Privacy Policy

Slatis, Inc. ("Slatis," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard information about you when you use slatis.com and our related domains (including slatis.net, slatis.app, and slatis.org), our applications, and related services (collectively, the "Services"). It also describes your rights and choices with respect to that information.

1. Information We Collect

1.1 Information you provide directly

• Account information: Name, email address, and password when you register.
• Profile information: Job title, company name, and profile photo, if provided.
• Payment information: Billing details processed by Stripe, LLC. We do not store payment card numbers directly.
• Communications: Support tickets, feedback, and other messages you send us.

1.2 Information from third-party integrations

When you connect third-party services such as external calendar providers, we receive data necessary to provide the relevant integration features. This may include scheduling information, availability, and similar data, depending on the permissions you grant. We access this data only to provide the Services and in accordance with the applicable provider's developer policies.

If you connect a Microsoft account, you may review and revoke Slatis's access to your Microsoft data at any time via account.live.com/consent/Manage or the Microsoft My Apps portal.

If you connect an Apple account or Apple Calendar, you may review and revoke Slatis's access at any time via Settings → [your name] → iCloud → Apps Using iCloud → Slatis, or through appleid.apple.com.

1.3 Information collected automatically

• Log data: IP address, browser type and version, operating system, pages visited, time and date of access, and referring URLs.
• Device information: Device type and unique identifiers.
• Usage data: Features used, actions taken, frequency and duration of use, and interaction patterns.
• Cookies and tracking data: Described in Section 8.

2. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Services;
• Process payments and manage your Subscription;
• Authenticate users and maintain account security;
• Communicate with you about your account, updates, and support;
• Personalize your experience and deliver relevant features;
• Analyze usage patterns to improve performance and reliability;
• Investigate and prevent fraud, abuse, and security incidents;
• Comply with legal obligations and enforce our Terms of Service; and
• Send product and marketing communications where you have provided consent or where permitted by applicable law. You may opt out at any time.
• Generate aggregated, de-identified data from usage patterns to improve the Services, create benchmarks, and inform product decisions. This data does not identify you or any individual user.

2.1 Restrictions on use of calendar data

Our use of data from connected calendar services is limited to providing the scheduling and availability features you have requested. We do not:

• Use calendar data to serve advertisements;
• Transfer calendar data to third parties for their own use, except as necessary to provide the Services or as required by law; or
• Allow employees to read your calendar data, except with your explicit consent, for security investigations, or as required by law.

3. Legal Basis for Processing

We process your information on the following grounds:

• Contract performance: Processing necessary to deliver the Services you have requested.
• Legitimate interests: Analytics, security, fraud prevention, and improvement of the Services, where not overridden by your rights.
• Legal obligation: Compliance with applicable laws and regulations.
• Consent: Where you have given explicit permission, such as for marketing emails or connecting third-party integrations. You may withdraw consent at any time by contacting legal@slatis.com.

4. Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: With trusted third-party companies that help us deliver the Services (see Section 5 — Sub-Processors).
• Your organization: If you use a Team account, authorized administrators may view aggregated data and usage information for their Team.
• Business transfers: In connection with a merger, acquisition, or sale of all or substantially all of our assets. We will notify you before your information becomes subject to a different privacy policy.
• Legal requirements: When we believe in good faith that disclosure is required by applicable law, court order, or governmental authority.
• Protection of rights: To protect the rights, property, or safety of Slatis, our users, or others.
• With your consent: In any other circumstances where you have given explicit consent.

5. Sub-Processors

To deliver the Services, we engage the following trusted third-party service providers ("sub-processors") who process data on our behalf. Each is bound by data processing agreements requiring them to protect your information consistent with this policy.

We will update this list when we add or change sub-processors. For questions about a specific provider, contact us at legal@slatis.com.

6. Data Retention

We retain your personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

• Account data: Retained for the life of your account, plus up to 90 days after deletion.
• Payment records: Retained for up to 7 years as required by applicable financial regulations.
• Log and access data: Retained for up to 12 months.
• Anonymized analytics data: May be retained indefinitely, as it no longer identifies you.

When retention periods expire, data is securely deleted or irreversibly anonymized.

7. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, loss, alteration, and disclosure. These include:

• Encryption of data in transit (TLS) and at rest;
• Access controls limiting data access to authorized personnel;
• Regular security reviews and vulnerability assessments; and
• Secure OAuth 2.0 flows for third-party integrations.

No method of electronic transmission or storage is 100% secure. While we work diligently to protect your information, we cannot guarantee absolute security. If you suspect your account has been compromised, contact us immediately at legal@slatis.com.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Services:

• Strictly necessary cookies: Required for authentication, security, and core Service functionality. These cannot be disabled.
• Analytics cookies: We use Google Analytics and PostHog to understand usage patterns and improve the Services. These tools may collect your IP address and browsing behavior on our site.
• Preference cookies: Used to remember your settings and personalization choices.

You may control non-essential cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the core Services. To opt out of Google Analytics data collection, visit tools.google.com/dlpage/gaoptout.

9. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information.

9.1 Your rights

• Right to know: You may request information about the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request deletion of your personal information, subject to certain legal exceptions.
• Right to correct: You may request correction of inaccurate personal information.
• Right to opt out of sale or sharing: We do not sell or share your personal information for cross-context behavioral advertising as defined by the CCPA.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

9.2 How to submit a request

To exercise any of these rights, email us at legal@slatis.com with the subject line "CCPA Request." We will verify your identity before processing the request and respond within 45 days. We may extend this period by an additional 45 days where reasonably necessary, with prior notice.

10. Children's Privacy

The Services are not directed to individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete that information and terminate the associated account.

If you believe a child under 13 has provided personal information to us, please contact us at legal@slatis.com.

11. International Data Transfers

Slatis is based in the United States. Your information is primarily stored and processed in California, United States. We also operate infrastructure in Brazil to serve our Latin American customers, and data for those customers may be processed there. If you access the Services from outside these countries, your information may be transferred to and processed in the United States or Brazil, where data protection laws may differ from those in your jurisdiction.

We do not currently direct the Services at individuals in the European Economic Area or the United Kingdom. If this changes, we will update this policy accordingly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. For material changes, we will provide advance notice via email or a prominent notice within the Services at least 30 days before the change takes effect.

Your continued use of the Services after a revised policy becomes effective constitutes your acceptance of the updated terms. If you do not agree, you must stop using the Services before the effective date.

13. Contact Us

For privacy-related questions, requests, or complaints, contact us at: