PRIVACY
POLICY.
Privacy is a right, not a feature. Here's exactly what we collect, why, and how we protect it — in plain English.
1. Who We Are
Siela ("we", "our", "us") operates an AI-powered personal assistant accessible via WhatsApp. Our registered contact email is hii@siela.in. By using Siela, you agree to this Privacy Policy.
2. Data We Collect
We collect only what is necessary to provide the service: • WhatsApp phone number and profile name (to identify your account) • Messages and commands you send to Siela (reminders, notes, tasks, calendar entries) • OAuth tokens from Google or Microsoft (when you connect your calendar or email) • Meeting transcriptions (only when you use the Meeting Bot feature and explicitly start a recording) • Usage metadata (message timestamps, feature usage counts for rate limiting and billing) • Google Workspace data (emails, calendar events, documents, contacts, tasks) — ONLY when you explicitly connect your Google account and ONLY the specific data you ask Siela to access. We never passively read or store your entire mailbox or calendar. • Microsoft 365 data (Outlook emails, calendar) — ONLY when you explicitly connect your Microsoft account and on the same conditions as above. We do NOT collect passwords. We do NOT passively read your inbox. We do NOT sell your data.
3. How We Use Your Data
Your data is used solely to: • Respond to your commands and provide the features you request • Send you reminders, summaries, and briefings you have set up • Sync with Google Calendar, Gmail, Outlook, or Zoom on your behalf (only when you ask) • Improve service reliability and debug errors (using anonymised logs) • Process payments and manage your subscription We do not use your data to train AI models without your explicit consent.
4. Data Storage & Security
• All OAuth tokens are encrypted at rest using AES-256-GCM encryption (authenticated encryption that also verifies data integrity) • All data is transmitted over HTTPS / TLS • Rate limiting is enforced (30 messages/minute per user) to prevent abuse • SSRF protection is enforced on all external API calls • Access to production data is restricted to authorised personnel only • We use Supabase (hosted on AWS) as our primary database, which maintains SOC 2 compliance
5. Third-Party Integrations
When you connect third-party accounts, you grant Siela OAuth access scopes you explicitly approve: • Google (Calendar, Gmail, Meet): governed by Google's Privacy Policy • Microsoft (Outlook): governed by Microsoft's Privacy Policy • WhatsApp: governed by Meta's Privacy Policy • Zoom: governed by Zoom's Privacy Policy • Razorpay (payments): governed by Razorpay's Privacy Policy We only request the minimum permissions required. You can revoke any integration at any time.
6. Google API Services — Limited Use Disclosure
Siela's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we affirm that: • We only use your Google user data to provide or improve user-facing features that are prominent in Siela's WhatsApp interface (reminders, email management, calendar events, document access, contact resolution, etc.). • We do NOT transfer your Google user data to third parties except as necessary to provide or improve these user-facing features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets (with prior user notification). • We do NOT use your Google user data to serve advertisements of any kind. • We do NOT allow humans to read your Google user data unless: - We have your affirmative consent for specific messages - It is necessary for security purposes (e.g., investigating abuse) - It is necessary to comply with applicable law - The data is aggregated and anonymized, used only for internal operations • We do NOT use your Google user data to train AI models, develop generalized AI/ML models, or for any purpose other than providing you the Siela service. You can revoke Siela's access to your Google account at any time by visiting https://myaccount.google.com/permissions or by messaging Siela "disconnect google". For more details on Google's requirements, see the Google API Services User Data Policy: https://developers.google.com/terms/api-services-user-data-policy
7. Data Retention & Deletion
• Active account data is retained for as long as your account is active • If you cancel your account or request deletion, all your data — reminders, memories, notes, contacts, conversation history, and connected account tokens — is permanently deleted within 30 days • Billing records may be retained for up to 7 years as required by Indian tax law • You can request deletion by emailing hii@siela.in
8. Your Rights
You have the right to: • Access a copy of the personal data we hold about you • Correct inaccurate data • Request deletion of your data ("right to be forgotten") • Withdraw consent for any integration at any time • Object to processing of your data for certain purposes To exercise any of these rights, contact us at hii@siela.in. We will respond within 30 days.
9. Cookies
The Siela marketing website (siela.in) uses minimal, essential cookies only — no third-party tracking cookies, no advertising cookies. The WhatsApp-based assistant does not use cookies.
10. Children's Privacy
Siela is not intended for users under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact hii@siela.in and we will delete it immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will notify you via WhatsApp message and update the "Last updated" date below. Continued use of Siela after changes constitutes acceptance of the updated policy.
12. Contact Us
For any privacy-related questions, requests, or concerns: Email: hii@siela.in We aim to respond to all privacy inquiries within 3 business days.
ASK A
HUMAN.
Email us. A real person will read it and reply within 3 business days.