1. Who we are
This Privacy Policy explains how SlickPoster ("we," "us," or "our") processes personal information when you use the SlickPoster websites, products, and services (collectively, the "Service"), including the site at https://master--slickposter.netlify.app (and any successor URLs).
For data protection questions, contact us at legal@slickposter.com. Depending on your region, you may also have rights to contact your local data protection authority.
2. Information we collect
We may collect the categories below, depending on how you use the Service.
Account and authentication
If you create an account (including via a third-party identity provider), we may collect your name, email address, and authentication identifiers issued by the provider, along with your profile settings and subscription plan.
Usage and device data
We may collect information about how you use the Service, such as pages viewed, search queries, interactions with product listings, and votes or saves, as well as technical data like IP address, general location (derived from IP), browser type, device identifiers, and timestamps. We may use cookies and similar technologies as described in our Cookie & similar technologies notice.
Deals, submissions, and community content
If you submit URLs, reviews, or other content, we collect the content and related metadata. Public-facing portions of the Service may display certain activity (for example, deal votes) to other users as designed by the product.
Email signups, alerts, and support
If you join a waitlist, enable alerts, or contact support, we collect the information you provide (such as email and message content) and send transactional or product emails in line with your preferences and applicable law. You can opt out of marketing messages using the link in those emails where required.
Payment information (billing)
If you purchase a paid plan, payment is processed by our payment provider (e.g. Stripe). We do not store your full card number on our servers. We may receive a limited payment profile, subscription status, billing history references, and tokens needed to manage your account from our payment processor.
Information from third parties
We may receive data from service providers, analytics partners, and authentication providers, consistent with their terms and this Policy.
3. How we use information
We use personal information to:
- Provide, secure, and improve the Service, including search, scoring, deal feeds, and account features
- Authenticate users, prevent fraud and abuse, and enforce our Terms
- Send service-related, transactional, and (where appropriate) product emails you request or that we are permitted to send
- Operate machine-learning and rules-based systems, including to score listings, label deals, and generate optional AI text where a feature is offered
- Comply with law, respond to lawful requests, and protect our rights, users, and the public
- Conduct analytics, debugging, and internal reporting, including to understand feature usage in aggregate form
4. Legal bases (EEA, UK, and similar)
Where the GDPR, UK GDPR, or similar laws apply, we process personal data on the basis of: (a) performance of a contract with you; (b) our legitimate interests that are not overridden by your rights (for example, securing the Service, product improvement, and fraud prevention); and (c) your consent, where we rely on it (such as non-essential cookies, where required). We may also process data to comply with legal obligations.
5. How we share information
We do not sell your personal information for money. We may share data:
- With service providers and subprocessors that help us run the Service (e.g. hosting, database, email delivery, payments, customer support, analytics, and AI APIs), under contractual protections
- In connection with a business transaction (e.g. merger, acquisition, or asset sale) subject to confidentiality
- When required by law, subpoena, or governmental request, or to protect the security and integrity of the Service
- With your direction or at your request (e.g. OAuth sign-in, integrations you enable)
The Service is built on infrastructure providers. For example, we may use Supabase for data storage and authentication, Stripe for payments, and email providers to deliver messages. We encourage you to review their public privacy materials for more detail.
6. Retention
We keep personal information only as long as needed for the purposes above, including legal, tax, and accounting needs. Retention can vary by data type. For example, back-ups may persist for a period after deletion in ordinary course of system operations, even though we will remove or anonymize data from active systems when appropriate.
7. Security
We implement technical and organizational measures we believe are appropriate for a service of this kind, including access controls, encryption in transit, and least-privilege practices. No method of storage or transmission over the Internet is completely secure, and we cannot and do not guarantee absolute security. You are responsible for safeguarding your account credentials and devices.
Security incidents
In the event of a security incident affecting personal data, we will take reasonable steps to investigate and mitigate, and we will provide notices required by applicable law, including to regulators and affected individuals when legally mandated. Nothing in this Policy changes mandatory breach-notification obligations where they apply.
8. Data loss, outages, and backups
Like any online product, the Service can experience errors, data corruption, deletions, outages, or other failures, including on third-party systems we rely on. We do not warrant uninterrupted availability or error-free performance. We may delete or lose data in some scenarios despite reasonable efforts, including during system migrations, user-initiated deletions, or third-party issues. The limitation of liability and disclaimers in our Terms of Service apply, subject to any rights you cannot waive under mandatory law.
9. International transfers
We may process and store data in the United States and other countries. If we transfer personal data from the EEA, UK, or Switzerland, we will use appropriate safeguards (such as Standard Contractual Clauses) when required, unless another lawful transfer mechanism applies.
10. Your rights and choices
Depending on your location, you may have rights to:
- Access, correct, or delete your personal information
- Object to or restrict certain processing, or request portability in line with law
- Withdraw consent, where we rely on consent for processing
- Opt out of certain marketing, as described in the relevant communications
To exercise rights, contact legal@slickposter.com. We may need to verify your identity. You may also have a right to complain to a supervisory authority.
11. United States state notices
California (CPRA/“CCPA”)
California residents may have additional rights under the California Consumer Privacy Act, as amended, including to know, delete, and correct personal information, and to opt out of "sale" and certain "sharing" for cross-context behavioral advertising. We do not sell personal information in the traditional sense, and we do not knowingly "share" for cross-context behavioral advertising as defined by the CPRA except as described in this Policy. You may request accessible disclosure of the categories and sources of data we collect, the purposes, and, for certain requests, the categories of third parties with whom we disclose data. We will not discriminate for exercising your rights where prohibited.
Other U.S. states
Additional state consumer privacy laws may provide similar or overlapping rights, subject to scope and exceptions. We apply reasonable processes to honor verifiable requests where we are a covered business and where the request is applicable.
12. Children
The Service is not directed to children under 16 (or the age required in your region), and we do not knowingly collect their personal information. If you believe a child has provided us personal information, contact us and we will take steps to remove it.
13. AI and automated decision-making
The Service may use AI or automated systems to sort listings, display scores, or generate text. These outputs can be wrong or incomplete. We do not use such systems in a way that produces solely automated decisions with legal or similarly significant effects to you, except as permitted by law and described in the product, and you should review important information on your own.
14. Changes to this Policy
We may update this Policy from time to time. The "Last updated" date at the top will change when we do. If changes are material, we will take additional steps as required, such as posting a more prominent notice or email notice where appropriate. Your continued use of the Service after the effective date of changes constitutes your acceptance, except where we need separate consent.
15. Contact
Questions: legal@slickposter.com. Legal hub: /legal.