Legal

Privacy policy

Effective [Effective date]

Slate is built to need very little about you, and to be clear about the little it does. This page explains what [Legal entity name] collects, why, and what control you have.

What we collect

We keep collection to what the service genuinely needs.

• Account info. Through Privy, the email address or external wallet you sign in with.
• Profile. An optional handle, and an optional full name, if you choose to add them.
• Your agent address. The address of the scoped trading agent you authorise.
• A record of your takes. The positions you initiate through Slate, so we can show you your activity.
• Basic usage and diagnostic data. Limited technical information, such as error reports and basic logs, to keep the service running and secure.

One thing to keep in mind: your on-chain activity lives on a public blockchain. That data is inherently public, and Slate can’t make it private.

What we do NOT collect

• We don’t sell your data. Ever.
• We don’t run advertising trackers or build ad profiles on you.
• We don’t collect more than we need. If a piece of data isn’t needed to run Slate, we’d rather not hold it.

How we use your data

We use what we collect for a short list of purposes.

• To operate the service, sign you in, and show your activity.
• To keep Slate secure, prevent abuse, and diagnose and fix problems.
• To respond to you when you reach out for support.
• To meet our legal and regulatory obligations.

Legal bases

For people in the UK and the EEA, we rely on one of these legal bases under the GDPR for each use.

• Performance of a contract, to give you the service you asked for.
• Legitimate interests, such as keeping Slate secure and working well, balanced against your rights.
• Legal obligation, where the law requires us to process or keep certain data.
• Consent, where we ask for it, which you can withdraw at any time.

Who we share it with

We don’t sell your data, and we share it only with the sub-processors that help us run Slate, each handling its part.

• Privy, for authentication and the embedded wallet.
• Supabase, for storing your account and activity data.
• Sentry, for error monitoring.
• Inngest, for background jobs.
• Vercel and Cloudflare, for hosting and content delivery.
• Brandfetch, for third-party logos.
• Hyperliquid, which handles the on-chain trading and settlement.

We may disclose data to law enforcement or other authorities only when we’re legally required to. We never sell your data to anyone.

International transfers

Our sub-processors may process data in countries other than yours. Where data moves across borders, we rely on appropriate safeguards, such as standard contractual clauses, to protect it in line with applicable law.

How long we keep it

We keep your data for as long as your account is active, and only as long as we need it for the purposes above or to meet a legal obligation. When we no longer need it, we delete it or anonymise it. Note that data already written to a public blockchain stays there, outside our control.

How we protect it

We use technical and organisational measures to protect your data, including encryption in transit, access controls, and reputable infrastructure providers. Slate is non-custodial by design, so we never hold the keys that can move your funds. No system is perfectly secure, but we work to keep the surface small.

Your rights

Depending on where you live, you have rights over your data. These include the right to access it, correct it, delete it, receive a portable copy, and object to or restrict certain uses.

• If you’re in the UK or EEA, the GDPR gives you these rights, and the right to complain to your local data protection authority.
• If you’re in California, the CCPA and CPRA give you rights to know, delete, correct, and opt out of any sale or sharing of your personal information. We don’t sell it.

To exercise any of these, email us at [Contact email] and we’ll help. We won’t treat you differently for asking.

Cookies and analytics

We keep cookies and analytics minimal and essential, used to keep you signed in and to keep the service running. We don’t use them to build advertising profiles.

Children

Slate is not for anyone under 18. We don’t knowingly collect data from children. If you believe a child has used Slate, contact us and we’ll remove the data.

Changes to this policy

We may update this policy from time to time. When we do, we’ll post the new version here with a fresh effective date. Continued use after a change means you accept it.

Contact

Questions about your data, or about this policy? Reach us at [Contact email].