SciblyPrivacy policy
Last updated: 26 October 2026
Who we are
Scibly is a service that searches and answers from the documents, mail and calendars a person or company connects to it. Questions about this policy or your data go to team@scibly.com.
What we access
Your name and email address when you sign in. When you connect a source, read-only access to what you allow: from Google, the files in your Google Drive, the messages in your Gmail, the events in your Google Calendar, and the email addresses and pictures of your Google contacts; likewise from Microsoft 365 and Notion. We never send mail, change files, edit events or change contacts. Your contacts' pictures only show you the attendees of your meetings: we keep them in memory for at most an hour and never store them.
How we use it
Only to provide Scibly to you: we index what we read so that you, and only those who may open it in the source, can search it and get answers drawn from it. We do not sell it, use it for advertising, or use it to train general AI models. No person at Scibly reads it unless you ask us to, or the law requires it.
Your searches
We keep what you search for, in Scibly and through connected apps, so that a workspace's admins can see what its people look for and do not find. We never store who searched: each search carries a code that only tells people apart within one month, and we delete its key when the month ends. From then on, no one can link a search to you. Admins see searches only as topics that at least 4 people searched for in a month. We keep searches as long as the workspace exists.
Google user data
Scibly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Where it goes
Your content is stored on servers in the EU, in a workspace isolated from every other; access tokens are stored encrypted. To index content and answer questions, we send passages to AI model providers through the Vercel AI Gateway, which may process them outside the EU, under terms that forbid training on them. We send email notices through Resend.
Analytics
To learn how people find and use Scibly, we use PostHog, hosted in the EU. On this website it counts page views, how far a page is read and which buttons are clicked, without cookies or anything stored on your device, so it cannot recognise you on a later visit. A demo button opens Calendly's scheduler on this page: only then does Calendly set its own cookies, and it tells us whether a demo was booked. In Scibly it records which features you use, under your account, and the errors you run into, so we can fix them; never the text of what you search, ask or read. PostHog receives your IP address with each event, as any web service does. Our basis is our legitimate interest in improving Scibly (Art. 6(1)(f) GDPR); you may object at team@scibly.com.
How long we keep it
As long as the source stays connected. You can stop our access at any time in your Google account (https://myaccount.google.com/permissions). Write to team@scibly.com and we delete your account and everything we read from your sources within 30 days.
Your rights
Under the GDPR you may ask for a copy of your data, have it corrected or deleted, restrict or object to its processing, and take it with you: write to team@scibly.com. You may also complain to a data protection authority.