Privacy Policy
How we collect, use and protect your personal data under EU Regulation 2016/679 (GDPR).
Last updated: 28/10/2026 — Version 2.4- Local data and integrations: projects, settings and working data are managed on the computer and in systems configured by the user. Connections to databases, Odoo, printers and external services follow the chosen configuration.
- Updates: the public feed is checked at startup and every 6 hours. The web server receives normal connection data such as IP address, date, time and request; this is not license validation. The required version and previously detected requirement are stored locally to enforce an update while offline.
- No activation: the freeware version does not require an account, commercial API key, hardware identifier, trial or SiltaTek credits.
- Settings and records: settings and records selected in Odoo are stored locally in the browser and sent to the configured Label Creator installation to generate or print labels.
- Domains and services: the extension operates on Odoo sites authorized by the user, including configured self-hosted domains. It does not send Odoo records to SiltaTek servers for licenses or trials.
- Updates: it checks the public feed at startup and every 6 hours; the web server receives normal technical connection data. A previously detected requirement is stored locally and remains effective offline until the update.
SiltaFlow is distributed through Google Play. Odoo addons are downloadable from this website. Label Creator and the Chrome plugin remain proprietary freeware.
Scope of freeware versions and commercial services
The new Label Creator and plugin freeware versions do not send hardware or browser identifiers to Firebase for activation, licensing, trials or credit accounting. Platform processing concerning accounts, payments, licenses and support continues to apply to SiltaFlow, the commercial services used and previous relationships, with their respective retention periods.
Information about purchases, plans, trials, device licenses, credits, invoices and renewals applies to SiltaFlow, other commercial services and previous purchases. These are not requirements of the new Label Creator and plugin freeware versions. Existing accounts, contracts and purchases are not deleted by this change.
This policy explains how we collect, use and protect your personal data when you use SiltaTek services: the web panel, the Android app SiltaFlow, the Windows application Label Creator and the Chrome extension Label Creator Chrome Plugin. Processing is carried out under Regulation (EU) 2016/679 (GDPR) and applicable Italian privacy law.
1. Data Controller
Martone Fabio, individual person
Via del Carrara 43, 55010 Capannori (LU), Italy
Italian tax code: MRTFBA93P01G491B
Email: info@siltatek.com
2. Personal Data Collected
2.1 Google Play subscription
The app verifies purchases locally through Google Play Billing, without sending purchase tokens to a Siltatek backend. Firebase remains in use for support, communications and notifications: a random installation identifier, FCM token and user-submitted data. Activation keys, device trials and AI-credit balances are no longer managed.
2.2 Google Play subscription
The app verifies purchases locally through Google Play Billing, without sending purchase tokens to a Siltatek backend. Firebase remains in use for support, communications and notifications: a random installation identifier, FCM token and user-submitted data. Activation keys, device trials and AI-credit balances are no longer managed.
2.3 Google Play subscription
The app verifies purchases locally through Google Play Billing, without sending purchase tokens to a Siltatek backend. Firebase remains in use for support, communications and notifications: a random installation identifier, FCM token and user-submitted data. Activation keys, device trials and AI-credit balances are no longer managed.
2.4 Google Play subscription
The app verifies purchases locally through Google Play Billing, without sending purchase tokens to a Siltatek backend. Firebase remains in use for support, communications and notifications: a random installation identifier, FCM token and user-submitted data. Activation keys, device trials and AI-credit balances are no longer managed.
3. Purposes and Legal Bases
- Service delivery: account management, licenses, trials, API keys and credits.
- Contract management: plans, subscriptions, invoices, refunds and support contracts.
- Security: fraud prevention, abuse detection, audit logs and credential protection.
- Legal obligations: tax, accounting and regulatory compliance.
- User requests: contact form, support tickets and operational communications.
4. Processors and Sub-Processors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Google Firebase | Authentication, database, functions and storage | Account data, license data, logs, device hashes | EU/Global |
| Lemon Squeezy | Merchant of Record, payments and invoices | Billing data, subscriptions, invoices | USA/EU with safeguards |
| Stripe | Payment processing | Customer IDs, subscription IDs, payment events | USA/EU with safeguards |
| Twilio SendGrid | Transactional emails | Recipient email, name and notification content | USA with safeguards |
| Aruba S.p.A. | Web and email hosting | Contact-form email data | Italy (EU) |
Data is not sold to third parties and is not used for advertising profiling.
5. AI Features and External Providers
Some application features may use third-party AI services for product descriptions, invoice OCR, field suggestions, data alignment or document analysis. No AI provider is imposed by SiltaTek. The User chooses and configures the provider, such as OpenAI, Google Gemini, Anthropic, OpenRouter, DeepSeek, Ollama or a local/remote server, and enters their own API keys.
Data sent to such services may include prompts, product data, Odoo data, extracted document text, images or attachments needed for the requested feature. These transfers depend on User configuration and remain under User responsibility, including evaluation of the chosen provider's terms and privacy policy.
6. Cookies and Tracking
The web panel uses only technical cookies necessary for Firebase Authentication and login-session management. We do not use profiling cookies, third-party tracking cookies, advertising pixels, analytics services, remarketing or advertising services. The Android app does not use advertising IDs or advertising services.
7. Data Retention
| Data category | Retention period |
|---|---|
| Account data | For the duration of the active account |
| Audit logs | 730 days, then automatic deletion |
| Notifications | 90 days, then automatic deletion |
| Demo licenses | 14 days, then automatic expiry |
| Post-deletion account data | 30-day grace period, then definitive deletion |
| Billing data | Kept by Lemon Squeezy/Stripe under tax obligations |
| Contact-form data | Only as long as needed to handle the request, maximum 12 months |
8. Transfers Outside the EU
SiltaFlow Pro subscriptions are purchased and managed through Google Play. Restore purchases in the app and manage renewal, cancellation and refund requests through Google Play, without affecting statutory rights.
9. Data Subject Rights
Under Articles 15-22 GDPR you may exercise the rights of access, rectification, erasure, restriction, portability and objection. Requests can be made from the web panel where available or by writing to info@siltatek.com. We respond within 30 days; in complex cases the period may be extended by 60 days with a reasoned notice.
10. Data Security
- HTTPS/TLS encryption in transit.
- Encryption at rest on Firebase services.
- API keys stored as irreversible SHA-256 hashes.
- Client credentials encrypted with AES-GCM and bound to the device where applicable.
- Webhook signature verification for payment events.
- Rate limits for sensitive operations.
- Audit logging of relevant operations.
- Firestore security rules based on least privilege.
11. Minors
The Service is not intended for persons under 16 years of age. We do not knowingly collect personal data from children under 16. Access occurs through Google Account, which applies its own age checks according to applicable law.
12. Communications
We do not send marketing emails, newsletters or promotional communications. We send only transactional emails, such as license expiry and renewal reminders, support ticket notifications, support-contract notifications and upgrade-related communications. Notification preferences can be managed in the panel settings.
13. Support Providers
The Service allows Users to purchase technical support from registered third-party Providers. When a support contract is entered into, the selected Provider may access the User's name, email address, contract details and support-ticket messages related to that contract. Data is shared only with the selected Provider and only for support purposes.
14. Changes to this Policy
We may update this policy. In case of substantial changes, we will inform Users through the web panel or by email. Continued use of the Service after publication of the changes constitutes acceptance of the updated policy.
15. Contacts and Supervisory Authority
For questions, to exercise your rights or to report privacy issues:
Email: info@siltatek.com
Website: www.siltatek.com
You also have the right to lodge a complaint with the competent supervisory authority: Garante per la Protezione dei Dati Personali, Piazza Venezia 11, 00187 Rome, Italy, www.garanteprivacy.it, email protocollo@gpdp.it.
16. Support, notices and surveys in SiltaFlow
The app verifies purchases locally through Google Play Billing, without sending purchase tokens to a Siltatek backend. Firebase remains in use for support, communications and notifications: a random installation identifier, FCM token and user-submitted data. Activation keys, device trials and AI-credit balances are no longer managed.
Questions about privacy?
We are available to clarify any questions about your data processing