Privacy Policy

At Slashy, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

Personal information

We collect information that you provide directly to us, including:

• Email address and name when you create an account
• Google account credentials (OAuth tokens) to access your emails, calendar, and video meetings, and connection credentials for other services you choose to connect
• Profile information you choose to provide
• Communication preferences and settings

Email, calendar & meeting data

To provide our service, we access and process:

• Email content, metadata, and attachments from your connected Gmail accounts
• Calendar events, attendees, and scheduling data from Google Calendar
• Video meeting metadata from Google Meet (meeting links, participants, scheduling)
• Email read receipts and tracking data
• Labels, folders, and organizational data
• Search queries and email/calendar interactions

Usage information

We automatically collect certain information about your device and how you interact with our service:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed)
• Usage patterns and feature interactions
• Performance and error data

We use the information we collect to:

• Provide, operate, and maintain our Service
• Process and deliver emails on your behalf
• Improve, personalize, and expand our service
• Understand and analyze how you use our service
• Develop new products, services, features, and functionality
• Communicate with you about service updates and support
• Send you technical notices and security alerts
• Prevent fraud and enhance security

We use AI to provide smart features like tone matching and automatic replies. Important points:

• Our agreements with AI providers prohibit them from retaining Slashy customer data or using it to train models
• We store AI memories and conversation history (encrypted) to improve your experience
• Your emails are never used to improve models for other users
• All AI features respect your privacy and data encryption

We implement security measures designed to protect your information:

• Data encrypted at rest (AES-256) and in transit (TLS 1.2+)
• Controls independently examined through SOC 2 Type II
• Security reviews and penetration testing
• Secure OAuth authentication with minimal required permissions
• Employee access controls and data handling policies

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We retain your information only as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Account data is retained while your account is active
• Email data is cached temporarily for performance
• When you delete your account, all data is permanently removed within 7 days
• Backup copies are deleted within 7 days (up to 14 days during active incidents)
• Log data is retained for up to 1 year for security purposes

We do not sell your personal information. We may share your information only in the following circumstances:

• Service providers: with third party vendors who perform services on our behalf (e.g., hosting, analytics)
• Legal requirements: when required by law or to protect our rights and users' safety
• Business transfers: in connection with a merger, acquisition, or sale of assets
• With your consent: when you explicitly authorize us to share specific information

All third party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

Optional connections to external services

You may choose to connect third-party services or external tools to Slashy. When you enable a connection, Slashy may receive information from that service and send information to it as needed to perform actions you request or configure, including enabled automations. Depending on the connection and action, this may include account identifiers, messages, files, documents, records, metadata, and content you provide to the agent. Slashy may store the connection details and credentials needed to maintain authorized access. Disconnecting stops future access through that connection but does not remove information already sent to or created in the third-party service. Information returned by a connection may be stored in your agent conversation history. That service handles information it receives under its own terms and privacy policy.

Connected AI assistants and MCP clients

If you connect Slashy to an AI assistant or other Model Context Protocol (MCP) client, such as ChatGPT or Claude, Slashy shares the email, calendar, attachment, reminder, or other account data needed to complete the actions you request through that client. The connected provider receives and handles that data under its own terms and privacy policy; its retention practices may differ from ours. Slashy does not send account data to a connected client unless you authorize the connection and invoke Slashy through it.

You have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your account and associated data
• Portability: request export of your data in a portable format
• Revoke consent: disconnect Gmail access at any time through your account settings
• Disconnect AI assistants: remove the Slashy connection in the connected assistant or MCP client at any time
• Opt out: unsubscribe from marketing communications

To exercise these rights, please contact us at privacy@slashy.com.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it's used
• Right to delete personal information we have collected
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to equal treatment when exercising your CCPA rights

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards, including standard contractual clauses approved by the European Commission.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date. We encourage you to review this Privacy Policy periodically for any changes.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: