Privacy Policy

This privacy policy ("Policy") for SlashGo ("we", "us", "our") describes how we collect, protect and use the personally identifiable information ("Personal Information") you ("user", "you" or "your") provide on https://slashgo.io and any of its products or services (collectively, "Website" or "Services") such as

• Visit our website at https://slashgo.io or use any website that is part of our network.
• Use any of our other products or services, engage with our sales, marketing or any virtual or real world events that are part of our network.

Please read this privacy policy carefully, it contains important information about your rights and how we handle your personal information. If you disagree or have concerns about our privacy policy, please do not use our website or services or contact us at [email protected].

Summary (TL;DR)

This summary section is provided for your convenience. To read the full privacy policy, scroll down or click on any of the linked sections.

What personal information do we collect and process? We may collect and process personal information from you as you visit and use our website. You can find more information about the personal information we collect

What sensitive information do we collect and process? We do not collect or process any sensitive information from you.

Do we collect information from third parties? We do not collect information from third parties.

Do we share information with third parties? We may share information with third parties. You can find more information about the third parties we share information with

How do we process your information? We process your information to provide you with the services you have requested or are interested in. We may also use your information for other purposes such as improving our services, communicating with you, security and compliance and law enforcement. All information is collected and processed for only valid legal reasons with your consent, which you can withdraw at any time. More information about how we process your information

How do we protect your information? We implement security measures to maintain the safety of your personal information. We take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. More information about how we protect your information

How can you manage your personal information? You can change your name and delete your account yourself in your SlashGo account settings. You can also request to access, correct, update or delete your personal information by contacting us at [email protected].

Privacy Policy Sections

1. Information we collect
2. How we use or process your information
3. Legal basis for information collection and processing
4. Information sharing and disclosure
5. Web tracking and cookies
6. How we protect your information
7. Browser Extension
8. Data retention
9. Data Breach Notification
10. US State Privacy Laws
11. California Privacy Rights Act (CPRA)
12. Your privacy rights
13. Changes to our privacy policy
14. Contact us

Information we collect

Information you disclose to us

We collect personal information that you voluntarily disclose to us during your visit and use of our services, participate in sales or marketing events or contact us. Information may include

• Name
• Email
• IP Address
• Anonymized usage data

We do not collect or process any sensitive information from you.

When an organization subscribes to a paid plan, payment details are entered on Stripe's hosted checkout and billing portal. We do not receive or store card numbers. We keep the organization's Stripe customer ID and read its plan and subscription status from Stripe.

We use third-party payment processors to assist us in processing your payment information securely. Such third-party processors' use of your personal information is governed by their respective privacy policies.

• https://stripe.com

You can sign in with Google or with a sign-in link we email you. When you sign in with Google, Google shares your name, profile picture, email address and, for a Google Workspace account, its domain with us. We keep the Google account ID, to recognise you next time, and your name and email address. We use the domain to match you to your team and do not keep the picture. We never receive a password.

Information derived from your use of our services

We may collect and log app usage data such as the date and time the app on your device accesses our servers and what information and files have been downloaded to the app based on your device number, ip address or user account.

We may use cookies to collect information about you and your activity across our website. Cookies are small data files stored on your device that help us improve our services and your experience.

How we use or process your information

We use and process the information we collect for day to day running of our services, to improve our services, to communicate with you, to provide support, to protect our services, to comply with legal obligations and to enforce our terms and conditions.

Specific uses of information include

• To create, manage and support user accounts to provide access to our services.
• To communicate with you about your account, our services, sales, marketing, events, updates, user to user communications or other information.

Legal basis for information collection and processing

We collect and process your information for only valid legal reasons with your consent, which you can withdraw at any time. We may collect and process your information for the following reasons

• You have given us consent to collect and process your information for the purposes of providing you with our services, improving our services, communicating with you, security and compliance and law enforcement.
• The processing of your information is necessary for the performance of a contract to which you are a party, such as the terms of service or other agreements we have with you.
• The processing of your information is necessary to comply with a legal obligation, a court order or to exercise and defend legal claims.
• The processing of your information is necessary to protect your vital interests or of another person.
• The processing of your information is related to a task that is carried out in the public interest or in the exercise of official authority vested in us.
• The processing of your information is necessary for the purposes of the legitimate interests pursued by us or by a third party are not outweighed by your interests or fundamental rights. For example, we may process your information to
  • We may use your information to monitor and analyze web traffic, to keep track of user behavior, to improve the user experience and to personalize the content you see.
  • We may use your information to protect our services, to enforce our terms and conditions, to comply with our legal obligations and to protect the rights and safety of others.

Information sharing and disclosure

We may share your information with third party vendors, service providers, contractors or agents who perform services for us or on our behalf and require access to such information to do that work.

Third parties we may disclose your information with include

• Jamwidgets, a Cosmic Glue product that runs our product-updates signup, contact form, product announcements, in-app feedback and page-view counts. For each view of a public page it receives the page path and a random ID kept for the browser tab; signed-in app pages, sign-in pages and per-company start pages are not counted. It receives your email address when you subscribe to product updates; the name, email address, topic and message you send through the contact form; and, for feedback and problem reports, your message, the page address without its query string, your browser's user agent and, if you are signed in or add it, your email address. Widget requests carry a random visitor ID kept in your browser's storage, which keeps dismissed announcements dismissed.
• Jamwidgets' AI spam-check providers, Concentrate and Amazon Bedrock. When Jamwidgets' rule-based checks have not already held a contact-form message for review, the fields you filled in (name, email address, topic and message) and the form's identifier are sent for a spam check. Jamwidgets keeps only the spam score, the reasons given and whether the message went to review; the check never rejects a message on its own. Nothing else from SlashGo is sent to an AI provider.
• PostHog, our error-reporting provider, which receives reports of errors in your browser and on our servers: the error message with email addresses, web addresses and credentials removed, where in our code it happened, and the app version. Reports are not linked to your account, and browser reports use a random ID that is not stored in your browser. Location lookup from IP addresses is turned off.
• Cmdline, Cosmic Glue's customer operations system, which receives account profiles (name, email address and organization, and the organization's plan, billing status, including whether it is in a trial, and billing interval) and activity such as sign-ups, sign-ins, joining or leaving a team, invitations sent (without the invitee's email address), deactivations, extension use, team-size and /go link milestones, checkouts started, trials and subscription changes, organizations deactivated or deleted, team settings turned on or off, email domains claimed (without the domain itself), Slack workspaces connected or disconnected, and /go links created and opened, including from Slack (as IDs, counts and dates, not slugs or destinations), so we can support customers.
• Slack, when your team connects a Slack workspace. When someone uses /go in that workspace, Slack sends us the command with their Slack user and workspace IDs, and our reply sends back the /go link and its destination. To credit a link to the right SlashGo account, we ask Slack for the email address on that person's Slack profile and match it to your team's members; the address is kept in memory for a few minutes and not stored.
• Google, when an organization on the Team plan turns on automatic offboarding for its claimed domain. Every hour, using the read-only directory access the organization's Google Workspace administrator grants, we look up the organization's members by email address in its Google Workspace directory and remove members whose Google accounts are suspended or deleted. Google receives those email addresses; we keep only the outcome.
• Stripe for payments, and Amazon Web Services and Postmark to host the service and deliver its email.

During financing, acquisition or bankruptcy proceedings, your information may be shared with potential or actual acquirers or investors and their agents.

Web tracking and cookies

We may use various web tracking technologies to collect information about you and your activity across our website.

We may use cookies to collect information about you and your activity across our website. Cookies are small data files stored on your device that help us improve our services and your experience.

We may use third party analytics providers to measure and evaluate access to and traffic on our website, create user navigation reports or marketing reports.

How we protect your information

We follow industry best practices to protect your information and implement security measures to maintain the safety of your personal information.

Browser Extension

The SlashGo browser extension collects the following information:

Data Collection

• Current tab URL - The URL of the page you're currently viewing when you interact with the extension
• Form input - Data you enter into forms within the extension

Permissions

The extension requests the following browser permissions:

• Declarative Net Request - Redirect or block network requests using predefined rules
• Tabs - Access to browser tab information (URLs, titles)

Host Permissions

The extension may access or modify content on the following domains:

• All websites (required for the extension's core functionality)

Data Handling

Browsing content and /go link destinations collected by the extension are used to provide its core functionality, not for advertising or usage analytics. We separately record server-side operational signals, such as authenticated extension use, to understand onboarding, diagnose problems, and provide customer support. These records may be associated with your account information, such as your name, email address, and organization, in our access-controlled internal customer operations systems.

When you use the extension to create or manage /go links, the relevant data (such as the current page URL or form input) is transmitted securely to slashgo.io over HTTPS. This data is processed only as necessary to fulfill your request. When you remove the extension, your browser opens slashgo.io/extension/uninstalled. That address carries no identifier, and the page does not check whether you are signed in or count the visit. Anything you choose to send in answer to its question about why you removed it goes to Jamwidgets as feedback.

The extension processes data locally in your browser wherever possible. Data is only transmitted to our servers when you explicitly perform an action that requires it, such as creating or looking up a /go link.

Data Storage

Extension preferences and settings are stored locally on your device using your browser's built-in storage APIs. This data remains on your device and is not transmitted to our servers.

Data that is transmitted to our servers (such as /go links you create) is stored securely in encrypted databases. We retain this data for as long as your account is active or as needed to provide our services.

Data Sharing

We do not sell or trade your extension data, or share browsing content and /go link destinations with third parties for advertising or analytics. Account information and server-side operational signals are available only to authorized personnel for operating and supporting our services.

The extension does not collect browsing history, track your activity across websites, or access data from pages you visit beyond what is necessary for its stated functionality.

For more information, see our extension store listing.

Data retention

We retain your information for as long as necessary to provide you with our services, to comply with our legal obligations, to resolve disputes, to enforce our agreements or to protect our legal interests.

Your data will only be kept for as long as you maintain an account with us.

You can delete your account at any time from your account settings. That deletes your name, email address and sign-in methods, signs you out everywhere, and withdraws invitations sent to your address. An organization that removed you keeps your email address, so you can't rejoin it through its claimed domain unless it invites you again. The /go links you created belong to your organization, so they stay with it and pass to one of its owners; its click counts and audit log keep their entries without your name. If you are your organization's only owner, make someone else an owner or delete the organization first.

An organization's owner can delete the organization from its settings. That cancels its paid subscription, if any, disconnects Slack and permanently deletes its /go links and their click history, its audit log and its pending invitations. Its members keep their own accounts.

Your data at the end of the retention period will be deleted or anonymized where possible, or if this is not possible, then securely stored and isolated from any further processing until deletion is possible.

Data Breach Notification

We take data security seriously and have implemented measures to protect your personal information. In the unlikely event of a data breach that affects your personal information, we will notify you in accordance with applicable law.

If we discover a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay.

We will notify affected users within 72 hours of becoming aware of a qualifying data breach, as required by applicable law.

Our notification will describe the nature of the breach, the types of data affected, the likely consequences, and the measures we have taken or propose to take to address the breach.

If you believe your data may have been compromised, please contact us immediately at [email protected].

US State Privacy Laws

California Online Privacy Protection Act (CalOPPA)

CalOPPA requires commercial websites and online services to post a privacy policy. The law's reach stretches well beyond California to require a person or company in the United States (and conceivably the world) that operates websites collecting personally identifiable information from California consumers to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals with whom it is being shared, and to comply with this policy. See more information about CalOPPA compliance at consumercal.org.

• California residents have the right to know what personal information we collect, disclose, and sell about them. To exercise this right, California residents may submit a request to us at [email protected].
• California residents have the right to request the deletion of their personal information. To exercise this right, California residents may submit a request to us at [email protected].
• California residents have the right to opt out of the sale of their personal information. To exercise this right, California residents may submit a request to us at [email protected].

Do Not Track signals

We do not respond to Do Not Track signals.

Your California Privacy Rights (California's Shine the Light law)

California residents have the right to request information about the personal information we have shared with third parties for their direct marketing purposes, including the categories of information and the names and addresses of those businesses. You can request this information once per calendar year. To make such a request, please contact us at [email protected].

California Privacy Rights for Minor Users (California Business and Professions Code Section 22581)

California residents under 18 years of age may request the removal of any information that they posted to our website. To request removal of such information, please contact us at [email protected]. Note that the removal of such information does not ensure complete or comprehensive removal of the content or information posted on our website.

California Privacy Rights Act (CPRA)

The California Privacy Rights Act (CPRA) provides California residents with additional privacy rights beyond those in CCPA. As a California resident, you have the following rights:

• You have the right to request that we correct inaccurate personal information we maintain about you. To exercise this right, please contact us at [email protected].
• You have the right to limit the use and disclosure of your sensitive personal information to uses necessary to perform services or provide goods reasonably expected by an average consumer. To exercise this right, please contact us at [email protected].
• You have the right to opt out of automated decision-making technology, including profiling, where such decisions produce legal or similarly significant effects. To exercise this right, please contact us at [email protected].

Your privacy rights

You have the right to access, update or delete your personal information. You can also object to the processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information.

You can update your name and delete your account in your SlashGo account settings, or access, update or delete your personal information by contacting us at [email protected].

You can object to the processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information by contacting us at [email protected].

Changes to our privacy policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.

Contact us

If you have questions or comments about this privacy policy, you can contact us at [email protected].

SlashGo