What is deleted

• Every message, thread and draft SlyOS has stored for you.
• Every channel you connected, and the tokens that let SlyOS read them.
• Everything the brain learned about your voice, and every fact it remembered.
• The encryption key held for your account — which covers the logins for the channels you connected and your two-factor secret, not your messages. Destroying it is what makes those two unreadable rather than merely deleted.

What is not deleted

The database as it stood before you deleted. Your account is gone from the live database the moment you delete it, and nothing in SlyOS brings it back. Behind that, our database provider keeps 7 days of history, so the whole database can be wound back to how it stood at an earlier moment — and for 7 days that includes the moment before you deleted. We do not wind it back to undo a deletion. Your messages are in that copy, and so is the encryption key, because destroying the key is one of the changes a rewind would undo. So is what SlyOS holds about your files: their names, the text read out of them, and the transcripts of your voice notes. Once that window has moved past your deletion, our provider has nothing left to restore it from.

Messages you have already sent. They are in the other person’s inbox and on their provider’s servers, and SlyOS cannot reach them there.

Anything you wrote to us. If you used the contact form or joined the waitlist, that message is not filed under an account. Deleting yours clears the one link between the two and leaves the message itself — your name, your address and everything you typed.

Your address, where you asked us not to write to you. An unsubscribe is recorded against the address rather than the account, and it is the only thing keeping you off the next mailing. The record of a marketing email already sent to you keeps your address for the same reason: it is what stops the same one being sent twice.

The security log. Everything done to an account is written to a log that nothing in SlyOS can edit or delete, including us. Deleting your account clears the columns naming you as the person who acted and the person acted on. The rest of the row stays: what was done and when, the IP address and the app or browser it came from, the before and after values of whatever changed, and on some rows your account id, in the column recording which record was touched.

Visits to this website. They are counted separately from accounts and no column in them names one, so deleting an account does not reach them. If you accepted analytics here, those rows carry an id for your browser.

What is not passed on

Deleting your account changes what SlyOS holds. Where there is somebody to tell, it tells them: the subscription is cancelled and each channel provider is asked to hand its access back. What it cannot do is make anybody delete what they already have.

Your subscription. Deleting your account now cancels the subscription too, at the moment of deletion and with no refund of the period you have already paid for — so if you want the rest of that period, cancel first and delete later. What Stripe holds about the payments themselves is NOT removed: an invoice is a record we are required to keep. If the cancellation cannot be reached at that moment your account is still deleted, because an erasure is not held up by a payment provider being unavailable, and you should check with us that the subscription stopped.

The channels you connected. SlyOS deletes the tokens it holds, and now also asks each provider to hand the grant back. What that achieves depends on the provider. Google (Gmail and Calendar) and Slack publish a revocation endpoint and the grant is genuinely withdrawn. Telegram has none, so SlyOS deletes the webhook instead, which stops delivery to your bot. Microsoft and WhatsApp Business publish no revocation endpoint SlyOS can call, so THOSE GRANTS STAY UNTIL YOU REMOVE THEM YOURSELF in the connected-apps settings of those accounts. Every one of these is attempted once and best-effort: if a provider is unreachable your account is still deleted, because an erasure is not held up by somebody else being down.

The model that wrote your drafts. Writing a draft means sending the messages it is replying to, to a model provider. What was sent was already sent, and deleting your account does not ask them for it back.

How to delete it

In the app. On Android, iPhone or Mac, open Settings, scroll to Privacy, and choose “Delete my account”. You will be asked to type your email address to confirm.

Here. Sign in and the same option is on your settings page.

Sign in to delete your account

If you cannot sign in, email support@belto.world from the address on the account and we will delete it for you.