Privacy Policy

Who this covers

Silada is used by Amber + Oak staff and by people at client companies who have been invited to their own account. There is no public signup.

What we collect

• Account information: your name, email address, and the client account you belong to.
• Compliance information: business details, licenses, permit numbers, filing history, and related documents that Amber + Oak keeps in order to prepare and file your returns.
• Payment details for tax filings: the payment method a client authorizes Amber + Oak to use when paying a state tax authority on their behalf.
• Basic technical logs created by our hosting providers, such as request times and error records.

Signing in with Google

If you choose "Continue with Google," we receive your name, email address, and profile picture from Google, and we use them only to identify your Silada account. We do not read your Gmail, Drive, Calendar, or contacts, and we do not request access to them.

Sending email on Amber + Oak's behalf

An Amber + Oak administrator may connect one Amber + Oak Google mailbox so Silada can send messages from the firm — portal invitations and notices that a filing has been submitted. Silada requests only permission to send mail from that mailbox. It cannot read, search, or delete messages there, and this permission is never requested from client accounts.

Silada's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

We use it to run the service you or your company hired us for: preparing and filing compliance returns, tracking license expirations, showing you your own records, and contacting you about that work. We do not sell personal information, and we do not use client data for advertising.

Who can see it

Amber + Oak staff can see the client accounts they administer. A client user can see only their own company's account — access is enforced in the database, not just hidden in the interface. We also rely on service providers who process data on our behalf: Supabase (database and authentication), Vercel (hosting), and Google (sign-in and sending email). We share information with a tax or licensing authority only as part of the filings we are engaged to make, or where the law requires it.

Security

Data is encrypted in transit, access is limited to signed-in accounts, and each client's records are separated at the database level. Documents are stored in private buckets that are not publicly reachable.

Keeping and deleting information

We keep compliance records for as long as Amber + Oak works with the client and for as long as tax and licensing rules require afterward. You can ask us to remove your individual login at any time, and an Amber + Oak administrator can do that immediately.

Your choices

You may ask what information we hold about you, correct it, or ask for your access to be removed. If you signed in with Google, you can also disconnect Silada from your Google account settings at any time.

Changes

If we change this policy we will update the date at the top of this page, and we will tell clients directly when a change is significant.

Contact

Questions about privacy can go to sarah@amberandoakcompliance.com.