Privacy

Who controls your data

The controller of your personal data is Belto Inc., a Delaware corporation (file number 10589231) with its registered office at c/o LegalCorp Solutions, LLC, 1221 College Park Drive, Suite 116, Dover, Delaware 19904, United States, operating from California. Reach us at support@belto.world.

This policy explains what SlyOS reads, why, how long it is kept and what you can make us do about it. It forms part of the Terms of Service.

What we collect

Messages, threads and contact details from the channels you connect. Your account details and billing information. Product usage — drafts generated, edits made, features used — so the value dashboard can be accurate.

Why we hold it

To show you the messages that need an answer, to draft replies in your voice, and to remember the people and commitments that make those drafts useful. Nothing is processed for advertising or profiling.

Legal bases, if you are in the UK or the EEA

We rely on performance of a contract to read and draft on the accounts you connect, because that is the service you asked for; on legitimate interests to keep the service secure, prevent abuse and improve reliability; on consent for marketing email and for any non-essential cookies, which you may withdraw at any time; and on legal obligation where we must retain records, for example for tax.

Where we rely on legitimate interests we have considered your rights and concluded they are not overridden. You can object at any time and we will stop unless we have compelling grounds.

Your voice profile

The profile that learns how you write belongs to your account alone. It is not pooled with other customers, not used to improve anyone else's drafts, and never used by SlyOS as training data for any model.

Automated processing and model training

SlyOS uses automated systems, including large language models operated by our sub-processors, to read your material and produce drafts. SlyOS does not train any model on your content, does not sell it, and does not share it with other customers. Our model providers receive it in order to return a result to you; what they may do with it afterwards is governed by their own published API terms, and SlyOS has not signed a separate agreement that overrides them. The providers we use are listed at slyos.world/legal/subprocessors.

We do build a model of how you write, and facts about your own life, in order to draft in your voice. That work is per account and serves only that account. If we later train a model on your material for your own use, it stays yours and is deleted with your account.

None of this produces a decision with a legal or similarly significant effect on you: SlyOS proposes text and you decide whether to send it.

Storage and encryption

Data is encrypted in transit and at rest. Device channels such as iMessage and SMS are read on your own device — by the Mac companion, or by the Android app if you have granted it notification access. Our staff can see your ACCOUNT — the address you signed up with, your plan, the channels you connected, and counts of what the product did for you — and every one of those reads is logged. They cannot see your messages, your drafts, your contacts or your subject lines: the database itself refuses those columns to the staff console rather than trusting anybody to look away. Reading anything beyond that requires a logged, time-limited authorisation and only ever happens for a support request you have raised.

Full Disk Access, and what it is for

On macOS the SlyOS companion may ask for Full Disk Access. macOS requires that permission before any application can read the local databases in which Messages and some other apps store your conversations. SlyOS uses it for exactly that and nothing else: it reads the message stores for the channels you have connected.

It does not browse your documents, photographs, keychain or other files, and it does not upload the contents of your disk. You grant the permission yourself in System Settings and you can revoke it there at any moment; revoking it stops those channels reading and breaks nothing else.

The Android app and your notifications

On Android, channels such as WhatsApp, Telegram, Signal and SMS have no way to let another app read them. SlyOS reads them through Android's notification access, which you grant yourself and can revoke at any time in Android Settings. The app explains this and asks before it sends you to that screen.

While it is on, SlyOS reads notifications only from the messaging apps you have connected — notifications from everything else on your phone are ignored. For each message it reads, it sends us the text of the message, the time it arrived, the sender's name and the conversation's title as your messaging app shows them. It does not send the rest of the conversation, your contacts, or anything from apps you have not connected.

This includes messages written by people who do not use SlyOS. We hold them for the same reason we hold anything else you receive — to show you what needs an answer and to draft a reply for you — and under the same terms: not pooled with other customers, never training data, and deleted with your account. Revoking notification access stops the reading immediately.

Other people’s messages

A conversation has two sides, so what SlyOS reads necessarily includes messages written by people who are not our users. We process them only to serve you — to draft your replies and to answer your questions about your own correspondence — and we do not build profiles of them for anyone else, sell them, or use them to advertise.

Where the law of your jurisdiction requires the other party’s consent before a communication is processed by a third party, obtaining that consent is your responsibility. Anyone can ask us to erase what we hold about them by writing to support@belto.world, and we will do so unless we are required to keep it.

Sub-processors

SlyOS uses model and infrastructure providers to generate drafts and run the service. Your content is sent to them only to produce a result for you. SlyOS itself never trains any model on your messages. What a provider may do with content sent to its API is governed by that provider's own published terms, and we have not signed a separate agreement that overrides them. The current list is published at slyos.world/legal/subprocessors.

International transfers

We are established in the United States and our sub-processors operate there and elsewhere. Where data is transferred out of the UK or the EEA we rely on the European Commission’s Standard Contractual Clauses, the UK Addendum where applicable, or an adequacy decision, and we take account of the circumstances of each transfer.

Cookies and analytics

Our applications set a small number of strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. These are required for the service and are not used to track you.

On our public website we also use privacy-respecting analytics to count visits and understand which pages are read. Where consent is required, we ask for it before any non-essential cookie or analytics script is set, you can decline without losing access to anything, and you can change your answer at any time.

Marketing email

We send marketing email only to people who have asked for it. If you joined a waiting list you will receive a single message asking whether you want updates, and nothing further unless you say yes. Every marketing message carries an unsubscribe link, unsubscribing takes effect immediately, and we keep a record of the request so it cannot be undone by a later import.

Service email — receipts, security notices, and messages about your account — is not marketing and continues regardless, because we are required to send it.

Retention and deletion

Disconnecting a channel stops collection immediately. Deleting your account removes messages, voice profile and memory within 30 days, backups included. Export is available at any time from Settings.

Your rights

You can access, correct, export, restrict or delete your data, and object to processing. Office and Elite customers can sign a DPA. Write to us and we will answer within 30 days.

Children

SlyOS is not for anyone under 18. We do not knowingly collect data from children, and if we learn that we have, we delete it.

Changes to this policy

We may update this policy. Where a change is material we will tell you in the product or by email before it takes effect, and the date at the top always says when it last changed.

Contact

Privacy questions go to support@belto.world, or use the contact form.