Privacy policy
How Slate Cue collects, uses and protects personal data, in line with the Digital Personal Data Protection Act, 2023.
1. Who we are
This policy is issued by Slate Cue, referred to as "Slate Cue", "we" or "us". For the personal data described in section 2, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act").
2. Personal data we collect
When you use this website
- Form details: when you request a demo or join early access, we collect your name, work email, company, role, industry, the module you are interested in and any message you write.
- Technical data: our servers record standard request data such as the pages requested and your browser type. We store a one-way hash of your IP address with form submissions, to detect spam; we do not store the IP address itself.
- Cookies: we use one strictly necessary session cookie to protect our forms against forgery. We do not use advertising or tracking cookies. If enabled, our website analytics (Cloudflare Web Analytics) is cookie-free and does not identify you.
- Spam protection: our forms may use Cloudflare Turnstile, which processes limited technical signals to tell people from bots.
When you apply for a job
Through our careers form we collect your name, email, optional phone number and city, the role you apply for, a link to your professional profile or portfolio, and anything you write to us. We use this only to consider your application and contact you about it.
When our customers use the Slate Cue platform
Our customers upload documents that may contain personal data, such as bank statements, KYC documents and salary slips. For that data, our customer is the Data Fiduciary and we act as their Data Processor: we process it only on their instructions and under our contract with them. If your data is in a document a customer sent us, please contact that customer first to exercise your rights.
3. Why we use it
- To reply to your demo or early-access request and follow up about our products.
- To assess job applications and contact applicants.
- To operate, secure and improve this website.
- To meet our legal obligations.
We process website data on the basis of the consent you give when you submit a form, and for legitimate uses permitted under section 7 of the DPDP Act. You can withdraw consent at any time by writing to us; this does not affect processing already done.
4. Who we share it with
We do not sell personal data. We share it only with service providers who help us run our business, under contracts that require them to protect it and use it only for our purposes: hosting and infrastructure, email delivery, spam protection and analytics. We may disclose data where the law requires us to.
5. Where it is stored
We store personal data in India. Where a service provider processes data outside India, we do so only as permitted under the DPDP Act and any restrictions notified by the Government of India.
6. How long we keep it
We keep website enquiry data for as long as needed to respond and to maintain a business relationship, and delete it when it is no longer needed for that purpose, unless the law requires us to keep it longer. Job application data is kept while the hiring process runs, and afterwards only if you agree that we may contact you about future roles. Customer platform data is kept and deleted according to our contract with each customer.
7. How we protect it
We use reasonable security safeguards, including encryption in transit and at rest, access controls and logging. See Security for details. If a personal data breach occurs, we will notify the Data Protection Board of India and affected people as the DPDP Act requires.
8. Your rights
Under the DPDP Act you have the right to:
- get a summary of the personal data we hold about you and how we process it;
- ask us to correct, complete, update or erase your personal data;
- withdraw your consent;
- have a grievance addressed by us; and
- nominate another person to exercise your rights in the event of your death or incapacity.
To exercise these rights, contact our Grievance Officer below. We will respond within the time required by law.
9. Children
This website and our services are meant for businesses. We do not knowingly collect personal data from children (people under 18). If you believe a child has sent us personal data, contact us and we will delete it.
10. Grievance Officer
Slate Cue
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
11. Changes to this policy
We may update this policy. We will post the new version here with a new "last updated" date, and tell you directly if a change materially affects you.