Terms of service

Your account

You must be 18 or older and provide accurate details. Keep your credentials secure and tell us promptly if an account is compromised. You are responsible for activity under your account.

Connected channels

Connect only accounts you own or are authorised to use, and follow the terms of those services. Your authorisation covers writing as well as reading: on a connected calendar SlyOS creates events at your direction, including adding the people you name as attendees by email address. Some providers restrict automated access; where a channel becomes unavailable through a provider change, we will tell you, and you may change your plan or cancel.

Drafts and responsibility

SlyOS generates suggestions. By default nothing is sent automatically: every draft waits for you. You may switch on automatic replies separately for each channel you name, in Agent settings; nothing is switched on to begin with, and a draft the product has held back for review is never sent automatically even on a channel you have switched on. Drafts may contain errors, so review before sending — you are the author of every message that leaves your account, whether you pressed Send or switched on automatic replies for the channel it left on, and you are responsible for its content and consequences.

Automatic replies are part of a paid plan and are available today on Telegram only. An automatic reply carries the text of the draft and nothing else — a file is never sent on your behalf. We may narrow or withdraw the channels this is available on.

Plans and what they limit

Paid plans are billed monthly in advance and include unlimited AI drafting: no plan caps how many drafts you may generate, and what a plan costs does not change with how much you use it. Plans differ by how many channels you may connect, how many of those may be a channel on a device such as iMessage, SMS or WhatsApp, how large a document you may upload, whether the relationship insights are shown in full or only as a sample, and whether SlyOS may reply on your behalf — automatic replies are not part of the free plan. The free Preview plan includes two channels.

Drafting is not metered on a paid plan: no paid plan limits how many drafts you may generate or how many messages you may send. That is a decision we have taken for now rather than a permanent term — if we introduce a drafting allowance on a paid plan we will tell you before it applies to your account. On the free Preview plan, drafting draws on the AI allowance described below and pauses when that allowance is used up. Nothing you have already written or received is removed when you change plan.

The assistant and the work SlyOS does in the background have an allowance. Asking the SlyOS assistant, and the work it does without being asked — finding to-dos, building its memory, reading files — draws on an AI allowance that comes with your plan. It has a weekly limit and a monthly limit, shown as percentages in Settings and in the assistant, each with the date it resets. When either is used up, the assistant and that background work pause until it resets, or until you add extra usage; on a paid plan, drafting replies carries on regardless.

The Developer API is metered separately from your plan. The Developer API — a key you point your own helpdesk, ticketing system or app at — is a separate product, sold on its own and charged per use: you buy credit in advance through our payment provider, and each reply it generates on a live key is charged against that credit. The sandbox is free, and so is everything that is not a generated reply — sending messages in, reading them back, checking your balance, reporting what you sent, and retrying a call that timed out. What a reply costs is published at slyos.world/docs/developer-api and on the Developer screen in the app.

Extra usage

On a paid plan you can buy extra usage on the web or in the Mac app. Each pack adds 25% of your plan’s monthly AI allowance, at the price shown before you pay — today US$5 on Premium, US$9 on Premium Plus and US$29 on Premium Unlimited, plus any tax due. It is a one-off payment, not a subscription. Extra usage is drawn only once your plan’s weekly or monthly allowance is used up; it does not expire while your account is open, it cannot be exchanged for money or moved to another account, and it ends when your account is deleted. If the payment is refunded or disputed, the matching extra usage is removed, up to what is left of it.

Inviting a friend

You can share a personal invite link. If someone creates their SlyOS account through your link and then makes their first payment for a paid plan, you and they each receive extra usage worth US$10 of AI processing, shown in SlyOS as a percentage of your monthly allowance. It is credited 14 days after that payment, and only if the payment has not been refunded or disputed by then; if it is refunded or disputed later, the reward is removed, up to what is left of it. No reward is given for inviting yourself or an account you control, we may hold or refuse a reward we have reason to think is not a genuine new customer, and at most ten rewards a year are credited automatically. A reward is extra usage, never cash, and it is subject to the section above.

Cancellation and refunds

Billing is handled on the web. Sign in at slyos.world, open Settings, and you can change your plan, update your card or cancel through our payment provider’s own page. The Android app links out to that page; the iPhone app carries no billing control, and the Mac companion reaches the same page by opening the SlyOS panel. Cancel at any time and access continues to the end of the period you have paid for. Partial months are not refunded except where required by law.

Deleting your account also cancels a paid subscription, at the moment of deletion and without refunding the period you have already paid for. If you want the rest of the period you have bought, cancel first and delete later. If the cancellation cannot be reached at that moment we still delete your account — an erasure is not held up because a payment provider is unavailable — so check with us that the subscription stopped.

Acceptable use

Do not use SlyOS for spam, harassment, unlawful content, or to impersonate someone else, and do not deceive anyone about who is writing — other than by using the automatic reply setting itself, which we offer to you and which you switch on yourself. Be aware of what that looks like at the other end: on Telegram, the only channel it is available on today, the reply is delivered by the bot you connected rather than from your personal account, so it carries that bot’s name. We do not add a marker saying a message was written automatically. Do not attempt to reverse engineer, resell or overload the service.

Ownership and the permission you give us

Your messages, drafts and voice profile remain yours. SlyOS retains all rights to the software, brand and interface. We claim no ownership over anything you write or send.

Running the product requires more than permission to read. So that we can operate SlyOS for you, you grant Belto a non-exclusive, royalty-free, worldwide licence to host, copy, store, index, transmit and display the messages, attachments, documents and other content you connect or upload, and to create from them the material the product is built out of — a search index, a summary, an extracted fact, and the voice profile that makes a draft sound like you.

That licence is limited to operating SlyOS for you, and it is limited in four ways we hold ourselves to. Belto trains no model on your content; what a model provider may do with what we send it is governed by that provider’s own published terms, which we have not overridden by a separate agreement. We do not use your content to serve another customer. We do not sublicence it to anyone except the providers we have engaged to run the service — the hosting, database, storage, model, push and delivery providers published at slyos.world/legal/subprocessors — and then only so far as they need it to do the job we engaged them for. And we do not sell it. Sending a message to a channel you connected necessarily hands it to that channel’s operator, whose own terms govern what happens next; see Third-party services below.

The licence ends when you delete the content or your account, with three exceptions we would rather state than quietly rely on: it continues for copies already transmitted to the providers named in that register, which are governed by those providers’ own terms and which we cannot ask back; it continues for seven days in the recovery history our database provider keeps; and for our security log it does not end at all. Deleting removes the content from the live service at once, and the bytes of an uploaded file from storage within minutes, when the job that clears them next runs. But that history still holds the database as it stood before you deleted, and we can neither edit that history nor lift one account’s content out of it — so for seven days what you deleted is still sitting somewhere it could be restored from, and the permission you gave us has to cover it there. After seven days our database provider has no restorable copy of it left, and the permission that covered it there is finished.

The third exception is the one to read twice, because nothing runs out on it. We keep an append-only security log of administrative actions — a sign-in, a channel connected, a settings change, a send, a deletion. No one can edit or delete an entry, including us, and no job expires one. When you delete your account the columns naming you are cleared, but the entries stay, and they carry the IP address and the browser or app string the action came from. Some of them also carry a conversation’s subject line, the name of a file you uploaded, or the address of a mailbox you connected. That is your content, and we hold it after the rest of the permission has ended, with no date on which it expires.

Availability and liability

The service is provided as is. We work to keep it available but do not guarantee uninterrupted access. To the extent permitted by law, our liability is limited to the fees you paid in the preceding twelve months.

Changes and contact

We will give notice before material changes take effect. Questions about these terms go to support@belto.world or the contact form.

Access to your device and your messages

SlyOS reads the accounts and devices you connect so that it can draft on your behalf. On macOS the companion application may request Full Disk Access, which macOS requires in order to read local message databases such as Messages. You grant that permission yourself in System Settings, you can withdraw it at any time, and SlyOS uses it only to read the message data described in the Privacy Policy — which includes the files attached to those messages, read off the disk and uploaded with them, not merely a note that a file arrived.

You confirm that you are entitled to grant this access and to let SlyOS read the accounts you connect, including where those accounts contain messages from other people. Where the law of your jurisdiction requires the consent of the other party to a communication, obtaining that consent is your responsibility and not ours.

You remain responsible for the security of the device on which the companion runs. We are not responsible for loss arising from a device you do not control, an operating system you have modified, or credentials you have shared.

Drafts, artificial intelligence and your responsibility

SlyOS produces drafts using automated systems, including large language models. Automated output can be wrong, incomplete, out of date, or inappropriate. Nothing SlyOS produces is legal, financial, medical, tax or professional advice, and it is not a substitute for your own judgement.

A draft is not sent until you send it, or until it is sent by an automatic reply you switched on for that channel. In either case you adopt that message as your own and you are its author for every purpose, including as against the recipient and as against any regulator. You are solely responsible for reviewing each draft before sending, for the accuracy of what it says, and for the consequences of sending it. Switching on automatic replies for a channel means accepting that responsibility for messages you have not read first.

You accept that SlyOS may misread a conversation, may attribute something to the wrong person, and may generate text that resembles text generated for another user. We give no assurance that output is unique or original.

Acting on your behalf

When you ask SlyOS to do something, you are authorising it to do that thing as your agent. Anything it does with that authority — a message it sends, a meeting it books, a form it fills in, a button it presses on a site you are signed in to, a purchase you pressed for — is your act, and you are responsible for it as if you had done it yourself. That is true whether you pressed something first or whether you had switched on one of the settings described below.

By default it prepares and you press. Drafts wait and meetings are proposed. On a website, SlyOS clicks and types for you in a browser you can watch and take over in SlyOS, and when it comes to something that would send, post, book or pay, it stops and waits for you to press it, on a card below the page. A page can still send something by itself — as SlyOS types, or a while after it clicks — and SlyOS cannot always stop that.

You can change some of this in Settings, under “What SlyOS may do on its own”, where putting meetings in your calendar and inviting the guests, sending a message you asked for in your own words without showing you the draft first, and building changes into your Lovable projects are each switched on separately and by name. Each is off until you switch it on. Switching one on is a grant of standing authority for that kind of action until you switch it off, and you can switch any of them off at any time. The switch for websites changes nothing today: whether it is on or off, SlyOS works on websites exactly as described above.

These settings exist because SlyOS runs on devices with no screen — smart glasses and the SlyOS keyring, where you speak and there is nothing to press. If you use SlyOS on such a device you should expect to switch on whatever that device needs, and to accept that things will then happen without a further step from you. A purchase is never one of those things: whichever device you ask from, it waits for your press on its card in SlyOS.

A purchase always waits for your own press, and no switch covers one. When SlyOS is about to press something it can tell would buy — pay, place an order, book, reserve, subscribe, upgrade, renew, donate, pre-order or start a trial — or anything at all on a checkout or payment page, it stops first. A card below the page says so: “This is a purchase: pressing it will spend money.” Where only the page makes it one, the card says “This is on a checkout or payment page: pressing it may spend money.” It shows the amount as the page shows it, or says “SlyOS could not read the amount on the page.” An older version of the SlyOS app for iPhone or Android shows the same card without these lines, so update the app before you buy with it. Nothing goes ahead until you press that card, and every purchase needs a press of its own: no switch, no earlier yes and nothing you told SlyOS stands in for it. If nobody presses the card, SlyOS does not press the button it stopped at.

Some things SlyOS refuses, even if you press. When SlyOS can tell that pressing something would move money without buying anything — a transfer, sending money to a person, paying a bill or a balance, a top-up, a deposit or a withdrawal, cryptocurrency, or a trade — or would add or save a card, a bank account or any other way to pay, it refuses, even if you press. It does not type into a box it can tell is for a card number, a security code or a password: when a page asks for one, you type it yourself on the live view. It cannot always tell: a button that pays a bill, an invoice or a deposit but says only “Pay now” is treated as a purchase, and waits on a card for your press like any other.

Your press is your decision to buy, and the purchase is yours, made between you and the site you buy from. We are not the seller and we do not take the payment; the price you are charged, what arrives and any refund are between you and that site. SlyOS tells a purchase, and money that buys nothing, from the words on the button and on the page, and it reads the amount off the page, so it can get any of these wrong — look at the page before you press.

SlyOS is built by automated systems and it will sometimes be wrong. It can misread what you asked for, click the wrong thing, write to the wrong person, miss that a button will spend money, or take an instruction from a web page that was written to mislead it. You accept that risk when you grant standing authority or press a card, and to the extent the law allows, our liability for anything SlyOS does under authority you granted, or on your press, is limited exactly as set out under Limitation of liability below.

Do not give SlyOS authority over anything you are not prepared to lose or to have done wrongly. It is not a substitute for your own judgement on anything that moves money, ends a relationship, or cannot be undone.

Websites SlyOS signs in to for you

SlyOS can browse the web on a machine we run, and can be signed in to sites on your behalf. When a site asks for a sign-in, you do it yourself on a live view of that page; we keep the session it produced, encrypted, so that SlyOS does not have to ask again. We never ask for, receive or store your password. You can see every site SlyOS holds a session for, and remove any of them, in Settings; removing one signs SlyOS out there immediately.

Those sites have their own terms, and they bind you, not us. Many websites restrict automated access, scraping, or the use of an account by anything other than a person. You are responsible for making sure that what you ask SlyOS to do on a site is permitted by that site’s terms, and for any consequence if it is not — including a site suspending or closing your account there. We do not review those terms for you, we make no promise that any particular site permits this, and we are not liable for what a site does about it.

You must not use this to break into an account that is not yours, to get around a security control, a paywall or a rate limit, or to do anything on a site that you could not lawfully do yourself. That is part of Acceptable use.

Third-party services

SlyOS connects to services operated by others, including Google, Apple, Meta, Telegram, LinkedIn, Microsoft and payment providers. Your use of those services is governed by their own terms, and some of them restrict automated access. We are not a party to those agreements and we are not responsible for those services, for their availability, or for any action they take against your account, including suspension or termination.

A provider may change or withdraw access at any time and without notice to us. Where that makes a channel unavailable, we will tell you. You may then change your plan or cancel, and your plan will cost what the plan you move to costs; we do not undertake to adjust your existing plan automatically, and we have no process today that does so.

Fees, billing and taxes

Paid plans are billed in advance on a recurring basis through our payment processor until cancelled. By subscribing you authorise recurring charges to your payment method. Prices are exclusive of taxes, and you are responsible for any sales, use, VAT, GST or similar taxes other than taxes on our income. Credit for the Developer API is a separate purchase and is not part of that recurring authorisation: you buy it as a one-off payment at checkout, each time, as described under Plans and what they limit above.

Where we are required to collect sales tax, VAT or GST, it is calculated at checkout from the billing address you give, added to the price rather than taken out of it, and accounted for by us to the relevant authority. That is why checkout asks for an address. The same is true of a top-up, so in a taxed jurisdiction the amount taken from your card is larger than the credit: what we credit is the amount you asked for, not the amount charged.

We may change prices on notice; a change takes effect at your next renewal, and continuing to use a paid plan after that is acceptance of the new price. If a payment fails we may suspend or downgrade the account.

Cancellation, refunds and termination

You may cancel at any time, effective at the end of the period you have paid for. Fees already paid are non-refundable except where refund is required by law, and we do not refund partial periods, unused allowances, extra usage you have bought, or periods in which you did not use the service.

We may suspend or terminate your account if you breach these terms, if we are required to by law or by a provider, if your use threatens the security or integrity of the service, or if we discontinue the service. We will give you notice before we do so, unless the law, a provider, or an immediate threat to the service prevents it.

Export your data before your access ends. Export is available from Settings, and only from Settings, so you have it for as long as you can sign in and reach that screen. A suspended or closed account cannot sign in — so the export is out of reach at exactly the moment you would reach for it. There is a second moment it is out of reach, and it is not rare: when we change these documents, the app goes behind an acceptance screen on every device until you accept, and that screen offers three things — accept, sign out, or delete your account. Export is not one of them, so an update waiting for your acceptance sits in front of the export too. Closing or suspending an account does not by itself delete what we hold; it stops you using SlyOS. Deletion is a separate act, taken from Settings by a signed-in account holder or from that acceptance screen, and what it removes is described in the Privacy Policy.

How long we keep your messages

Your account carries a retention period, and it applies while the account is live — it is not only about deletion. Unless a different period is set on your account it is 365 days, counted from the date each message was sent, and it can never be shorter than 7 days. The iPhone and Android apps show the period that applies to your account; no app currently offers a control to change it, so if you want a different window, ask us.

When a message passes that window we remove its text permanently, together with its search index, its attachments, and anything we extracted from them — a filename, a caption, a summary, a transcript, a link. In the live service this cannot be undone. It is not instant everywhere, and the licence section above says why: our database provider keeps seven days of history it can restore the database from, so for seven days after we remove all of that the database can still be put back to a moment when it was there. Read that as covering more than the words. The filename, the caption, the summary, the transcript and the text we read out of a document are ordinary columns of that database, so the contents of a file you sent sit in the history exactly as the message text does. That is not the same seven days as the minimum above — that one is the shortest retention window an account can carry, this one is how far back our provider can rewind the database. We do not edit that history and we do not lift one message out of it, so for those seven days we are waiting for all of it to age out of the history rather than erasing it from there. After seven days the provider has nothing left to restore it from. The message itself remains as a record, so counts and timings survive and your dashboard keeps its history; the words do not. Export what you want to keep before it expires; the Privacy Policy lists what an export leaves out.

Assumption of risk and waiver

You use SlyOS at your own risk. You understand that the service reads your private communications, that it drafts messages that may be sent to real people, and that errors in that process may cause embarrassment, disputes, missed obligations, damage to relationships or commercial loss.

To the fullest extent permitted by law, you release, waive and discharge Belto Inc., its officers, directors, employees, contractors, agents and investors from every claim, demand, damage, cost and liability of any kind, whether known or unknown, arising from or connected with your use of SlyOS, the content of any message drafted or sent through it, the accuracy of anything it reports to you, or any access it has to your devices or accounts.

You knowingly waive any statutory provision that would otherwise limit the effect of a general release to claims you know of at the time of signing, including, if applicable, section 1542 of the California Civil Code.

Disclaimer of warranties

SLYOS IS PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTY OF ANY KIND. To the fullest extent permitted by law we disclaim all warranties, express, implied or statutory, including any warranty of merchantability, fitness for a particular purpose, title, non-infringement, accuracy, and any warranty arising from course of dealing or usage of trade.

We do not warrant that the service will be uninterrupted, secure, timely or error-free, that any defect will be corrected, that messages will be read, drafted, delivered or sent, or that anything SlyOS tells you about your own data is complete or correct.

Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW, BELTO INC. WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL, OPPORTUNITY, DATA OR REPUTATION, however caused and on any theory of liability, even if we have been advised of the possibility of such damages.

OUR TOTAL AGGREGATE LIABILITY arising out of or relating to these terms or the service, for all claims combined, will not exceed the greater of the amount you actually paid us in the twelve months immediately before the event giving rise to the claim, or one hundred United States dollars (US$100).

Some jurisdictions do not allow the exclusion of certain warranties or the limitation of certain damages. Where that is so, the exclusions and limitations above apply to the greatest extent the law permits, and nothing in these terms excludes liability for fraud, for fraudulent misrepresentation, or for anything else that cannot lawfully be excluded.

Indemnity

You will defend, indemnify and hold harmless Belto Inc. and its officers, directors, employees, contractors and agents from and against any claim, demand, action, damage, loss, liability, penalty, cost and expense, including reasonable legal fees, arising out of or connected with: your use of SlyOS; any message drafted, sent or not sent through it; your breach of these terms; your breach of any third-party service’s terms; your violation of any law, including any law governing the interception, recording or processing of communications; or your infringement of anyone’s rights.

Governing law and disputes

These terms and any dispute arising out of them are governed by the laws of the State of Delaware, United States, without regard to its conflict of laws rules, and excluding the United Nations Convention on Contracts for the International Sale of Goods.

Any dispute that is not resolved informally within thirty days of written notice will be resolved by final and binding arbitration administered by the American Arbitration Association under its Consumer Arbitration Rules, seated in Wilmington, Delaware, before one arbitrator, in English. Judgment on the award may be entered in any court of competent jurisdiction. Either party may bring an individual claim in small claims court, and either party may seek injunctive relief in court to protect intellectual property or confidential information.

CLASS ACTION WAIVER. Claims may be brought only in your individual capacity, and not as a plaintiff or class member in any purported class, collective, consolidated or representative proceeding. If this waiver is held unenforceable as to a claim, the arbitration agreement does not apply to that claim and it will be heard in the state or federal courts sitting in Delaware, to whose exclusive jurisdiction you consent.

Any claim must be brought within one year of the date it arose, or it is permanently barred, to the extent that limit is permitted by law.

General

If any provision of these terms is held unenforceable, it is severed and the rest remain in force. Our failure to enforce a provision is not a waiver of it. You may not assign these terms; we may assign them to an affiliate or in connection with a merger, acquisition or sale of assets. Neither party is liable for a failure caused by events beyond its reasonable control.

These terms, together with the Privacy Policy, are the entire agreement between you and Belto Inc. about SlyOS and supersede anything said before. Where a short earlier section and a longer later section cover the same subject, the earlier one is a summary and the later one governs. We may update these terms; where a change is material we will give notice in the product or by email, and continuing to use SlyOS after it takes effect is acceptance.