Privacy policy

This policy explains what personal data Silvio processes when you use the silvio.legal website and the Silvio connector (https://mcp.silvio.legal/mcp) from Claude or ChatGPT: why, who receives it, how long it is kept, and how you can exercise your rights. It is governed by Uruguayan Law No. 18.331 on Personal Data Protection and its regulations. The Spanish version prevails.

Last updated: October 1, 2026

Controller

Silvio is a service of Estela (este.la). For any question about your personal data, write to hola@silvio.legal.

Data we process

• Accountyour email address and account identifier, which we receive from Google when you sign in. Google also sends basic profile data (such as name and picture), which stays in our authentication system.
• Connectionwhich application you connected (for example, Claude or ChatGPT), the permissions granted and when access expires. Refresh codes are stored only as a hash (an irreversible fingerprint); access tokens are not stored.
• Query logfor each query your assistant sends to Silvio: date and time, your account, the application, the tool used, the search terms or the norm requested (up to 200 characters per field), whether it succeeded and how long it took.
• Sign-ina technical cookie (silvio_mcp_login) that ties the sign-in to your browser. It lasts at most 15 minutes and is cleared when sign-in ends.
• Technical datalike any internet service, our servers and our network provider process your IP address to deliver the service.
• Websitesilvio.legal uses no cookies and no analytics tools.

Silvio does not receive your conversation with the assistant: only what the assistant sends to a Silvio tool, usually search terms or the number of a norm. The connector has no access to your firm's documents and carries public material only (statutes, rulings and scholarship). Please do not include third parties' personal data or material under professional secrecy in your queries.

Why we use it

• Accessto verify your identity and that your account is enabled.
• Serviceto answer the queries your assistant sends to Silvio.
• Usage limitto apply the fair-use limit: 60 queries per minute and 3,000 per day per user.
• Securityto prevent abuse and audit access.
• Errorsto diagnose and fix service faults.

We do not sell your data or use it for advertising. Silvio does not train artificial intelligence models on your queries.

We process this data with the consent you give when you connect Silvio and authorize access, and because it is needed to provide the service you request (Law 18.331, article 9).

Who receives it

• Anthropic or OpenAIif you use Silvio from Claude (Anthropic) or ChatGPT (OpenAI), your question and the passages Silvio returns pass through that company's servers. That processing is governed by Anthropic's or OpenAI's privacy policy and by your account settings there.
• Googlelets you sign in and tells us your email and account identifier.
• Cloudflarecarries traffic between the internet and our servers.
• IMPOSilvio reads the current text of norms at impo.com.uy. Those requests contain only the norm and article, no data about you.
• Authoritiesonly if a law or a court order requires it.

We do not share your data with any other third party.

Where it is stored

Account data, connection data and the query log are stored on Silvio's own servers in Uruguay, in a self-hosted Supabase database (not a third-party cloud). The legal corpus is on those servers too.

Anthropic, OpenAI, Google and Cloudflare operate outside Uruguay, including in the United States. Data reaches them because you choose to use those services.

How long we keep it

• Accessaccess tokens are valid for 1 hour and are not stored; refresh tokens expire after 30 days and are replaced on every use.
• Sign-in cookie15 minutes at most.
• Account and query logwhile your account is enabled. There is no automatic deletion today: on request, we delete your account and query log, except what a law requires us to keep.

Your rights and controls

• Disconnectyou can remove Silvio in the connector settings of Claude or ChatGPT. If you also want us to revoke access immediately, write to us.
• Access, correction and deletionyou can ask for a copy of your data, or to correct or delete it, by writing to hola@silvio.legal from your account email. We answer within the five business days set by Law 18.331 (articles 14 and 15).
• Complaintsif we do not handle your request, you can turn to Uruguay's data protection authority (Unidad Reguladora y de Control de Datos Personales, URCDP) or bring a habeas data action (Law 18.331, articles 37 onward).

Security

We use encrypted connections (HTTPS), short-lived tokens valid only for this service, and refresh codes stored as hashes. Only Silvio's server can access the account and log tables. No system is infallible: if an incident affects your data, we will tell you as the applicable rules require.

Minors

Silvio is meant for legal professionals and is not intended for anyone under 18.

Changes

If we change this policy, we will publish the new version on this page with its date.