Privacy Policy - Slipstream DMS

1. Introduction

Slipstream DMS ("we," "our," or "us") operates the Slipstream DMS platform ("Service"). This Privacy Policy describes how we collect, use, disclose, and protect information when you use our Service. By using the Service, you consent to the practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

We collect information in the following ways:

Information you provide

Account and profile: Name, email address, and password when you register or update your account.
Organization and team: Organization name, location details, timezone, and information about team members and roles when you set up or manage your organization.
Communications: Information you provide when you contact us, participate in support, or respond to surveys.

Information we collect automatically

Usage data: How you use the Service, including pages visited, features used, and actions taken.
Device and log data: IP address, browser type, operating system, and similar technical information when you access the Service.
Cookies and similar technologies: We use cookies and similar technologies to maintain your session, remember preferences, and improve the Service. See Section 6 for more detail.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, maintain, and improve the Service
Authenticate you and manage your account and access
Process invitations, team membership, and organization administration
Send transactional and service-related messages (e.g., account verification, password reset, invite notifications)
Respond to your requests and provide support
Monitor and analyze usage, performance, and security of the Service
Detect, prevent, and address fraud, abuse, or security issues
Comply with legal obligations and enforce our terms
Communicate with you about the Service, updates, or marketing (where permitted and with opt-out)

4. How We Share Your Information

We may share information in the following circumstances:

Within your organization: Other users in your organization (e.g., admins, managers) may see your name, email, role, and activity as needed for the Service.
Service providers: We use third-party providers for hosting, authentication (e.g., Amazon Cognito), email (e.g., Amazon SES), analytics, and support. These providers process data on our behalf under contractual obligations.
Legal and safety: We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of us, our users, or the public.
Business transfers: In connection with a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction.

We do not sell your personal information to third parties for their marketing purposes.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service and fulfill the purposes described in this policy. We may retain certain information after account closure to comply with legal obligations, resolve disputes, enforce agreements, and for legitimate business purposes (e.g., audit logs). When we no longer need the information, we will delete or anonymize it where practicable.

6. Cookies and Similar Technologies

We use cookies and similar technologies to:

Keep you signed in (session cookies)
Remember your preferences (e.g., selected organization)
Understand how you use the Service and improve performance
Support security and fraud prevention

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service (e.g., you may need to sign in again).

7. Security

We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit, access controls, and secure authentication. However, no method of transmission or storage over the internet is completely secure; we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location, you may have the right to:

Access and receive a copy of your personal information
Correct or update your personal information (e.g., via account settings)
Request deletion of your personal information
Object to or restrict certain processing
Data portability
Withdraw consent where processing is based on consent
Lodge a complaint with a supervisory authority

To exercise these rights, contact us using the information in Section 12. We will respond in accordance with applicable law. If you are in the European Economic Area or United Kingdom, we process your data on the bases described in this policy (e.g., contract performance, legitimate interests, consent).

9. Children

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

10. International Transfers

Your information may be processed in the United States or other countries where we or our service providers operate. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws. Where required, we implement appropriate safeguards (e.g., standard contractual clauses) for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Material changes may be communicated by email or in-product notice. Your continued use of the Service after changes constitutes acceptance of the revised policy. If you do not agree, please stop using the Service and contact us regarding your data.

12. Contact Us

Questions about this Privacy Policy or our privacy practices may be sent to the contact information provided on our website or in the Service. We will respond to your request in accordance with applicable law.