Two kinds of people are described on this page.

Who is responsible for what

For your own account data — your name, your email, your sign-in, your billing, what you clicked in the product — Slate is the controller.

For the candidate and company records in your workspace, you are the controller and Slate is your processor. You decide who is collected and why; we hold and process the records to run the product for you, on your instructions.

What we collect about you

• Account: name, email address, workspace membership and role, and a one-way hash of your password. Never the password itself.
• Sessions: a record of each sign-in so that you can list and revoke your own sessions, with the time it started and last activity.
• Usage inside the product: the actions in the audit log, and your own spend and view-budget figures.
• What you send us: anything you type into the signup or contact form on this site, and any email you send us.

The public pages of this site load no JavaScript at all and set no cookie. There is no analytics, advertising or session-recording script on this site or inside the product. The only cookie Slate sets is the session cookie you get after signing in.

Candidate and contact data in your workspace

When your Collector runs, it sends Slate the profile information it collected from your LinkedIn session: name, headline, titles and employers with dates, location, education, skills and the profile URL. Slate deduplicates and merges those records, and merges only ever add information — a re-import never overwrites a value with an empty one.

Screening sends the profile text and the role's requirements to Anthropic's API to produce a verdict and its rationale, which we store next to the record. Slate does not harvest email addresses from LinkedIn. If you enable contact enrichment, the provider you select returns work contact details for the specific people you ask about, under that provider's terms, and Slate records the provenance of each value.

Profile visits made by your Collector are visible to the person visited. That is a property of LinkedIn, not of Slate, and it is why visits run only after screening has cut the list and can be switched off entirely.

Email and suppression

Where you use Slate to send recruiting email, we store the message, its delivery receipts, and the resulting events from the delivery provider. A hard bounce or an unsubscribe becomes a suppression that applies across your workspace and outranks any campaign. Suppressions are not removable by a campaign and are kept for as long as the workspace exists, because deleting one would mean contacting someone who asked not to be contacted.

Why we are allowed to hold it

For your account data, our basis is the contract between us, and our legitimate interest in running and securing the service. For candidate data we act on your instructions; you are responsible for having a lawful basis for the recruiting you do, and for any notice you owe the people in your pipeline.

Do not put special category data — health, religion, trade union membership, biometrics — into candidate notes. The product has no field for it and no need of it.

Who else sees it

The sub-processors listed on the security page, each for one job: Hetzner for hosting, Anthropic for screening, Resend for email, Google for sign-in where a workspace uses it, and the enrichment provider you select if you turn enrichment on.

We do not sell personal data, we do not share it with advertising networks, and we do not use it to train any model. We will disclose data if a valid legal process requires it, and where we are permitted to tell you, we will.

How long we keep it

• Workspace data: for as long as your workspace is active. After you close it, deleted within thirty days, except where a backup rotation holds a copy for a little longer.
• Audit log: for the life of the workspace, because a log you can edit or expire on demand is not a log.
• Suppressions: for the life of the workspace, for the reason above.
• Signup and contact form messages: up to twenty-four months, so we can find a conversation we had with you.

Your rights

You can ask us for a copy of your account data, ask us to correct it, or ask us to delete it. Write to [email protected] and we will answer within thirty days.

If you are a candidate or a business contact whose record sits in a customer's workspace, the customer is the controller and is the right first stop. Write to us anyway if you cannot find them: we will pass the request on and tell you that we have.

Where the data sits

The Slate server and its database are in Germany. Some sub-processors process data in the United States, under the standard contractual clauses or an equivalent transfer mechanism.

Changes and contact

Changes to this page are posted here with a new date at the top, and material changes are emailed to the address on your account. Questions go to [email protected] or through the contact page.