contractual clauses.
8. How Long We Keep Personal Data
We keep personal data only for as long as we need it for the purposes in Section 3. Account data is kept for as long as the account is active and then deleted, unless we need it for a legal claim or a legal obligation. Billing and accounting records are kept for six years after the end of the financial year to which they relate, as Irish tax law requires.
9. Your Rights
Under data protection law you have the right to access your personal data, to have it corrected or erased, to restrict or object to our use of it, to receive it in a portable format, and to withdraw any consent you have given. You can object to direct marketing at any time. To exercise any of these rights, email legal@dubsof.com.
You also have the right to complain to the Data Protection Commission in Ireland (https://www.dataprotection.ie) or to the data protection authority where you live.
10. Security
We protect personal data with the measures described in our Information Security Addendum at https://legal.dubsof.com/security.
11. Children
Our websites and Silkrun are intended for businesses and are not directed at children.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page with a new date, and will tell you directly about any material change where we are able to.