Privacy Policy

We process your files, prompts, instructions and outputs only to provide the tool you chose, keep the Service secure, respond to support you request and meet narrow legal obligations. We do not claim ownership of your content.

We do not sell, rent or trade personal information. We do not share personal information for cross-context behavioural advertising, build advertising profiles from your activity or place third-party advertising trackers in the Service.

We do not use User Files, prompts or Outputs to train general-purpose AI models, and we require model providers not to do so for EditSlate data. A separate, specific and optional consent would be required for any future training programme. Declining will not reduce the core Service.

Unless you deliberately save a file to your Account or a tool clearly states a different period before upload, remotely processed User Files and Outputs are deleted from active systems within 12 hours after the task completes or fails. Backup copies expire within 30 days and remain unavailable for ordinary use.

Our personnel do not routinely open User Files. Access is limited to cases where you ask us to inspect a file for support, or where proportionate review is necessary to investigate abuse, a security event or a binding legal requirement. Access is limited and logged.

We offer access, correction, deletion, portability, objection and consent-withdrawal controls to all users where technically feasible, even when local law would require less. We do not charge for ordinary requests or penalise anyone for exercising a privacy choice.

Where practical, basic tools can be used without an Account. Anonymous use does not mean no technical data is created: connection, device and security logs may still be processed briefly to deliver the request and protect the Service. You may use a display name or alias where a legal name is not required for billing, fraud prevention or law.

Tools run entirely in your browser. When a tool is marked as locally processed, the file content does not leave your device through EditSlate for that task. Basic technical requests, such as loading the application and checking entitlement, may still reach our servers.

Other tools require a secure upload to EditSlate or a named provider. The interface will provide a just-in-time notice before upload when a material processing detail differs from this Policy, including whether an AI provider receives content or a longer retention period applies. We configure providers for no training and the shortest available retention consistent with operating the requested feature.

A file is retained beyond temporary processing only when you deliberately save it, a Team Workspace configuration requires it, or a clear feature notice says so before submission. Saved files remain under the controls described in the Service. Do not treat EditSlate as your only backup.

We do not ask for sensitive information as part of a standard Account. User Files may nevertheless contain personal, confidential or sensitive material. We use that content only for the requested task and do not use it for marketing, advertising, profiling or model training. Do not upload health data, payment-card data, government identifiers, biometric templates, trade secrets or other regulated information unless a feature and written agreement expressly support it.

We do not create biometric templates or use faces, voices or other characteristics to identify a person unless a dedicated feature clearly describes that purpose before collection and obtains any required explicit consent. Ordinary image, audio or video transformation does not authorise identity profiling.

This covers processing needed to run a tool, deliver an Output, manage an Account or Team Workspace, provide paid features, process a purchase and respond to service requests.

We use consent for optional analytics or cookies where required, marketing that requires opt-in and any separate content-training programme. Consent is not bundled with unrelated terms, and withdrawal is as easy as giving consent. Withdrawal affects future processing and does not make earlier lawful processing invalid.

We may process limited data to secure and stabilise the Service, prevent fraud and abuse, maintain aggregate reliability metrics, protect legal rights and improve non-content aspects of the product. We minimise the data, assess the impact on users and provide an objection route. We do not rely on legitimate interests for behavioural advertising or training general-purpose models on User Files.

We retain or disclose information when a binding legal obligation applies, such as tax records, valid court orders or qualifying incident notices. We verify and narrow government or law-enforcement requests where reasonably possible.

Automated systems may scan technical signals to block malware, rate-limit attacks or detect prohibited use. Human review of content is not routine and occurs only under the limited circumstances described in the one-minute summary. Reviewers receive the minimum access needed and are bound by confidentiality and access controls.

We may create aggregate metrics such as task success rate, processing time and file type after removing content and direct identifiers. We do not attempt to re-identify properly de-identified information, and we contractually restrict a recipient from doing so. File content is not used for analytics by default.

We use vetted providers for hosting, storage, content delivery, payments, email, support, security, and authentication. They receive only what is necessary, must follow our instructions, protect the data and delete or return it at the end of service.

We disclose information when you choose an integration, export a file, invite a Team member or otherwise direct us to send information to a third party. We show the destination before a material disclosure where practical.

Workspace owners and administrators may manage membership, billing, settings, task history and content where the product permits. The Service should show members the administrator controls that apply. Contact your organisation about its independent use of Workspace information.

We may disclose information to comply with a valid and binding request, protect a person from serious harm, investigate fraud or defend legal rights. We review requests for scope and authority, seek to narrow overbroad demands and notify the affected user before disclosure unless prohibited or an emergency makes prior notice impracticable.

If EditSlate is involved in a merger, financing, acquisition or sale of assets, information may be disclosed under confidentiality restrictions. A successor must honour this Policy for previously collected information or provide advance notice and any legally required choice before materially expanding its use. We will provide at least 30 days' notice where practicable.

We do not sell or rent personal information, share it for cross-context behavioural advertising, disclose User Files to data brokers, use content to build advertising profiles, or let providers use EditSlate content for their own general-purpose model training.

We use narrowly scoped cookies or local storage for sign-in, security, load balancing, consent choices, language and other features requested by you. These are limited to what is needed to operate the Service.

Optional analytics are disabled until consent where consent is required. We favour first-party or privacy-preserving measurement, avoid collecting User File content and provide a persistent choice in your cookie settings. Declining optional analytics does not reduce core functionality.

We do not use advertising cookies, cross-site tracking pixels or device fingerprinting for advertising. We do not combine Service activity with third-party browsing histories to target ads.

We recognise Global Privacy Control signals as a request to opt out of sale or sharing for targeted advertising where applicable. Because EditSlate does not engage in those activities, the signal should not change core functionality. We still record the preference where technically feasible.

When immediate removal from an encrypted rolling backup is not technically feasible, we put the deleted information beyond use: it cannot be accessed for ordinary business, is not restored except for disaster recovery, remains protected and expires on the backup cycle stated above. If a backup is restored, the deletion request is re-applied.

A narrow legal hold may pause deletion for specific information when reasonably necessary for a binding legal duty or active dispute. We isolate the information, restrict its use to that purpose and delete it when the hold ends. A legal hold does not justify keeping unrelated User Files.

Use a unique password, protect API keys, limit Team administrator access and download important Outputs promptly. Please report a suspected security issue to admin@editslate.com. We will not bring legal action against good-faith security research that follows a published safe-harbour policy.

Ask whether we process your personal information and receive a copy, together with the categories, purposes, sources, recipients and retention information that applies.

Correct inaccurate or incomplete Account information. We will also correct information in systems where self-service editing is not available.

Delete temporary content, saved files, an Account or other personal information, subject only to narrow legal, security and transaction-record exceptions. Account closure does not require forfeiting a separate legal claim.

Receive information you provided in a commonly used, machine-readable format where technically feasible, including saved files and core Account data.

Object to processing based on legitimate interests and request restriction while accuracy, lawfulness or an objection is assessed. You may always object to direct marketing, and we will stop it.

Withdraw consent for optional analytics, marketing or any optional content programme through the same surface used to consent or by contacting us. Withdrawal does not reduce core functionality unrelated to that consent.

EditSlate does not sell or share personal information for cross-context behavioural advertising and does not process it for targeted advertising. You may still submit an opt-out request or use Global Privacy Control, and we will honour it as a standing preference.

If we deny a request, you may appeal to admin@editslate.com. A person not involved in the original decision will review the appeal where practicable.

We do not deny core service, charge a privacy fee, lower quality or otherwise retaliate because you exercised a privacy right. Different service levels based on plan features or necessary data are not retaliation when they are reasonably related to the Service you selected.

If you use EditSlate through an employer, school or other organisation, that organisation may be the controller or business responsible for the Workspace content and member data. EditSlate then processes the information as its service provider or processor under the customer's instructions and data processing agreement. Direct rights requests about controlled Workspace content may need to go to the organisation; we will help it respond.

Owners and administrators may access or control Workspace membership, settings, usage, task history, User Files and Outputs where the feature permits. The organisation is responsible for selecting administrators and giving members appropriate notice. EditSlate will not expand administrator access silently; material controls will be described in the product or customer documentation.