Privacy Policy

Overview

This Privacy Policy explains how SlaySlop ("we", "us") handles information when you visit slayslop.com, create an account, run scans, or otherwise use our Service.

This is a product starter template. Have qualified counsel review it for your jurisdiction before launch. Governing entity and lead supervisory authority remain TBD.

Information we collect

We may collect:

• Account data: name, email address, authentication details, organization membership, and preferences.
• Billing data: plan selection, subscription status, and payment metadata processed by our payment provider (we do not store full card numbers on SlaySlop servers).
• Site and scan data: URLs you submit, crawl/page artifacts, findings, screenshots or evidence blobs, uptime results, webhook deliveries, and related logs needed to run audits.
• Usage and device data: IP address, browser type, approximate location derived from IP (country and city on admin account and session views), pages viewed, and product interaction events.
• Communications: support requests and emails you send us.

How we use information

We use information to:

• Provide, secure, and improve the Service (including scanning, scoring, monitoring, and reporting).
• Authenticate users, enforce plan limits, and prevent abuse.
• Process payments and send transactional email (verification, password reset, billing notices).
• Measure product usage with analytics cookies, which are on unless you opt out.
• Comply with law and respond to lawful requests.

Cookies

We use required cookies to run the Service. Analytics cookies are on by default unless you opt out. The Cookie Policy at /cookies lists each cookie by name.

Sharing

We share data with service providers who help us operate the Service (hosting, databases, email, object storage, payment processing, analytics unless you opt out). They may process data only on our instructions.

We send public session IP addresses to IP geolocation providers (currently ipwho.is and GeoJS) so operators can see approximate country and city on admin user and session views. Private and reserved addresses are not sent.

We may share information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale.

We do not sell personal information.

Retention

We keep account and scan data while your workspace is active and for a reasonable period afterward for backups, dispute resolution, and legal compliance. You can export or request deletion from account settings where available.

Your choices

Depending on your location, you may have rights to access, correct, export, or delete personal data, or to object to certain processing. Use Settings → Data & privacy in the product, or email us.

You can opt out of analytics cookies with Necessary only on the banner. Clearing site data restores the default, which turns analytics back on.

Security

We apply administrative and technical safeguards appropriate to a SaaS audit product. No method of transmission or storage is perfectly secure. Report suspected vulnerabilities to security@slayslop.com. See also /security.

International transfers

We may process data in countries other than where you live. Where required, we use appropriate transfer mechanisms. Specific entity and transfer details will be updated when the registered company details are finalized.

Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

Changes

We may update this Policy and will revise the "Last updated" date above. Material changes may also be communicated in-product or by email when appropriate.

Contact

Privacy questions: legal@slayslop.com or support@slayslop.com.