Privacy policy

Last updated: 14 September 2026

Draft for launch review. Operator and contact details must be completed before customers can purchase.

Syl's operator operates Syl in the United Kingdom.

Information we process

We process account details such as your name and email address; bot instructions, conversations, files, routines, and memories you provide; connection credentials you authorise us to use; and technical records needed to operate and secure Syl. Billing records include your plan, payment status, and Stripe references. Card details are handled by Stripe.

Why we use it

We use account, workspace, and usage information to provide the service you request and perform our contract with you. We use security and diagnostic records for our legitimate interests in preventing abuse, investigating incidents, and keeping the service reliable. Billing and tax records may be retained to meet legal obligations. Optional marketing requires a separate choice where consent is required.

AI models and connected apps

Your instructions and relevant context are sent to the model providers and tools involved in a task. Bringing your own keys does not mean data stays on your device: requests still pass through Syl and the selected provider. Information already sent to an external service is subject to its own retention and privacy practices.

Only connect tools and provide information you have permission to use. Avoid submitting sensitive personal information unless you have established that the workflow and its providers are appropriate for it.

Mobile AI permission

Before a new mobile action sends content to configured AI services, Syl names the recipients and asks for permission. This includes model context and attachments, voice recordings and speech text, and external memory where configured. Model gateways can forward requests to downstream providers according to the connection's routing settings.

Permissions belong to your account and Space. You can withdraw them in Account → AI data sharing. Withdrawal applies to new mobile actions; stop existing runs and disable routines separately. Web and desktop use your existing provider configuration.

Service providers and international transfers

Operating Syl involves infrastructure, payment, email, and AI providers. The final launch notice will identify the hosted providers, processing locations, and safeguards used for any transfers outside the UK. We do not sell personal data. If you operate your own deployment, you are responsible for that deployment's processing and providers.

Retention and deletion

We keep active workspace information to provide your account. You can delete supported content and request account deletion in settings. Copies held by independent connected services are not deleted automatically when you remove them from Syl. Billing records needed for legal obligations and limited records needed for security or disputes can outlast an account. The launch retention schedule will specify periods for backups and operational records.

Cookies and website requests

The application uses session cookies and local storage for authentication and preferences. The marketing site serves its own fonts and does not load analytics scripts.

Your rights

Depending on the circumstances, you can ask to access, correct, erase, restrict, or receive a portable copy of personal data, or object to processing based on legitimate interests. You can withdraw consent without affecting earlier lawful processing. We may need to verify your identity. You can complain to the Information Commissioner's Office.

Business customer information

Where your organisation decides why and how personal information in its workspace is used, it may be the controller and Syl may process that information on its instructions. A data processing agreement and provider schedule must be in place for those uses before launch.

Children and changes

Syl's hosted service is intended for people aged 18 and over. Contact us if a child has provided personal data. We will update this notice when our processing changes and provide additional notice when required.