Privacy Policy

1. Who we are

Sylus is a software service operated by XAHICO Corporation. We provide an autonomous GitHub engineering system that processes GitHub issues and opens pull requests using AI. When we say "Sylus", "we", "us", or "our" in this policy, we mean XAHICO Corporation.

2. What data we collect

When you use Sylus, we collect the following information:

• GitHub account information — your GitHub username, user ID, and email address, obtained through GitHub OAuth.
• Repository content — source code, issue titles, issue descriptions, and repository structure, accessed via the GitHub API to perform implementation tasks.
• Usage and billing data — credit balance, top-up history, and AI processing costs associated with your account.
• Session data — authentication tokens stored to maintain your session.

3. How we use your data

• To authenticate you via GitHub OAuth and maintain your session.
• To read your GitHub repositories and issues in order to perform implementation work you have requested.
• To process payments via Stripe and maintain your credit balance.
• To track AI processing costs attributable to your account.
• To communicate with you about your account and the status of tasks.

4. AI and third-party LLM providers

Sylus uses third-party large language model (LLM) providers — including but not limited to Anthropic, OpenAI, and Google — to perform AI-driven code generation, analysis, and evaluation. When Sylus processes a task on your repository, your code and issue content may be transmitted to these providers.

Each provider processes data in accordance with their own privacy policies and terms of service. We recommend reviewing the policies of these providers if you have concerns about how your code is handled by AI systems.

5. Payment processing

Payments are processed by Stripe, Inc. We do not store your card number, CVV, or other sensitive payment information. Stripe's handling of your payment data is governed by the Stripe Privacy Policy.

6. Data storage and retention

Account and billing data is stored in Google Firebase (Firestore) with access controls applied. Repository content accessed during task execution is processed in memory and is not retained beyond the duration of the task. Session tokens are invalidated on logout.

7. Your rights

You may request deletion of your account and associated data at any time by contacting us. Upon deletion, your balance, session data, and account information will be removed from our systems. Data already processed by third-party LLM providers may be subject to their own retention policies.

8. Contact

If you have questions about this policy or your data, please contact XAHICO Corporation through our GitHub page at github.com/apps/sylus-ai.