Sibyl AI Privacy Policy
Effective October 30, 2024
Sibyl AI is an AI safety and research company working to build reliable, interpretable, and steerable AI systems.
This Privacy Policy explains how we collect, use, disclose, and process your personal data when you use our website and other places where Sibyl AI may act as a data controller and link to this Privacy Policy—for example, when you interact with our products as a consumer for personal use (“Services”) or when Sibyl AI operates and provides our commercial customers and their end users with access to our commercial products, such as the Sibyl Basic plan (“Commercial Services”).
This Privacy Policy also describes your privacy rights. More information about your rights, and how to exercise them, is set out in the “Rights and Choices” section.
If you are located in Canada, please read section 8 of the Privacy Policy which applies to you.
If you are located in Brazil, please read section 9 of the Privacy Policy which applies to you.
1. Collection of Personal Data
We collect the following categories of personal data:
Personal data you provide to us directly
Identity and Contact Data: Sibyl AI collects identifiers, such as your name, email address, and phone number when you sign up for a Sibyl AI account, or to receive information on our Services. We may also collect or generate indirect identifiers (e.g., “USER12345”).
Payment Information: We may collect your payment information if you choose to purchase access to Sibyl AI’s products and services.
Inputs and Outputs: Our AI services allow you to prompt the Services in a variety of media including but not limited to the format of text, files and documents, photos and images, and other materials along with the metadata and other information contained therein (“Prompts” or “Inputs”), which generate responses (“Outputs” or “Completions”) based on your Inputs. If you include personal data in your Inputs, we will collect that information and this information may be reproduced in your Outputs.
Feedback on your use of our Services: We appreciate feedback, including ideas and suggestions for improvement or rating an Output in response to an Input (“Feedback”). If you rate an Output in response to an Input—for example, by using the thumbs up/thumbs down icon—we will store the related conversation as part of your Feedback.
Communication Information: If you communicate with us, including via our social media accounts, we collect your name, contact information, and the contents of any messages you send.
Personal data we receive automatically from your use of the Services
When you use the Services, we also receive certain technical data automatically (described below, collectively “Technical Information”). This includes:
Device and Connection Information: Consistent with your device or browser permissions, your device or browser automatically sends us information about when and how you install, access, or use our Services. This includes information such as your device type, operating system information, browser information and web page referrers, mobile network, connection information, mobile operator or internet service provider (ISP), time zone setting, IP address (including information about the location of the device derived from your IP address), identifiers (including device or advertising identifiers, probabilistic identifiers, and other unique personal or online identifiers).
Usage Information: We collect information about your use of the Services, such as the dates and times of access, browsing history, search, information about the links you click, pages you view, and other information about how you use the Services, and technology on the devices you use to access the Services.
Log and Troubleshooting Information: We collect information about how our Services are performing when you use them. This information includes log files. If you or your device experiences an error, we may collect information about the error, the time the error occurred, the feature being used, the state of the application when the error occurred, and any communications or content provided at the time the error occurred.
Cookies & Similar Technologies: We and our service providers use cookies, scripts, or similar technologies (“Cookies”) to manage the Services and to collect information about you and your use of the Services. These technologies help us to recognize you, customize or personalize your experience, market additional products or services to you, and analyze the use of our Services to make them safer and more useful to you. For more details about how we use these technologies, and your opt-out controls and other options, please visit our Cookie Policy.
Personal data we collect or receive to train our models
Sibyl AI obtains personal data from third-party sources in order to train our models. Specifically, we train our models using data from three sources:
Publicly available information via the Internet
We take steps to minimize the privacy impact on individuals through the training process.
2. Uses of Personal Data Permitted Under Applicable Data Protection Laws
We will only use your personal data in accordance with applicable laws. We rely on the following grounds where permitted under and in accordance with data protection laws, such as in the European Union (our “Legal Bases”):
Where we need it to perform a contract with you. For example, we process Identity and Contact Data, Inputs, Outputs, and Payment Information in order to provide Services to you. In circumstances where we do not have a contract with you, such as where you are an end user of our Commercial Services, we instead rely on our legitimate interests.
Where it is necessary for our legitimate interests (or those of a third party) and your interests and rights do not override our interests. Our legitimate interests include:
providing, maintaining, and improving our products and services;
detecting, preventing, and enforcing violations of our terms including misuse of services, fraud, abuse, and other trust and safety protocols; and
protecting our rights and the rights of others.
Where you have given us your consent. You have the right to withdraw your consent at any time.
Where we need to comply with our legal obligations.
We will not use your Inputs or Outputs to train our models, unless: (1) your conversations are flagged for Trust & Safety review (in which case we may use or analyze them to improve our ability to detect and enforce our Usage Policy, including training models for use by our Trust and Safety team, consistent with Sibyl AI’s safety mission), or (2) you’ve explicitly reported the materials to us (for example via our feedback mechanisms), or (3) you’ve otherwise explicitly opted in to the use of your Inputs and Outputs for training purposes.
3. How We Disclose Personal Data
Sibyl AI will disclose personal data to the following categories of third parties for the purposes explained in this Policy:
Service providers & business partners. Sibyl AI may disclose the categories of personal data described above with service providers and business partners for a variety of business purposes, including website and data hosting, ensuring compliance with industry standards, research, auditing, and data processing.
Sibyl AI may also disclose personal data in the following circumstances:
Third-Party Websites and Services. Our Services may involve integrations with, or may direct you to, websites, apps, and services managed by third parties. By interacting with these third parties, you are providing information directly to the third party and not Sibyl AI and are subject to the third party’s privacy policy. If we link to a site or service via our Services, you should read their data usage policies or other documentation. Our linking to another site or service doesn’t mean we endorse it or speak for that third party.
Pursuant to regulatory or legal requirements, safety, rights of others, and to enforce our rights or our terms. We may disclose personal data to governmental regulatory authorities as required by law, including for legal, tax, or accounting purposes, in response to their requests for such information or to assist in investigations. We may also disclose personal data to third parties in connection with claims, disputes, or litigation, when otherwise permitted or required by law, or if we determine its disclosure is necessary to protect the health and safety of you or any other person, to protect against fraud or credit risk, to enforce our legal rights or the legal rights of others, or to enforce contractual commitments that you have made.
With an individual’s consent. Sibyl AI will otherwise disclose personal data when an individual gives us permission or directs us to disclose this information.
You can find information on our Subprocessor List about the third parties Sibyl AI engages to help us process personal data provided to us where Sibyl AI acts as a data processor, such as with respect to personal data we receive, process, store, or host when you use Sibyl AI’s commercial services.
4. Rights and Choices
Subject to applicable law and depending on where you reside, you may have some rights regarding your personal data, as described further below. We make efforts to respond to such requests. However, please be aware that these rights are limited, and that the process by which we may need to action your requests regarding our training dataset is complex. Sibyl AI will not discriminate based on the exercising of privacy rights you may have.
To exercise your rights, you or an authorized agent may submit a request by emailing us at support(at)sibyls.ai. After we receive your request, we may verify it by requesting information sufficient to confirm your identity. You may also have the right to appeal requests that we deny by emailing support(at)sibyls.ai.
Rights under applicable data protection laws may include:
Right to know. You may have the right to know what personal data Sibyl AI processes about you, including the categories of personal data, the categories of sources from which it is collected, the business or commercial purposes for collection, and the categories of third parties to whom we disclose it.
Access & data portability. You may have the right to request a copy of the personal data Sibyl AI processes about you, subject to certain exceptions and conditions. In certain cases and subject to applicable law, you have the right to port your information.
Deletion. You may have the right to request that we delete personal data collected from you when you use our Services, subject to certain exceptions. You also are able to delete individual conversations, which will be removed immediately from your conversation history and automatically deleted from our back-end within 30 days.
Correction. You may have the right to request that we correct inaccurate personal data Sibyl AI retains about you, subject to certain exceptions.
Objection. You may have a right to object to the processing of your personal data, including profiling conducted on grounds of public or legitimate interest.
Restriction. You have the right to restrict our processing of your personal data in certain circumstances.
Withdrawal of consent. Where Sibyl AI’s processing of your personal data is based on consent, you have the right to withdraw your consent.
Automated decision-making. Sibyl AI does not engage in decision making based solely on automated processing or profiling in a manner that produces a legal effect or significantly affects you in a similar way.
5. Data Transfers
When you access our website or Services, your personal data may be transferred to our servers in the US, or to other countries outside the European Economic Area (“EEA”) and the UK. This may be a direct provision of your personal data to us, or a transfer that we or a third party make (the latter being a “Transfer”).
When you access our website or Services, your personal data may be transferred to our servers in the US or to other countries, as needed to provide the Services. We ensure that your data benefits from an adequate level of protection by relying on standard contractual clauses and other appropriate safeguards in accordance with U.S. data protection laws.
In certain situations, we rely on derogations provided for under applicable data protection law to transfer information to a third country.
6. Data Retention and Data Lifecycle
Sibyl AI retains your personal data for as long as reasonably necessary for the purposes and criteria outlined in this Privacy Policy and explained further in our support center.
When the personal data collected is no longer required by us, we and our service providers will perform the necessary procedures for destroying, deleting, erasing, or converting it into an anonymous form as permitted or required under applicable laws.
7. Face Data Retention Policy
“We do not retain face data. Any facial data collected for Faceswap purposes is processed solely for immediate use and is not stored on our systems. This data is purged immediately after the specified purpose is fulfilled. By adhering to this policy, we ensure compliance with applicable data protection and privacy laws. We employ security measures to prevent unauthorized access, use, or disclosure of face data, aligning with our commitment to protecting user privacy.
8. Children
Our Services are not directed towards, and we do not knowingly collect, use, disclose, sell, or share any information about, children under the age of 18. If you become aware that a child under the age of 18 has provided any personal data to us while using our Services, please email us at support(at)sibyls.ai and we will investigate the matter and, if appropriate, delete the personal data.
9. Supplemental Disclosures for Residents of Canada
These supplemental disclosures contain additional information relevant to residents of Canada. This content should be read in conjunction with the rest of our Privacy Policy. In case of conflict between our Privacy Policy and these supplemental disclosures, the supplemental disclosures shall prevail in relation to residents of Canada.
Consent. By expressly consenting to this Privacy Policy, you confirm you have read, understand, and consent to the collection, use, processing, and disclosure of your personal data in accordance with this Privacy Policy.
Cross-jurisdictional Transfers. By providing us with personal data, you acknowledge and agree that your personal data may be transferred or disclosed to other jurisdictions for processing and storage outside of Canada.
Contact. If you have any questions or comments about our processing of your personal data, or to exercise your rights as outlined in Section 4 (“Rights and Choices”), please contact us at support(at)sibyls.ai.
10. Supplemental Disclosures for Residents of Brazil
These supplemental disclosures contain additional information relevant to residents of Brazil. This content should be read in conjunction with the rest of our Privacy Policy. In case of conflict between our Privacy Policy and these supplemental disclosures, the supplemental disclosures shall prevail in relation to residents of Brazil.
Legal Bases. Depending on the specific purpose of the processing, we may rely on different grounds than those listed under section 2, where permitted by and in accordance with the Brazilian General Data Protection Law (LGPD).
Data Subject’s Rights. LGPD grants certain rights regarding your personal data, which differ from the ones listed under section 4.
International Data Transfers. You acknowledge that Sibyl AI is a company based in and headquartered in the United States and that any information we hold about you will be transferred to, used, processed, and stored in the United States and other countries and territories.
11. Changes to Our Privacy Policy
Sibyl AI may update this Privacy Policy from time to time. We will notify you of any material changes to this Privacy Policy, as appropriate, and update the Effective Date at the top of our Privacy Policy page. We encourage you to review that page for updates when you access the Services.
12. Contact Information
If you have any questions about this Privacy Policy, or have any questions, complaints, or requests regarding your personal data, you can contact us as described below:
Sibyls AI
3100 Interstate North Circle Southeast Suite 200
Atlanta, Georgia 30339
Email: support(at)sibyls.ai
Please note that under many countries’ laws, you have the right to lodge a complaint with the supervisory authority in the place in which you live or work. If you live in Brazil, you have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD).