Draft for review. This page was written by an AI from a reading of how Syvo works. It is not legal advice and a lawyer has not reviewed it yet. Highlighted parts are still to be filled in.
Privacy Policy
Effective [EFFECTIVE DATE]
Syvo is a personal agent. You tell it what you want; it finds, compares, orders, books and sells for you, and asks you before anything is paid, sent or booked. This page says what Syvo keeps about you, what it sends to other services to do that, how long it keeps things, and how you delete them.
Syvo is run by [COMPANY LEGAL NAME], [REGISTERED ADDRESS] ("we"). For anything about your data, write to [CONTACT EMAIL].
Syvo is in a pilot. Payments inside Syvo use demo money; no real money moves.
The short version
- We keep what you give Syvo so it can work for you: your chats, what you asked it to remember, your saved details, your photos and files, your listings and orders.
- To answer you, Syvo sends your message and what it needs from your data to Google's Gemini models. Voice goes from your phone straight to Google.
- Your saved details (such as a passport number or address) are filled into forms by Syvo's server. Their values are not given to the AI model.
- We do not sell your data, show ads, or use analytics or advertising trackers.
- You can delete single things, or your whole account, from inside the app.
What we keep
| What | Details |
|---|---|
| Your account | You sign in with Google. We keep a one-way fingerprint (a hash) of your Google account identifier so we can recognise you next time. We do not keep your Google password, and we do not keep your Google email address or profile picture as part of the account. If email-to-Syvo is switched on, we keep a hash of your email address to recognise mail from you. Your display name is "SYVO user" until you save one. |
| Chats | Everything you type or say to Syvo and everything it answers, including result cards and the steps it took. Stored encrypted on our server. |
| Memories | Things Syvo learned from your chats or that you asked it to remember (for example a size or a preference). Stored encrypted. You can see and forget each one. |
| My details | What forms ask for, if you choose to save it: name, date of birth, gender (optional), email, phone, nationality, addresses, travellers' passport or ID numbers with expiry and issuing country, seat and meal preferences, and membership numbers. Stored encrypted as one sealed record. Syvo's server fills a field into a form when a job needs it; the value is not shown to the AI model, which is told only which fields are on file. We keep a record of which field was used for which job and when (never the value) for one year. |
| Photos and files | Pictures and files you attach. Photos are re-encoded on arrival, which removes location and camera data. They are stored encrypted and are private until you publish one with a listing. |
| Pictures and videos Syvo makes | What you asked for and the result, stored encrypted in your account. |
| Voice | In live voice, the sound of your voice goes from your phone directly to Google and does not pass through or get stored on our server. The words that were said are written into your chat as text. We keep the start time, end time and length of each voice session. |
| Connected Google account | Only if you connect it: the access tokens Google gives us (stored encrypted), and a list of the changes Syvo made for you (for example an email it sent or an event it added). Syvo reads your Gmail, Calendar, Drive, Tasks or Contacts at the moment a request needs it; what it read becomes part of that chat. |
| Website jobs | When Syvo works on a website for you: the plan, the steps taken, short-lived pictures of the page so you can watch, and the result. If you choose to stay signed in to a website inside Syvo's browser, that sign-in is kept in the browser service for later jobs on that site. Jobs can also run in the app's own browser on your phone; then the page is loaded by your phone, and the page's text and the steps go to our server so Syvo can decide what to do next. |
| Things on your phone | Only when you ask in chat: Syvo can set an alarm or timer, open an app, start a call or a text, or look up a contact by name. The contact it found, or what happened, is sent back as part of that chat. The app asks for each permission the first time it is needed. |
| Listings, offers and orders | What you publish to sell, the lowest price you would accept (kept private), offers made and received, orders, and your demo wallet's balance and movements. |
| Watches, schedules and reminders | What you asked Syvo to check or do later, and when. |
| Notifications | If you allow them, a notification token for your device, so we can send you updates. |
| Messaging channels | If you link Telegram or use your private Syvo email address: the link, and the messages that arrive through it, which become chats. |
| Security records | Sign-in sessions (as hashes), and a log of actions with who, what kind of action, on which item and when. The log does not hold your text. |
We do not keep ordinary web server logs of your requests, and request contents are never logged. Your network address is used for a short time in memory to limit abuse and is not stored. The app does not ask for your location. The web app uses one sign-in cookie, which is needed for it to work, and remembers your light or dark choice in your browser.
What is public
A listing is private until you publish it. When you publish, its title, description, price, city, the details you gave, the photos you published with it, your seller name, how many orders you completed and since when you have been on Syvo can be seen by other Syvo users, on your public page on the web, by search engines, and by other people's AI agents through Syvo's read-only door for agents. Your lowest price, your buyers, your private notes, unpublished photos and your exact location are not shown. You can unpublish a listing, switch your public page off, or pause your agent at any time.
What we send to other services
| Service | What it receives | Why |
|---|---|---|
| Google Gemini (Google's AI models) | Your message, recent chat, the memories relevant to it, photos and files you attached, anything Syvo read for the request (web pages, your connected Google data, a page it is working on, including pictures of that page), and the request for a picture or video. In live voice, your voice. Not your saved details' values, not your Google tokens. | To understand you, answer, search the web, speak, and make pictures and videos. |
| Google Search (through Gemini) | Search queries Syvo writes from your request. | To find current information. |
| Google sign-in | The usual sign-in exchange with Google. | To sign you in. |
| Google Workspace (Gmail, Calendar, Drive, Tasks, Contacts) | Requests to read, and to send or change when you said yes. | Only if you connect your Google account. |
| Firebase Cloud Messaging (Google) | Your device's notification token and the short text of a notification. | To deliver notifications to the phone app. |
| Google Cloud | Everything stored above, encrypted where stated. | Our server runs there, in [HOSTING REGION, currently Google Cloud asia-south1, Mumbai]. |
| Websites you send Syvo to | What a visitor to that site would send, and the details you approved for its forms. | To do the job you asked for. |
| Weather, currency and market data services (Open-Meteo, Frankfurter, open.er-api.com, Yahoo Finance) | The place, currency or symbol asked about. Nothing that says who you are. | To answer those questions directly. |
| Shops' own product catalogues | The product search. | To show real products and prices. |
| Flight and hotel suppliers (Duffel, LiteAPI), when switched on | The search, and for a booking you confirmed, the traveller details that booking needs. | To search and book travel. |
| Telegram, and our email provider (Amazon SES), when you use those channels | The messages you send and receive there. | To let you talk to Syvo from those apps. |
These services handle what they receive under their own terms and privacy policies. We do not sell your data and we do not share it for advertising. [LAWYER: confirm each provider's data-processing terms, including Google's terms for the Gemini API, and list them here]
How long we keep things
- Chats, memories, saved details, photos, files, listings and connected accounts: until you delete them or your account.
- A memory you do not delete is kept for up to ten years.
- Pictures of a page from a website job: a short time after the job ends.
- The record of where saved details were used: one year.
- Sign-in sessions: until they expire or you sign out.
- Orders with another person: kept for that person's records even after you delete your account, with your name removed (see below).
- Backups of the database: [BACKUP RETENTION PERIOD: not yet defined; deleted data can remain in backups until they are removed].
How to delete
- One chat: open the chat list and delete it. Its turns and what was learned from it go with it.
- One memory or all memories: You, then What Syvo remembers.
- Saved details: You, then My details, then erase.
- A photo, a file or a listing: delete it where it is shown.
- Your Google connection: You, then Connected apps, then disconnect. This deletes the access Syvo holds. To remove the permission at Google as well, remove Syvo on your Google account's third-party access page.
- Everything: You, then Settings, then Delete account. See Delete your account.
Deleting your account removes your chats, memories, saved details, photos, files, made pictures and videos, connected accounts, website jobs, schedules, listings, wallet, notification tokens and sign-ins, and signs you out everywhere. If you bought from or sold to another person, that order stays in their records with the item's name, the price and the date, and your name is replaced by "Deleted account".
Your choices and rights
You can see, correct and delete your data in the app, and download a copy of your account data (in the web app: You, then Download my data). You can pause your agent so it does nothing for you. Depending on where you live, you may also have the right to ask for a copy of your data, to have it corrected or deleted, to object to or restrict how it is used, and to complain to your data protection authority. Write to [CONTACT EMAIL]. [LAWYER: legal bases for processing, international transfers, representative and regulator details for each launch country]
Children
Syvo is not for children. You must be at least [MINIMUM AGE: 16, or 13 where the law allows] to use it. If you believe a child has given us data, write to us and we will delete it.
Security
Private data is encrypted on our server, each record tied to its owner. Sign-in tokens are stored only as hashes. Photos are cleaned of hidden data before they are stored. No system is perfectly secure, and encryption on our server does not hide your data from the AI model when Syvo sends it there to answer you.
AI and mistakes
Syvo's answers and the pictures and videos it makes are produced by AI and can be wrong. Syvo shows you the exact terms and asks for your yes before it pays, sends, books or publishes.
Changes
If this policy changes in a way that matters, we will tell you in the app before the change takes effect.
Contact
[COMPANY LEGAL NAME], [REGISTERED ADDRESS], [CONTACT EMAIL]