Privacy policy
Last updated: 17 September 2026
Shopstar PTY LTD t/a Syl operates Syl. Registered address: 113 Loop Street, Cape Town, South Africa. Company number: 2014/192666/07.
Contact: support@usesyl.com.
Information we process
We process account details such as your name and email address; bot instructions, conversations, files, routines, and memories you provide; connection credentials you authorise us to use; and technical records needed to operate and secure Syl. Billing records include your plan, payment status, and Stripe references. Card details are handled by Stripe.
Why we use it
We use account, workspace, and usage information to provide the service you request and perform our contract with you. We use security and diagnostic records for our legitimate interests in preventing abuse, investigating incidents, and keeping the service reliable. Billing and tax records may be retained to meet legal obligations. Optional marketing requires a separate choice where consent is required.
AI models and connected apps
Your instructions and relevant context are sent to the model providers and tools involved in a task. Bringing your own keys does not mean data stays on your device: requests still pass through Syl and the selected provider. Information already sent to an external service is subject to its own retention and privacy practices.
Only connect tools and provide information you have permission to use. Avoid submitting sensitive personal information unless you have established that the workflow and its providers are appropriate for it.
Advanced memory
Advanced memory defaults off. If a space owner enables it, Supermemory processes selected useful facts and bounded excerpts from new conversations for cloud storage and recall. It does not automatically upload old histories or document libraries. Each member must allow their own managed-memory processing. Permission applies across web, desktop, mobile and workers; withdraw it in Memory settings or Account → AI data sharing.
Turning off stops new cloud reads and writes and retains cloud data for re-enabling. Clearing turns it off and removes its managed cloud data from active recall while preserving native notes and chat history. Already-dispatched processing may need to finish before cleanup can be confirmed; unresolved cleanup stays pending and is retried. Provider backup retention and processing locations must be approved in the launch provider schedule; clearing is not a promise of instant physical backup erasure. See Supermemory’s privacy policy.
Mobile AI permission
Before a new mobile action sends content to configured AI services, Syl names the recipients and asks for permission. This includes model context and attachments, voice recordings and speech text, and external memory where configured. Model gateways can forward requests to downstream providers according to the connection's routing settings.
Permissions belong to your account and Space. You can withdraw them in Account → AI data sharing. For models and voice, withdrawal applies to new mobile actions; stop existing runs and disable routines separately. Web and desktop use your existing model and voice configuration. Managed Advanced memory permission is enforced across all surfaces.
Service providers and international transfers
Operating Syl involves infrastructure, payment, email, and AI providers. The final launch notice will identify the hosted providers, processing locations, and safeguards used for any transfers outside the UK. We do not sell personal data. If you operate your own deployment, you are responsible for that deployment's processing and providers.
Retention and deletion
We retain workspace information and unused purchased credits while your account is retained, including after subscription cancellation, for reactivation. You can delete supported content and request account deletion in settings. Copies held by independent connected services are not deleted automatically when you remove them from Syl. Billing records needed for legal obligations and limited records needed for security or disputes can outlast an account. The launch retention schedule will specify periods for backups and operational records.
Cookies and website requests
The application uses session cookies and local storage for authentication and preferences. The marketing site serves its own fonts and does not load analytics scripts.
Your rights
Depending on the circumstances, you can ask to access, correct, erase, restrict, or receive a portable copy of personal data, or object to processing based on legitimate interests. You can withdraw consent without affecting earlier lawful processing. We may need to verify your identity. You can complain to the Information Commissioner's Office.
Business customer information
Where your organisation decides why and how personal information in its workspace is used, it may be the controller and Syl may process that information on its instructions. A data processing agreement and provider schedule must be in place for those uses before launch.
Children and changes
Syl's hosted service is intended for people aged 18 and over. Contact us if a child has provided personal data. We will update this notice when our processing changes and provide additional notice when required.