Privacy Policy

This Privacy Policy explains how Sylvie ("Sylvie", "we", "us" or "our") collects, uses, shares and protects information when you use our website, create an account, or use our platform and related services (the "Service"). By using the Service, you accept the practices described here.

1. Who we are

Sylvie provides a second brain for marketing teams: a living, permission-aware memory for every brand, and AI agents that run operational marketing work on top of it. Sylvie acts as a data processor for the content you connect and store in your brains, and as a data controller for your account and billing information.

2. Information we collect

We collect the following categories of information:

• Account information. Name, work email, company, role and authentication details you provide when you create or manage an account.
• Billing information. Plan, billing contact and payment metadata. Card details are processed by our payment provider and are never stored on our servers.
• Brain content. The briefs, approvals, guidelines, files and messages you or your connected tools bring into a brand or project brain, and the structured memories Sylvie derives from them.
• Integration data. Content and metadata Sylvie reads from tools you connect (such as Slack, Google Drive, Meta Ads, Notion, Gmail, Figma or HubSpot), strictly within the access you grant.
• Usage data. Log data, device and browser information, feature usage and diagnostic events used to operate, secure and improve the Service.
• Cookies. Essential cookies required for the Service to work, and, where you consent, limited analytics.

3. How we use your information

We use information to provide and operate the Service; to build and maintain your brand and project brains; to run the AI agents and features you request; to authenticate users and secure accounts; to process billing; to provide support; to send service and, where permitted, product communications; and to comply with legal obligations. We only process brain and integration content to deliver the Service to you.

4. Legal bases for processing

Where the GDPR or similar laws apply, we rely on: performance of our contract with you; your consent (which you can withdraw at any time); our legitimate interests in operating and securing the Service; and compliance with legal obligations.

5. How we share information

We do not sell your personal information or your brain content. We share information only with:

• Subprocessors and service providers that host, secure or support the Service (for example, cloud infrastructure and AI model providers), under contracts that require appropriate safeguards.
• Integration providers you choose to connect, limited to what is needed to exchange data with those tools.
• Legal and safety recipients where required by law, to enforce our terms, or to protect the rights, property or safety of Sylvie, our users or the public.
• A successor in connection with a merger, acquisition or asset sale, subject to this Policy.

6. AI models and your data

Sylvie uses AI models to structure memory and power agents. Your brain content and integration data are never used to train foundation models, and are not shared with model providers for their own training. Each brand or project brain is isolated, so content from one account is never visible to another.

7. Data retention

We retain account and billing information while your account is active and as required to meet legal, tax and accounting obligations. Brain content is retained while the relevant brain is active or archived in your workspace and is deleted, or returned, within a reasonable period after you delete it or close your account, except where retention is legally required.

8. Data security

We protect your data with encryption in transit and at rest, access controls, isolation between brains, and ongoing monitoring. Sylvie respects the access permissions of every tool it connects. No method of transmission or storage is perfectly secure, but we work to protect your information using industry-standard measures.

9. International data transfers

We may process and store information in countries other than your own. Where we transfer personal data across borders, we use appropriate safeguards, such as standard contractual clauses, to protect it in line with applicable law.

10. Your rights

Depending on your location, you may have the right to access, correct, export, restrict or delete your personal information, to object to certain processing, and to withdraw consent. You can exercise most of these in the product or by contacting us, and we will respond in accordance with applicable law.

11. Cookies

We use essential cookies to keep you signed in and to operate the Service. Where required, we ask for your consent before using non-essential analytics cookies, and you can decline them without losing core functionality.

12. Children's privacy

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

13. Changes to this policy

We may update this Policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

14. Contact us

For privacy questions or to exercise your rights, contact us at [email protected].