What Sylvie reads, what is stored, and who can see it.
Last revised on September 21, 2026.
This Privacy Policy describes how Sylvie AI, Inc., a Delaware corporation ("we", "us", "our"), collects, uses and discloses information about you for the website asksylvie.ai and its subdomains, including asksylvie.ai (the "Website"), the Sylvie personal executive assistant, and the services, content, tools and functionality offered through the Website and through the text-messaging channels Sylvie works on, including SMS, WhatsApp, iMessage-compatible messaging, Telegram, Slack and Microsoft Teams (together, the "Services"). "You" and "your" mean you as the user of the Services.
Please read this Privacy Policy carefully. By using the Services you agree to the collection, use and disclosure of your information as described here. If you do not agree, please do not use the Services. This policy is written to describe what the Services actually do; if something here does not match your experience, write to [email protected].
We may modify this Privacy Policy from time to time, in which case we will update the "Last revised" date at the top. If we make material changes to how we use or disclose the information we collect, we will make reasonable efforts to notify you, such as by message or by email at the last address you gave us, and take any additional steps the law requires. If you do not agree to an update, please stop using the Services.
When you use the Services we collect certain categories of information about you from a number of sources.
In addition to the specific uses described below, we use the information we collect to provide the Services: to understand your requests, plan and carry out tasks on your behalf, generate responses and drafts, and tailor Sylvie to you based on your interactions and what you have told her. We also use it to communicate with you, to deliver messages and manage the phone number assigned to you, to keep the Services secure and reliable, to prevent abuse, to comply with legal obligations, and to protect our rights and the rights of others. We do not sell your information, and we do not disclose it to data brokers or to anyone who resells it. We do not use your information for advertising, and we do not use the content you give Sylvie to train AI models.
Some features of the Services require you to give us information about yourself. You may choose not to, but that may prevent you from using those features. This includes:
The Services include a personal assistant that acts on your behalf when you engage her. To do that, and depending on the permissions you grant, Sylvie has access to the information you share with her and make available to her. This may include information from applications and accounts you connect, text and documents you send, and other data made available through your connected accounts, including the content of emails, calendar events, messages and other private communications you choose to make accessible. If you turn on the meeting notetaker, the Services also collect audio and transcripts of the meetings you choose.
Depending on the permissions you grant and how you use Sylvie, she may have access to information that is considered sensitive: for example, when she summarises an email from your doctor, reads a message about a financial matter, or reviews a contract you forwarded. We process such information only to carry out what you asked.
Sylvie also creates information for you: a private memory of your preferences, key people and ongoing work, drafts placed in your own mailbox, reminders, daily briefs, meeting preparation notes and meeting notes.
We do not use information collected through your use of the Services to evaluate, fine-tune, train or improve AI models, and the terms of our AI provider prohibit it from doing so with data we send through its API. Sylvie is not a professional adviser: do not rely on her for financial, legal, medical or other advice requiring professional judgment.
If you choose to connect your Google account, we receive access to your Gmail (to read mail and create drafts, and to send an email you have approved word for word) and your Google Calendar, together with your email address and the message and event metadata Google shares with us through its APIs. We use this information to provide the Services, so that Sylvie can read, draft, schedule and act on your behalf, and to tailor the Services to you.
Sylvie's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use information received from Google APIs to evaluate, fine-tune, train or improve AI models, or for serving ads, including retargeting, personalised or interest-based advertising. To the extent third parties process information collected from Google on our behalf, including our AI model provider, we permit them to process it only on our behalf and to help us provide the Services, and for certain legally permissible purposes such as maintaining security and complying with law. We do not disclose raw or derived Google user data to third-party AI services for model training or any secondary purpose, and no person at Sylvie reads it except with your consent, for security purposes, or as required by law.
You may revoke our access to your Google account at any time from your settings page or from your Google account's security settings, and you may delete the information we collected from Google by deleting your account.
If you connect Microsoft 365, we receive access to your Outlook mail (to read, draft and send an email you approved) and your calendar. If you connect a CRM or work app (Attio, HubSpot, Salesforce, Pipedrive, Linear, Notion, ClickUp or monday.com), we read the records you ask about and update them only with your approval of each change. If you connect X or a Facebook Page, we publish only a post you approved word for word. Each connection is made on the provider's own consent screen, is yours alone, and can be disconnected at any time from your settings page. We never read a colleague's mailbox, calendar or accounts.
We automatically collect a limited set of information about the operation of the Services: whether a message was delivered, whether a background job succeeded, and operational incident records that carry status codes and job names but deliberately not message text, subjects, addresses or provider error text. When you open a link we sent you, our servers see the request, including your IP address and browser type, as any website does. We log staff sign-ins to our back office and the pages they view. We do not collect clickstream data, keystrokes or precise location, and we do not run analytics on our pages.
We obtain information about you from outside sources only when you connect a third-party account, as described above, in which case we receive what that provider shares with us for the permissions you granted. Disconnecting an account stops further collection; deleting your account deletes what was collected. We are not responsible for the accuracy of information third parties provide or for their policies or practices.
We may deidentify or aggregate information so that it cannot reasonably be linked to you, for example counts of messages delivered or features used, and may use deidentified information for any purpose. We will maintain it in deidentified form and not attempt to re-identify it, except to determine whether our deidentification satisfies legal requirements.
We use only essential cookies: a session cookie for staff signing in to our back office, and short-lived cookies that protect one-time links, such as your settings link and sign-in with a connected account. We do not use analytics cookies, advertising pixels or third-party tracking technologies. You can block or delete cookies in your browser, but the settings page and connected-account sign-in will not work without the essential ones. Because we do not track you across websites, our Website does not respond to browser "do not track" or similar signals; there is nothing for them to switch off.
We disclose your information only to the following categories of recipients, subject to this Privacy Policy:
We do not provide information collected from Google, Microsoft or any connected account to third parties for their own purposes. We may also disclose information for legal and security reasons and to protect the Services and our business: to cooperate with law enforcement and regulatory inquiries, to detect and prevent fraud or illegal activity, to exercise or defend legal claims, and to ensure the safety and security of our business, our staff and our users.
The Services may link to third-party websites or platforms, such as the providers of the accounts you connect. If you follow such links you should review the applicable privacy policies and terms; we are not responsible for the privacy or security of, or the information on, those sites. Information you provide on public or semi-public venues, such as a post Sylvie publishes to your social account at your direction, may be viewable by others without limitation. A link does not imply our endorsement of the linked site or its operator.
The Services are for adults, 18 and over, and are not intended for children. We do not seek or knowingly collect personal information about children. If we become aware that we have unknowingly collected information about a child, in particular any child under 13 years of age, we will make commercially reasonable efforts to delete it. If you are the parent or guardian of a child under 13 who has provided us with personal information, contact us at the address below to request deletion.
Credentials for the accounts you connect are encrypted at the application layer with a key held outside the database before they are stored. Your private memory and conversation history live in Anthropic's managed store, one per person. Everything moves over encrypted connections, webhooks from messaging providers are signature-checked, and our staff reach the back office through named accounts, with every page view logged. Sylvie has no ability to send an email or publish a post on her own: each requires your explicit approval, and the software is built so that no automated tool can do it.
Despite our reasonable efforts, no security measures are impenetrable and we cannot guarantee perfect security. An assistant that acts on your behalf presents its own considerations: the possibility of an unintended action, an incorrect or incomplete output, and interactions with third parties who may include misleading instructions in an email or document intended to influence an AI assistant. Our approval steps exist for exactly this reason. We encourage you to review what Sylvie proposes and to remain attentive while using the Services. Information you send us electronically may not be secure in transit; do not use unsecured channels to send us sensitive or confidential information. If we learn of a breach affecting your information we will notify you without undue delay.
| Information | Kept |
|---|---|
| Background job records (briefs, reminders, sweeps) | 30 days |
| Operational incident records | 7 days |
| Bodies of draft social posts | 7 days |
| Meeting recording links | 7 days |
| Your messages, memory and data from connected accounts | For as long as your account exists |
| Encrypted database backups | 30 days |
When you delete your account, local erasure is immediate. Cleanup at our providers (memory store, sessions, recordings) is queued and completed shortly after, and the deletion page tells you what remains and for how long. Backups age out on their 30-day schedule.
Residents of California and of other states with consumer privacy laws have the rights to know, to delete, to correct, and to not be discriminated against for exercising them. We do not sell personal information and do not share it for cross-context behavioural advertising. Write to [email protected] to exercise any of these rights.
The Services are operated from the United States and our providers process information in the United States. The beta is open to people in the United States. If we accept people elsewhere we will update this policy with the applicable transfer terms.
If you have questions about our privacy practices or this Privacy Policy, email us at [email protected]. For support, email [email protected].