Sillage Privacy Policy

Effective date: September 10, 2026

This Privacy Policy (herein referred to as "Policy") explains how Sillage, operated by Koros Technologies (herein referred to as the "Company," "we," "us," or "our") processes Personal Data that we collect from you (herein referred to as the "Subscriber") as a Controller.

1. DEFINITIONS

(a) "Controller" means the natural or legal person, public authority, agency, or other body, which alone or jointly with others, determines the purposes and means of processing Personal Data.

(b) "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

(c) "Service(s)" means the Sillage website, dashboard, and email newsletter, which track and aggregate publicly available fragrance release information (brand names, product names, estimated release dates, pricing, and availability) for browsing and email delivery.

(i) "Subscriber" means the natural or legal person who has subscribed to the Service(s) by agreeing to the Terms.

(ii) "Terms" means the binding contract between the Company and Subscriber that governs the Subscriber's access and use of the Service(s).

2. DATA COLLECTION

The Subscriber directly provides the Company with most of the data we collect. The Company collects Personal Data from the Subscriber from the following sources:

Directly from you: your email address when you sign up for the newsletter, and (if you create an account) your email address, username, and timezone via our authentication provider, Clerk. Automatically: aggregate usage data collected via Vercel Analytics, a privacy-friendly analytics tool that does not use third-party advertising cookies.

3. PROCESSING OF PERSONAL DATA

(a) The Company processes the Subscriber's Personal Data to operate the Service — including sending the weekly release-tracking newsletter and any transactional email (via Mailgun), managing Subscriber accounts (via Clerk), and understanding aggregate usage of the Service (via Vercel Analytics) so we can improve it.

(b) The Company will generally collect Personal Data from Subscribers only where it needs to create a contract with the Subscriber, where the processing is in the Company's legitimate interests and not overridden by the Subscriber's data protection interests or fundamental rights and freedoms, or where the Company has the Subscriber's consent. In some cases, the Company may also have a legal obligation to collect Personal Data from the Subscriber.

(c) If the Company processes Personal Data with the Subscriber's consent, the Subscriber may withdraw their consent at any time — for the newsletter, by using the unsubscribe link in any email, or by emailing us at the address below.

4. SHARING OF PERSONAL DATA

(a) The Subscriber acknowledges that the Company may share the Subscriber's Personal Data with its group companies and third-party service providers to offer the Subscriber the Company's Service(s) and/or send information or updates about the Service(s).

(b) The Company does not currently process orders or payments. If paid plans are introduced in the future, this Policy will be updated to describe how payment information is handled.

(c) The Company shares Personal Data with the following third-party service providers, solely to operate the Service: Clerk (authentication and account management), Mailgun (email delivery), and Vercel (website hosting and privacy-friendly analytics). We do not sell your Personal Data, and we do not share your email list with third parties for their own marketing. These providers may process your data in the United States or other countries in which they operate; by using the Service, you acknowledge and consent to this transfer.

5. RETENTION OF PERSONAL DATA

(a) Company retains the Personal Data when an ongoing legitimate business requires retention of such Personal Data — for example, for as long as you remain subscribed or your account is active.

(b) In the absence of a need to retain Personal Data — for example, after you unsubscribe or request deletion — the Company will either delete or aggregate it within a reasonable time, except where we need to retain limited records to comply with law or resolve disputes.

6. SECURITY OF PERSONAL DATA

The Company uses appropriate technical and organizational measures to protect the Personal Data it collects and processes. These measures are designed to provide a high level of security appropriate to the risk of processing the Subscriber's Personal Data. If you are a Subscriber and have any concerns about the security of your Personal Data, please contact us immediately.

7. MODIFICATION

The Company keeps this Policy under regular review and may update this webpage at any time. This Policy may be amended at any time, and the Subscriber shall be notified only if there are material changes to this Policy.

8. CONTACT DETAILS

If you have any concerns about this Policy, please get in touch with us at:

Koros Technologies

7901 4th St N, STE 300

St. Petersburg, FL 33702, USA

Email: ivan@korostechnologies.com

By subscribing to the newsletter, creating an account, or otherwise using the Service, you agree to the collection and use of information as described in this Policy.

9. Cookies

The Service uses only the minimal cookies necessary for account sign-in (via Clerk) to function. We do not use third-party advertising cookies.

10. Your Rights and Choices

• Unsubscribe: every newsletter email includes a one-click unsubscribe link.

• Access or deletion: you can request a copy of, or the deletion of, the personal information we hold about you by emailing us at ivan@korostechnologies.com.

11. California and EU/UK Residents

California residents (CCPA) and EU/UK residents (GDPR) have additional rights over their personal information, including the right to request access, correction, or deletion, and (for CCPA) the right to opt out of the "sale" or "sharing" of personal information — we do not sell or share your information as those terms are defined by CCPA. To exercise any of these rights, contact us at the email above.

12. Children's Privacy

Sillage is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, contact us and we will delete it.