Privacy Policy

Last updated: October 22, 2026

1. Introduction

Sila Intelligence Inc. (“Sila,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use and protect it, and your choices regarding your data when you use the Sila platform at silahq.com, its applications, and associated services (the “Service”). By using the Service, you consent to the practices described in this policy.

Our roles. For account, billing, and usage information, Sila acts as a data controller. For workspace content — messages, files, recordings, transcripts, and imported or integrated data processed on behalf of the organization that owns the workspace — Sila acts as a data processor (or “service provider” under U.S. state privacy laws), and the customer organization is the controller. A Data Processing Agreement covering this processing, including standard contractual clauses for international transfers, is available to business customers upon request at sila@silahq.com.

2. Information We Collect

We collect information in the following categories:

Account Information. When you create an account, we collect your name, email address or phone number, profile picture, and organizational details. If you sign in with Google, Microsoft, or Apple, we receive the basic profile information (name, email, avatar) that provider shares. If you sign in with a phone number, we send a one-time verification code by SMS. Workspace administrators may also provide Team Contact information during onboarding or import.

Device Contacts. On mobile, if you choose to invite people from your address book, we read the names, phone numbers, and photo thumbnails of your contacts — never their email or postal addresses — and store a copy so you can see which contacts are already on Sila and pick whom to invite. Invitations are sent from your own device’s messaging app, not by us. Contacts access is optional; you can revoke it in your device settings, and synced contacts are deleted when you delete your account.

Payment and Billing Information. When your workspace subscribes to a paid plan or enables auto top-up, payments are processed by our payment processor, Stripe. Sila does not receive or store your full card number. We retain billing contact details, subscription and plan status, transaction and invoice history, credit balance and usage records, auto top-up settings, and limited payment method details provided by Stripe (such as card brand and last four digits) to manage billing and display it to workspace administrators.

Workspace Content. This includes messages, files, groupchats, threads, and any other content you or your team create or share within the Service. This also includes AI Contact configurations, instructions, and roles you define.

AI Interaction Data. When you interact with AI Contacts, we process the messages, prompts, and context provided to generate responses. This data is used solely to deliver AI functionality within your workspace.

Voice, Video, and Transcription Data. When you participate in voice or video calls within the Service, we process the associated audio and video streams to deliver the call. Where a call participant or workspace enables transcription or meeting notes, we generate and store transcripts and AI-produced summaries of the call, which are treated as workspace content. Participants are responsible for complying with applicable recording-consent laws, as described in our Terms of Service.

Imported Data. If you import data from platforms such as Slack or Microsoft Teams, we collect the message history, groupchat structures, Team Contact information, and other data included in the import.

Integration Data. When you connect third-party applications, we collect data from those services as necessary to provide the integration functionality you have enabled. Depending on the integration this can include email messages and attachments, calendar events, files and documents, repositories and issues, and directory information. We store the access tokens needed to keep an integration connected, encrypted at rest, and delete them when you disconnect the integration.

Google user data. Sila’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Gmail, Google Drive, Docs, Sheets, Slides, Calendar, and Admin Directory data only to provide the features you have enabled — reading and sending email, searching and editing files, and reading and creating calendar events on your instructions or on the instructions you give an AI Contact. We do not use Google user data to serve advertisements, do not sell it, do not use it to train AI models, and allow humans to read it only with your consent, for security purposes, to comply with law, or where it has been aggregated and anonymized.

External Messaging Channels. If your workspace enables a phone number or connects an Instagram account, we receive and store the messages, comments, phone numbers, usernames, and attachments exchanged with people outside your workspace through those channels so that AI Contacts and Team Contacts can respond. Those external people are not Sila users; the organization that owns the workspace is responsible for providing them any required notices.

Voice, Likeness, and Generated Media. If you use the AI video studio, we collect the scripts, product footage, images, and audio you upload, including audio and video of real people you choose to feature. To produce voiceovers in a presenter’s voice, we create a voice model from that person’s audio samples using our voice-synthesis providers. Voice models are used only to generate media you request, are never used to identify anyone, and are deleted when you delete the presenter or on request. Audio and video of a real person are collected only with the consent you are required to obtain under our Terms of Service.

Connected Agents. If you authorize a third-party AI agent or tool to access your workspace through our MCP server, we record the grant (the client, the workspace, the permission level, and when it was approved) and log the requests that agent makes on your behalf. You can review and revoke grants in your settings.

Push Notification Tokens. When you enable notifications on a device, we store the device push token issued by Apple or Google so we can deliver alerts and incoming-call rings to that device. Tokens are deleted when you sign out or delete your account.

Usage Data. We automatically collect information about how you interact with the Service, including features used, pages visited, actions taken, timestamps, and performance metrics.

Device and Technical Data. We collect device type, operating system, browser type, app version, IP address, crash reports, and similar technical information to ensure the Service functions properly and to maintain security. Our desktop application also contacts our update server periodically to check for and download updates, which transmits your app version and platform.

Information From Other Sources. We receive information about you from workspace administrators and colleagues (for example, when they invite you or import a workspace that contains your messages), from identity providers you sign in with, from people who message your workspace through connected channels, and from our payment processor.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service, including delivering messages, powering AI Contacts, and enabling integrations
  • Process and deliver AI-generated responses within your workspace
  • Import and migrate data from other platforms at your request
  • Process subscription payments and any automatic top-up charges your workspace administrator configures, maintain billing records, and send billing-related communications
  • Improve, personalize, and develop new features for the Service
  • Communicate with you about your account, updates, and support inquiries
  • Send you marketing communications about Sila features and offers, from which you can unsubscribe at any time using the link in the message; transactional and account messages are sent regardless
  • Deliver push notifications, incoming-call alerts, and SMS verification codes to your devices
  • Monitor and analyze usage patterns to improve performance and reliability
  • Detect, prevent, and address security incidents, fraud, and technical issues
  • Comply with legal obligations and enforce our Terms of Service

4. AI and Data Processing

No training on your data. Sila does not use your workspace content, messages, or AI interactions to train our underlying AI models or any third-party AI models. Your data is processed solely to deliver the AI features you use within your workspace.

Third-party AI providers. AI features within Sila are powered by third-party model providers. We maintain strict data processing agreements with these providers that prohibit them from using your data for model training or any purpose other than delivering the requested AI functionality. Data sent to AI providers is transmitted securely and is not retained by them beyond what is necessary to process the request. Workspace administrators and AI Contact owners can choose which model powers each AI Contact; the provider that receives a given request depends on that choice, and some models are reached through a routing provider that forwards the request to the model’s host.

AI Contact context. AI Contacts in your workspace operate with the context you provide, including groupchat messages, workspace information, and connected app data. You control what context is available to each AI Contact through configuration and permissions.

Sandboxed execution. When an AI Contact runs a task, it works inside an isolated, short-lived compute sandbox operated by our infrastructure provider. The files, skills, and context the task needs are copied into the sandbox and removed when it ends; named AI Contacts keep a small persistent working directory between runs so they can retain notes and learned preferences, which is deleted with the AI Contact. Actions the AI Contact takes in connected applications (sending an email, editing a document) are performed using the integration you connected, and the resulting data is handled under that integration’s terms.

Third-party agents you connect. If you connect an outside AI agent to your workspace through our MCP server, that agent and the company that operates it receive the workspace data it requests within the permissions you granted. Their handling of that data is governed by their own privacy policies, not this one.

Automated decision-making. AI Contacts in Sila assist with communication and task execution as configured by your workspace. Sila does not use automated processing to make decisions that produce legal or similarly significant effects about you without human involvement.

5. Information Sharing and Disclosure

We do not sell your personal information. We do not share your information with third parties for their marketing purposes. We may share information in the following limited circumstances:

  • Service providers and sub-processors. We share data with trusted service providers who assist in operating the Service, subject to strict confidentiality and data processing obligations. These currently include cloud hosting, database, authentication, and file storage (Supabase); AI model providers (Anthropic, OpenAI, Google) and a model-routing provider (OpenRouter) that forwards requests to the model you selected, including models hosted by other providers such as DeepSeek; isolated sandbox compute for AI Contact tasks (Blaxel); audio transcription (AssemblyAI, OpenAI); document and video parsing (Reducto, Google); voice synthesis and voice cloning (ElevenLabs, Fish Audio); payment processing (Stripe); real-time voice and video (Daily); SMS and iMessage delivery (Blooio); transactional email (Resend); push notification delivery (Apple, Google); integration connectivity (Pipedream); background job processing (Inngest); product analytics (PostHog, Google Analytics); and error monitoring (Sentry). Each processes your data only as necessary to provide its function. We will update this list as our providers change; business customers may request the current sub-processor list at any time
  • Within your workspace. Messages and content you share within groupchats and conversations are visible to other Team Contacts with appropriate access. Your profile information (name, picture, status, and presence) is visible to other members of your workspaces
  • Workspace administrators. The organization that owns a workspace, through its administrators, can access, export, and delete content in that workspace, including your messages, files, call transcripts, and AI Contact activity, and can see workspace usage and billing information
  • Recipients of messages you or your AI Contacts send. When you, or an AI Contact acting on your instructions, send an email, text, or message to someone, that person receives the content and sender information, including through third-party platforms such as email providers, mobile carriers, or Instagram
  • Third-party agents and integrations you authorize. As described in Sections 4 and 6
  • Legal requirements. We may disclose information when required by law, legal process, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others
  • Business transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy protections

6. Third-Party Integrations

When you connect third-party applications to your Sila workspace, those services may have their own privacy policies and data practices. We encourage you to review the privacy policies of any third-party services you connect. Sila is not responsible for the privacy practices of third-party services. Data shared with integrations is governed by both this Privacy Policy and the third party’s policies.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you or your workspace administrator delete data, we remove it from our active systems within a reasonable timeframe, and copies in backups are overwritten on a rolling basis within thirty (30) days. Messages in expiring groupchats are deleted automatically on the schedule the groupchat sets. Call transcripts and meeting notes are retained as workspace content until deleted. Integration access tokens are deleted when you disconnect the integration, and voice models are deleted when you delete the associated presenter. Billing records, policy-acceptance records, and security logs are kept for as long as required for legal, tax, and security purposes. You may request deletion of your account and associated data at any time by contacting us. See Delete Your Account for step-by-step instructions and what is deleted or kept.

8. Data Security

We implement robust technical and organizational measures to protect your information, including:

  • Encryption of data in transit (TLS) and encryption at rest
  • Regular security assessments
  • Access controls and authentication mechanisms
  • SOC 2 compliance (in progress) to meet industry-standard security and privacy controls
  • Monitoring and logging to detect and respond to security incidents

While we strive to protect your data, no method of transmission or storage is completely secure. We cannot guarantee absolute security but are committed to continuously improving our security posture.

Incident notification. If we become aware of a security breach affecting your personal information, we will notify affected customers and, where required, regulators without undue delay and consistent with applicable law, and will provide information about the nature of the incident and the steps we are taking in response.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access. Request a copy of the personal information we hold about you
  • Correction. Request correction of inaccurate or incomplete information
  • Deletion. Request deletion of your personal information, subject to certain legal exceptions
  • Portability. Request your data in a structured, machine-readable format
  • Objection. Object to certain processing of your personal information
  • Restriction. Request restriction of processing in certain circumstances

How to exercise your rights. Email sila@silahq.com from the address on your account, or use the in-app settings described on our Delete Your Account page. We will verify your identity before acting, respond within the time required by law (generally 30 to 45 days), and will not discriminate against you for exercising your rights. You may designate an authorized agent to make a request on your behalf; we will ask for proof of that authorization. Where Sila processes data as a processor on behalf of the organization that owns your workspace, we will forward your request to that organization and assist it in responding.

California residents (CCPA/CPRA). You have the right to know what personal information we collect, request deletion or correction, and opt out of the sale or sharing of personal information. We do not sell personal information and do not share it for cross-context behavioral advertising. We treat opt-out preference signals such as Global Privacy Control (GPC) as a valid request to opt out of any sharing of personal information. In the preceding twelve months we have collected the categories of personal information described in Section 2 from the sources described there, for the purposes in Section 3, and disclosed them to the categories of recipients in Section 5. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA. California’s “Shine the Light” law also lets you request information about any disclosure of personal information to third parties for their direct marketing purposes; we make no such disclosures.

Other U.S. states. If you reside in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another state with a comprehensive privacy law, you have rights of access, correction, deletion, portability, and the right to opt out of targeted advertising, sale, and profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in any of those activities. If we decline to act on a request, you may appeal by replying to our response; if your appeal is denied, you may contact your state attorney general.

European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR). You have the rights listed above and the right to withdraw consent at any time where processing is based on consent, without affecting processing that occurred before withdrawal. You also have the right to lodge a complaint with your local supervisory authority, including the UK Information Commissioner’s Office. Our legal bases are: performance of our contract with you (providing the Service); our legitimate interests (securing, improving, and marketing the Service, which we balance against your rights); compliance with legal obligations; and your consent, where we ask for it (for example, analytics cookies and device contacts). You are not required to provide personal information, but some features will not work without it.

Canada. If you are in Canada, you may request access to and correction of your personal information and withdraw consent, subject to legal and contractual restrictions, and may complain to the Office of the Privacy Commissioner of Canada.

10. International Data Transfers

Sila is based in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate. We take appropriate safeguards to ensure that your data is protected in accordance with this Privacy Policy, including the use of standard contractual clauses and other transfer mechanisms where required.

11. Cookies and Tracking

We use cookies and similar technologies in two categories. Essential cookies maintain your session, keep you signed in, and remember your preferences; these are required for the Service to function and cannot be disabled. Analytics cookies help us understand how the Service is used (product analytics and session diagnostics through providers such as PostHog, Google Analytics, and Sentry); these are optional. Our desktop and mobile applications store equivalent session and preference data locally on your device.

If you are located in the European Economic Area, United Kingdom, or Switzerland, analytics cookies are kept off until you accept them through our consent banner, and you may decline them without affecting your use of the Service. Your choice is remembered for twelve (12) months, after which we will ask again. In other regions, analytics are enabled by default and you can limit them through your browser settings. We do not use cookies for third-party advertising purposes.

12. Children’s Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us.

13. Communications Preferences

You can turn push notifications on or off in the app or your device settings, change email notification preferences in your Sila settings, and unsubscribe from marketing email with the link in any message. We will still send you messages that are necessary to operate your account, such as security alerts, billing notices, and changes to these policies. If you have a workspace phone number, people who text it can stop receiving messages by replying STOP.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page with a revised date and, where appropriate, by email or in-app notification. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at sila@silahq.com or visit silahq.com.

Sila Intelligence Inc.
Delaware, United States