Privacy Policy

1. Information We Collect

Depending on how you interact with our Services, we may collect several types of information:

A. Personal Data You Provide Voluntarily

We collect personal information that you voluntarily provide to us when you register for an account, request a demo, contact support, or interact with our sales team. This may include:

• Contact Information: Name, email address, corporate mailing address, and phone number.
• Credentials: Username, password, and multi-factor authentication (MFA) tokens used to access our platforms.

B. Customer-Uploaded Debt Recovery Data

As a provider of debt recovery infrastructure, Slate processes data uploaded or connected by our creditor and debt-buyer customers. In this capacity, Slate acts as a “data processor” or “service provider” under applicable privacy laws. This data may include:

• Debtor Information: Names, email addresses, Social Security numbers (SSN), and mailing addresses.
• Case Information: Account history, balance details, and operational status updates shared between creditors, law firms, and collection agencies.

C. System and Device Data (Collected Automatically)

When you navigate our website or use our application, we automatically collect certain technical data via logging tools and cookies:

• Technical Logs: IP addresses, browser types, operating systems, access logs, and audit trails.
• Usage Metrics: Features accessed, usage frequency, interaction metadata, application and performance information, user-provided labels associated with use of the Services, and other technical information about how our Services are used.

We do not process, store, or transmit active payment card information (PCI data) or Protected Health Information (PHI/HIPAA data).

2. How We Use Your Information

We use the information we collect for the following business purposes:

• Providing and maintaining our debt recovery infrastructure and workflows.
• Authenticating user accounts and managing role-based access controls.
• Facilitating secure document management and centralized account syncing.
• Monitoring, detecting, and preventing security incidents or fraudulent activity.
• Complying with our legal, regulatory, and contractual obligations.
• Analyzing system performance to improve and optimize our application.

3. How We Share Your Information

We do not sell your personal information. We may share your data only in the following limited circumstances:

• Subservice Organizations / Third-Party Vendors: We utilize select third-party hosting and infrastructure partners (such as Amazon Web Services (AWS) for production infrastructure hosting) who process data on our behalf under strict confidentiality and security terms.
• Legal and Regulatory Requirements: We may disclose your information if required to do so by law, court order, or government authority, or if we believe in good faith that such action is necessary to comply with a legal obligation.
• Business Transfers: If Slate is involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

We implement robust administrative, technical, and physical security measures to safeguard your personal data:

• Encryption: All data in transit is encrypted using TLS 1.2 or higher, and all data at rest is encrypted using AES-256 encryption.
• Access Control: System access is restricted to authorized personnel based on the principle of least privilege, requiring multi-factor authentication (MFA).
• Vulnerability Management: We conduct monthly vulnerability scans and annual third-party penetration testing to identify and remediate security risks.

5. Data Retention

We retain personal data and customer-uploaded data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with our contractual agreements and legal requirements. When data is no longer required, we securely delete or anonymize it.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data under regional privacy regulations, including the right to:

• Access the personal data we hold about you.
• Correct or update inaccurate personal information.
• Request the erasure/deletion of your personal data.
• Object to or restrict the processing of your data.

To exercise any of these rights, please contact us at the email address provided below.

7. Children’s Privacy

Our Services are not designed for or targeted at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

8. Changes to This Privacy Policy

We review and update this Privacy Policy at least annually or when significant changes occur in our data processing practices. Any updates will be posted on this page with an updated “Last Updated” date.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us at: