Privacy Policy

1.1Slate is run by Slate Systems Ltd, a company registered in England and Wales (company number 17243517), 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. Write to us about your data at privacy@slateos.co.uk.

1.2We have two roles, depending on whose details they are:

2.1Your crew: we hold each member’s name, email address, sign-in and invitation, and how far they are through the run-through, to let them use your account. Their sign-in is their own.

2.2Your business details are printed on the quotes, invoices and emails you send, so your customers see them. Your photo ID is seen by nobody at Slate except, if it is needed to sort out your registration, a founder, and every time a founder opens one it is recorded.

2.3Finding your company. If you are a limited company and look it up when you set up, what you type is sent to Companies House, the public register, and your company’s name, number, registered office and directors come back to fill in the form (contract). Only what you confirm is kept; the other directors’ names are shown for you to pick from and are not stored.

3.1Slate holds what you and your crew put in it, and what Slate records for you: your customers’ and enquirers’ names, phone numbers, email addresses, addresses and postcodes; jobs, notes and job details; the calls to your office line and the texts and emails with your customers; quotes, invoices, bookings and payments; reviews; subcontractors on your jobs; and email addresses that have bounced or asked not to be contacted.

3.2When somebody rings your office line and you miss it, their number, the time and whether a text went are recorded, and the job lands on your board.

3.3We process all of this for you, as the Terms (Schedule 1) set out. You can take a copy at any time (Export in Slate), remove any customer completely from their page, and ask us to delete your whole account.

3.4The Advisor (Terms, clause 14). To write your brief, Slate sends Anthropic figures it has counted from your account, your first name, trade and town, and short descriptions of jobs, with customers’ names, phone numbers, email addresses and street addresses taken out first. Anthropic handles it under its commercial terms, which do not let it train its models on what we send. A founder may read a brief before it reaches you. Switch the Advisor off and none of this is sent.

3.5The Advisor also reads public information that is about nobody in particular: HM Land Registry’s record of homes sold in your postcode district, and the public home pages of the firms you name and others near you, which Anthropic’s web tools open. Slate keeps only whether each page shows certain things, and Google’s scores for it, never the page.

4.1Walkthrough requests. If you ask for a walkthrough on slateos.co.uk, we hold your name, mobile and email address, and a scrambled form of your internet address to stop abuse, and send them to the founders so one of us can ring you (legitimate interests; or steps you asked for before a contract). Ask us and we delete them.

4.2Referral links and codes. If you follow a business’s referral link, a cookie remembers its code for 60 days, so the right business is credited if you sign up (legitimate interests). If you start Slate through a business’s link or code, that business sees your business name, where you stand (on your trial, paid, or credited) and the dates of those steps, and nothing else, so it can see what it has earned (legitimate interests). You are told this before the code counts. So that nobody can earn credit by referring themselves, we check whether the two accounts share a mobile number, a company number or a card (Stripe gives us a card’s fingerprint, never the card itself), and we look at whether they signed up from the same internet address or business address. Those last two are never used on their own to refuse a referral (legitimate interests: preventing fraud).

These companies handle data for us, each only for the job named. We have contracts with each that protect your details, and we will email every account at least 30 days before we add or replace one.

5.1Your customers’ card payments to you are between them, you and Stripe, on your own Stripe account; Stripe’s privacy terms apply to them.

5.2We do not sell or rent anybody’s details, or share them with advertisers.

6.1Emails about your account always come, while you have an account: signing in, your trial and your first payment, payments and receipts, a payment that failed, your office line and your sending address, your crew, replies to your messages to us, and your monthly figures.

6.2Tips and offers. During your trial the founders send a few letters with tips, and now and then your monthly figures carry an offer (paying yearly, or referring a trade). Every one has a link to stop them, and once you use it none come again (legitimate interests; you are an existing customer).

6.3To the founders. Slate tells the founders about events on accounts (a trial started or stopped and why, a line held up, a payment problem), naming the business and its contact details, so that one of us can help.

6.4Texts to your callers. The missed-call text is sent for you, from your office line, to UK mobiles only. If a caller replies STOP, they are never texted by your business through Slate again, until they reply START.

7.1We use no advertising or analytics cookies, and nothing that follows you around other websites.

• Everything travels encrypted (HTTPS), and is stored with providers that encrypt their disks.
• We encrypt again, ourselves: photo IDs and any saved mailbox passwords (AES-256-GCM), the copy of your board on your device, and our backups.
• Each account can reach only its own records, links to your documents are signed so they cannot be guessed, and every part of Slate limits how fast it can be used.
• Card numbers never reach us: Stripe takes them.
• Only the founders’ own sign-ins reach our admin tools, and every change made there, and every look at a business’s customers, is recorded.
• Photo IDs are deleted as soon as the carrier approves the registration, and after 90 days whatever happens.

8.1If your details are lost, stolen or reached by somebody who should not have them, and it puts you at risk, we tell you, and we tell the ICO when the law requires it.

8.2Found a security problem? Tell us at security@slateos.co.uk.

9.1Several of the companies in section 5 are based in the United States and may handle data there. Where they do, the transfer is protected by the UK’s rules: the country or company is covered by UK adequacy regulations (including the UK extension to the EU–US Data Privacy Framework), or the transfer is made under the UK’s International Data Transfer Addendum to the EU standard contractual clauses.

10.1Stripe keeps its own records of payments, as the law requires of it, and the carrier keeps its own record of your registration.

11.1You have the right to:

• see what we hold about you, and have a copy;
• correct it (most of it you can change yourself, in Settings);
• take it with you: Export in Slate gives you your customers, jobs and their reviews, diary, money, costs, and texts, emails and calls, as ordinary files, at any time;
• have it deleted: we delete your account and everything in it, within a month of your asking, apart from what section 10 says we keep;
• object to what we do on the basis of legitimate interests, or ask us to restrict it.

11.2Ask at privacy@slateos.co.uk. We answer within a month, and it costs nothing.

11.3If you are one of our customers’ customers, ask the business you dealt with first: they decide what happens to your details. We will help them, and if you write to us we will pass your request on.

12.1Each version of this policy is dated. When we change it, Slate asks you to accept the new version the next time you use it, and until you do you can still take a copy of your data and stop Slate.

Slate is for businesses

12.2Slate is for businesses and is not meant for anyone under 18.