Privacy Policy

This policy explains what information Sylova ("we", "us") collects when you use our website and application, why we collect it, and the choices you have. By using Sylova, you agree to the collection and use of information as described here.

1. Information we collect

Account information

When you register, we collect your name, email address, and a securely hashed password (or, if you sign in with Google, the basic profile information Google shares with us). We never see or store your Google password.

Content you create

We store the inputs you give us and the content our tools generate on your behalf — article titles and drafts, generated websites, business profile details, keyword research, entity maps, and backlink reports. This content belongs to you; we store it so you can access, edit, and export it later.

Billing information

Subscription payments are handled by Paddle.com Market Limited, our payment processor and merchant of record. We never receive or store your card number or full payment details — Paddle collects that directly and shares with us only what's needed to manage your subscription (your plan, billing status, and renewal dates).

Usage and technical data

We automatically log standard technical data — IP address, browser type, pages visited, and timestamps — to keep the service secure, diagnose problems, and understand how features are used.

2. How we use third-party services

To provide our features, we send relevant data to these third-party services on your behalf:

• OpenAI — article titles, prompts, and business details you provide are sent to OpenAI's API to generate written content, headings, and keyword or entity analysis.
• Pexels — used to source free stock photography when you choose to include images in a generated website.
• Google Places — used only if you search for or link a business profile, to fetch publicly listed business details (address, hours, phone number).
• Paddle — processes subscription payments and manages billing as our merchant of record.
• Cloud storage providers (e.g. Amazon S3, and others you connect) — only if you explicitly connect an account to deploy a generated website there; credentials you provide for this are stored encrypted and used solely to publish your own content to your own storage.

We do not sell your personal information to anyone, and we do not use your content to train AI models.

3. Cookies

We use a small number of essential cookies to keep you signed in and to protect the application against cross-site request forgery. We don't use third-party advertising or tracking cookies.

4. Data retention

We keep your account and content for as long as your account is active. If you delete your account, we delete your personal data and generated content within 30 days, except where we're required to retain billing records for legal or tax purposes.

5. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any of these rights, email us at privacy@sylova.app.

6. Security

We use industry-standard measures — encrypted connections, hashed passwords, and access controls — to protect your data. No method of transmission or storage is 100% secure, so we can't guarantee absolute security.

7. Children

Sylova is not directed at children under 16, and we don't knowingly collect data from them.

8. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the date at the top of this page and, where appropriate, notify you by email.

9. Contact

Questions about this policy? Email us at privacy@sylova.app.