LEGAL
Effective September 12, 2026 · Applies to slicey.ai, app.slicey.ai and the Slicey API
1. Who we are and what this policy covers
Slicey (“Slicey”, “we”, “us”, “our”) provides cold email infrastructure: Microsoft 365 and Google Workspace mailboxes hosted on dedicated domains, pre-warmed inboxes, domain registration and DNS setup, connections to email sequencing platforms, and deliverability monitoring.
This Privacy Policy explains how we handle personal data when you visit our marketing website at slicey.ai, use the customer dashboard at app.slicey.ai, order through our checkout, call the Slicey API, contact support, or otherwise interact with us (together, the “Services”).
If you use Slicey on behalf of a company, this policy applies to the personal data of the people who use the account. Where you send email through mailboxes we provision, you are the controller of your recipients’ data and we act as your processor for the infrastructure we operate on your behalf.
2. Information we collect
Information you give us
Account details: name, email address, company name, password (stored hashed), and any profile information you add.
Order details: the domains, mailbox names, display names, sending platform and configuration you choose, and any domains you bring to us.
Billing details: payment method, billing address and transaction history. Card numbers are collected and stored by our payment processor, Stripe, not by Slicey.
Integration credentials: API keys, OAuth tokens or logins for the sequencing platforms you connect (for example Instantly, Smartlead, PlusVibe, EmailBison or Masterinbox) so we can connect and monitor your mailboxes.
Support communications: tickets, chat messages, emails and any files you attach.
Lead and marketing forms: information you submit on slicey.ai, such as your name, email, company and what you are looking for.
Information we create when providing the Services
Mailboxes, tenants, admin accounts and credentials that we provision for your order, including the passwords needed to connect them to your sending platform.
Deliverability and usage statistics synced from your connected sending platform, such as emails sent, replies, bounces and warmup status, which we aggregate per mailbox and per domain.
Order, provisioning and connection status, alerts, and support history tied to your account.
Information collected automatically
Device and log data: IP address, browser type, operating system, referring pages, pages viewed, timestamps and error reports.
Product analytics: events such as page views, clicks, checkout steps, and feature usage, collected through PostHog and Vercel Analytics.
Cookies and similar technologies, described in section 5.
3. How we use information
We use personal data to:
Create and manage your account, process orders and payments, and provision domains, tenants and mailboxes.
Connect mailboxes to your sending platform, monitor deliverability, swap or repair infrastructure, and send you alerts about your account.
Provide customer support and respond to your requests.
Send transactional messages such as order confirmations, receipts, password links and service notices.
Send product updates and marketing where permitted. You can opt out at any time using the link in the email or by contacting us.
Understand how the Services are used, fix bugs, and improve performance and security.
Detect, prevent and investigate fraud, abuse, spam and violations of our Terms of Service.
Comply with legal obligations and enforce our agreements.
Where the GDPR or similar laws apply, we rely on the performance of our contract with you, our legitimate interests (running, securing and improving the Services), your consent where we ask for it, and compliance with legal obligations.
4. How we share information
We do not sell personal data. We share it only as described here.
Service providers and sub-processors
We use third parties to operate the Services. They process data only on our instructions and for the purposes above. Current categories include:
Payments: Stripe.
Hosting, database and authentication: Supabase and Vercel.
Mailbox and tenant providers: Microsoft and Google, who receive the account names, display names and domains needed to create your mailboxes.
Domain registrars and DNS providers used to register and configure your domains.
The sending platforms you choose to connect. When you connect a platform we send it the mailbox credentials and settings needed to add your inboxes, and we read sending statistics back from it.
Analytics, error monitoring and customer messaging: PostHog, Vercel Analytics, Crisp, Resend and our CRM.
Other sharing
Your team: people you invite to your account can see the account’s data.
Partners and resellers: if you order through a Slicey partner, we share order and status information with that partner so they can serve you.
Legal: when required by law, regulation, legal process or a government request, or to protect the rights, safety and property of Slicey, our customers or the public.
Business transfers: as part of a merger, acquisition, financing or sale of assets, subject to this policy.
5. Cookies and analytics
We use cookies and local storage to keep you signed in, remember preferences, protect against fraud, and measure how the website and dashboard are used. Our analytics cookies are shared between slicey.ai and app.slicey.ai so we can understand the full journey from the website to checkout.
You can control cookies through your browser settings. Blocking essential cookies may prevent parts of the dashboard from working.
6. Data retention
We keep personal data for as long as your account is active and as needed to provide the Services. After you close your account or your subscription ends, we retain order, billing and tax records for as long as the law requires, and we delete or anonymise other data within a reasonable period, unless we need it to resolve disputes or enforce our agreements.
Mailboxes, tenants and domains that we provision are decommissioned after your subscription ends. Data that lives inside those mailboxes is deleted when they are removed and cannot be recovered afterwards, so export anything you need before cancelling.
7. Security
We protect personal data with technical and organisational measures, including encryption in transit, encrypted storage of integration credentials, access controls, audit logging and least-privilege access for staff. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your password and API keys confidential and tell us immediately if you suspect unauthorised access.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, to withdraw consent, and to lodge a complaint with a supervisory authority. Residents of California and other US states may also have the right to know what personal information we collect and to not be discriminated against for exercising their rights. We do not sell or share personal information for cross-context behavioural advertising.
To exercise any of these rights, email [email protected]. We may need to verify your identity before responding. Most account data can also be viewed and updated directly in the dashboard.
9. International transfers
Slicey operates from the United States and uses providers in the United States and other countries. Where we transfer personal data out of the European Economic Area, the United Kingdom or Switzerland, we rely on appropriate safeguards such as standard contractual clauses or the recipient’s participation in an approved data transfer framework.
10. Children
The Services are intended for businesses and are not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Third-party services
The Services rely on and link to third-party platforms, including Microsoft, Google and the sending platforms you connect. Their handling of your data is governed by their own terms and privacy policies, which we encourage you to read. We are not responsible for the privacy practices of third parties.
12. Changes to this policy
We may update this policy from time to time. We will post the new version on this page and update the effective date. If the changes are material, we will also notify you by email or through the dashboard before they take effect. Continuing to use the Services after a change takes effect means you accept the updated policy.