Silkworm Privacy Notice

Effective date: 26/01/2026
Version: 1.0

This Privacy Notice explains how Silkworm Systems Ltd (“Silkworm”, “we”, “us”) processes personal data when you use the Silkworm platform.

This notice applies to:

• account holders and users of the Service
• visitors to our website

It does not govern how we process case materials uploaded by users on behalf of their clients. That processing is covered by our Data Processing Agreement.

1. Who We Are

Silkworm is operated by:

support@usesilkworm.com

We are the data controller for the personal data described in this notice.

2. Personal Data We Process

2.1 Account and contact data

• name
• email address
• professional affiliation
• login credentials (hashed)

2.2 Usage and technical data

• log data
• device and browser information
• IP address
• timestamps and feature usage

2.3 Communications

• support requests
• feedback
• correspondence with us

We do not intentionally collect special category data as a controller.

3. Case Materials and Client Data

When you upload documents containing personal data relating to cases, clients, or third parties:

• you are the data controller
• Silkworm acts as a data processor

That processing is governed by the Data Processing Agreement, not this Privacy Notice.

We do not use uploaded case materials to train models or for cross-customer analysis.

4. How We Use Personal Data

We process personal data to:

• provide and operate the Service
• manage accounts and authentication
• respond to support requests
• monitor security and prevent misuse
• comply with legal obligations

We do not use personal data for automated decision-making.

5. Lawful Bases for Processing

Our lawful bases include:

• performance of a contract
• legitimate interests (operating and securing the Service)
• legal obligations

Where consent is required (e.g. optional communications), it will be obtained separately.

6. Sharing Personal Data

We may share personal data with:

• cloud hosting providers
• security and monitoring providers
• professional advisers where required

All such providers are subject to confidentiality and data protection obligations.

We do not sell personal data.

7. International Transfers

Personal data is hosted and processed in the European Economic Area.

If international transfers occur in future, appropriate safeguards will be applied.

8. Data Retention

We retain personal data only for as long as necessary to:

• provide the Service
• comply with legal obligations

Account data is deleted or anonymised following account closure, subject to legal retention requirements.

9. Security

We implement appropriate technical and organisational measures to protect personal data, including:

• access controls
• encryption
• monitoring and incident response

No system is completely secure.

10. Your Rights

You have rights under data protection law, including the right to:

• access your personal data
• request correction or deletion
• object to certain processing
• lodge a complaint with the ICO

Requests can be made by contacting us at support@usesilkworm.com

11. Changes to This Notice

We may update this Privacy Notice from time to time.

Material changes will be communicated where required.

12. Contact

For privacy-related questions, contact: support@usesilkworm.com