Privacy Policy

This policy explains what SIA collects when you use SIA, why, and your choices. We keep data collection to what the Service needs to work.

What we collect

• Account. Your email address and a securely hashed password. We never store your password in readable form.
• Your content. The messages you send your agent, its replies, and the files and memory it saves in your private workspace. This is stored so the Service works and your agent remembers across sessions.
• Subscription. Your subscription status and the identifiers our payment gateway (Tranzila) assigns. When you subscribe, your card details pass through our server once, in that request only, to be sent to Tranzila for the charge. They are never stored or logged by us - what we keep is the last four digits and Tranzila's own payment token, which is what later renewals are charged against.
• Notifications. If you enable them, a device push token so we can notify you.
• Operational logs. Basic technical logs (timestamps, error and request metadata) needed to run and secure the Service.

AI processing

To answer you, your messages and the context your agent uses are sent to the provider of the AI model your agent runs on: OpenAI (GPT models), Anthropic (Claude models) or Moonshot AI (Kimi models). They process it only to return a result. Under their API terms OpenAI and Anthropic do not use it to train their models; Moonshot's terms may allow it, so choose a GPT or Claude model if that matters to you. Voice messages are transcribed by Deepgram. We do not use your content, or anything from your Google account, to train or improve AI models. Do not send information you are not permitted to share with such a provider.

Google user data

If you choose to connect your Google account (Settings → Connections → Google), SIA asks Google for the permissions you approve and uses them only to do what you ask:

• Gmail. Read, search and summarize your messages when you ask; read a one-time code a site sends you while your agent signs you up or in at your request; send an email you dictate; move a message you name to Trash. It never deletes mail permanently.
• Google Calendar. Read your events and create the events you ask for.
• Google Drive. Find and read the files you mean; create the documents and sheets you ask for; update, rename, move and share a file the way you ask; move a file you name to Drive's trash, where it can be recovered for 30 days. It never deletes Drive files permanently.
• Google Classroom. As a teacher: create and archive your classes, add assignments, post announcements and see what students handed in. As a student: see your own assignments and hand in your work.
• Sign in with Google. Your verified email address (and the basic profile Google shares with it), only to create your account and sign you in.

When you first set up your memory with Google connected, your agent reads the senders and subjects of your 15 newest inbox messages, your next 15 calendar events and the names of your 20 most recently changed Drive files, and writes a short private profile note into your memory, so it knows your context.

How it is used. Google data is used only to provide the features above, inside your own conversations and memory. It is never sold, never used for advertising, never used to determine credit-worthiness, and never used to develop, improve or train generalized or non-personalized AI or machine-learning models. It is sent only to OpenAI and Anthropic, only to produce the answer you asked for, never to Moonshot AI (an agent on a Kimi model cannot use Google), and to no one else except where the law requires it.

Who can see it. No person at SIA reads your Google data, unless you ask us to (for example, to help with a specific message), it is needed for security (such as investigating abuse), or the law requires it.

Where it is stored and for how long. Your Google access token is stored in your private workspace so your agent can act for you; our OAuth client secret is kept on our servers only, never in your workspace. Results your agent fetched (for example an email it summarized for you) are part of your conversation history and memory. All of this is kept while your account exists. Backups of the Service, which include it, are kept for up to 60 days and then deleted.

Your controls. You can disconnect Google at any time in Settings → Connections; this deletes the stored token. You can also remove access in your Google Account at myaccount.google.com/connections. Deleting your account (Settings → Account → Delete account) deletes your workspace, memory, conversations and the Google token.

SIA's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use it

To operate your agent, keep your account and memory working, process your subscription, secure the Service, and respond to support. We do not sell your personal data and do not use your private content for advertising.

Sharing

Only with the providers that make the Service run: our hosting/infrastructure, the AI model providers and Deepgram above, and Tranzila for payments. Each processes data on our behalf or as an independent controller for payments. We may disclose information if required by law.

Retention & deletion

We keep your content while your account is active. You can delete your account at any time in Settings → Account → Delete account, which removes your workspace, memory, conversations and any connected-service tokens; some records (e.g. billing) may be retained where the law requires. To request a copy of your data, email support@sia-agent.com.

Security

Passwords are hashed, sessions are stored hashed, traffic is encrypted in transit, and each agent runs in its own isolated environment. No system is perfectly secure, but we design for least exposure.

Contact

Privacy questions: support@sia-agent.com. Governing law: Israel.