Privacy Policy

1. Information We Collect

We may collect and process the following categories of information depending on how you interact with our Services:

• Account Information: Such as your name, email address, login credentials, organization details, and account preferences.
• Uploaded Content: Including original email design files and related metadata that you upload to the platform.
• Guest Slicer Preview: When you use the Try Email-Slicer guest preview, the selected image and slice-guide state are processed temporarily in your browser and are not uploaded to or stored by Email-Slicer. You must select the image again after entering the authenticated product workflow.
• Integration Information: Such as API credentials, integration settings, and configuration information you choose to connect (e.g., Klaviyo, Omnisend, or Figma), including connected-account identity details and selected design content needed to provide the integration.
• Billing Information: Subscription, payment, and transaction-related information. (Note: Payment details are processed securely by our third-party billing providers, such as Stripe; we do not store full credit card numbers).
• Usage and Technical Information: Such as IP address, browser type, device information, pages visited, interactions with the platform, logs, diagnostics, and similar technical data.
• Operational and Error-Monitoring Information: When an error or performance issue occurs, Email-Slicer and its error-monitoring provider, Sentry, may process diagnostic event details such as the affected application route, error information, browser or device information, IP address, correlation identifiers, and account or user identifiers (which may include an email address when associated with the request). We configure controls designed to redact credentials, request bodies, and secret-bearing query values from this monitoring data.
• Microsoft Clarity Analytics: On our public website at email-slicer.com and our application at app.email-slicer.com, we may use Microsoft Clarity to collect information about navigation and interactions, such as clicks, scrolling, page activity, and general usage patterns, together with related browser, device, and technical information. Depending on consent and the applicable configuration, Clarity may use cookies or similar identifiers and may provide session recordings and heatmaps. Clarity is configured with masking and route restrictions intended to reduce the capture of sensitive content. We do not intentionally send direct identifiers, organization identifiers, billing identifiers, integration identifiers, or similar identifiers to Clarity through custom identification or enrichment features.
• Google Analytics and Advertising Measurement: On approved production domains, and only after analytics consent, we may use Google Tag Manager to deliver limited Google Analytics events for the guest slicer funnel, completed account signup, successful login, a commercial account’s first successful template export, checkout initiation, and an initial paid subscription invoice. Checkout and purchase events may include the plan, billing cycle, amount, currency, and a Stripe invoice transaction identifier. Landing-page URLs may contain Google Ads click identifiers such as gclid, gbraid, or wbraid. Where analytics consent has been granted, Google tags loaded through Google Tag Manager may process the original landing URL for advertising attribution and conversion measurement. How each Email-Slicer surface handles these identifiers is described in Section 12. Email-Slicer does not intentionally persist raw click identifiers in its own attribution records. Which Google tags process this information depends on the published Google Tag Manager configuration. Custom application event payloads are designed not to include email, name, phone number, Stripe customer ID, Firebase UID, organization name, integration credentials, or design content.
• Cookies and Tracking Technologies: We use cookies and similar technologies to operate the website, remember preferences, analyze traffic, improve the Service, and, where applicable, support marketing and conversion measurement.
• Team and Invitation Information: Such as organization membership, roles, invites, and invitation status.

2. How We Use Information

We use your information to:

• Provide, operate, and maintain Email-Slicer;
• Authenticate users and manage accounts, organizations, roles, and invitations;
• Process uploaded designs and generate workflow outputs, including image analysis, OCR, classification, alt text generation, layout review, and related automation features;
• Support integrations requested by users;
• Provide customer support and troubleshoot issues;
• Improve platform reliability, workflow quality, product performance, platform optimization, and security;
• Understand website and application usage, navigation, usability, and user experience through analytics tools such as Microsoft Clarity, including session recordings, heatmaps, and interaction analysis where enabled and permitted by consent;
• Measure consented guest-demo and production conversion outcomes, including guest demo interactions, completed signup, and first successful template export, through Google Tag Manager and Google Analytics;
• Measure advertising attribution from Google Ads click identifiers through Google tags where enabled by the published Google Tag Manager configuration and permitted by analytics consent;
• Monitor usage, enforce security, and prevent abuse or fraud;
• Process operational and error-monitoring information, which may be identifiable, when reasonably necessary to diagnose failures, maintain reliability, and protect the Service;
• Use anonymized and aggregated operational data for analytics, debugging, service improvement, performance monitoring, security, reliability, and platform optimization, provided that such data does not identify a customer, its clients, users, or other individuals;
• Comply with legal obligations and enforce our Terms of Service.

Legal Basis for Processing (For EEA/UK Users): If you are located in the European Economic Area (EEA) or the UK, our legal basis for collecting and using your personal data depends on the context. We primarily process data to perform our contract with you (providing the SaaS platform), based on our legitimate business interests (improving our product and security), or with your consent.

3. Uploaded Designs, Slices, and Output

Because of the nature of our product, when you upload an original email design to Email-Slicer:

The Try Email-Slicer guest preview is different from an authenticated upload. Its selected image and image-derived guide state remain temporary in the browser, are not adopted into an account, and are discarded when the page is refreshed or the authenticated workflow begins. The preview surface is marked for masking by our configured session-recording controls, and guest analytics exclude image-derived details.

• The original uploaded design may be stored by Email-Slicer for operational and product-related purposes described in this Privacy Policy.
• Generated slices are used as part of the workflow and, after export, are intended to remain hosted in your connected third-party account (e.g., Klaviyo or Omnisend).
• Final exported HTML or template output is intended to remain in your connected account and is not stored by Email-Slicer in Firebase after the export process is complete.
• Email-Slicer may use AI service providers and related automation tools for image analysis, OCR, content extraction, alt text generation, classification, quality analysis, and similar workflow functions.
• Customer uploaded content is not used by Email-Slicer to train public AI models or public foundation models.

4. Retention of Original Uploaded Designs

Email-Slicer may retain the original uploaded design for up to twelve (12) months from the date of upload. We retain these designs during that period for the following purposes:

• Workflow processing and reprocessing;
• Support, troubleshooting, debugging, and quality assurance;
• Service reliability and platform improvement;
• Product development and future workflow capabilities, including potential future editing-related functionality;
• Internal analysis of design structures, layout patterns, and workflow quality.

Customer Privacy Commitment: We do not use customer designs for public marketing, promotional showcases, case studies, public examples, or similar outward-facing materials without prior written customer authorization. If we wish to feature your design publicly, we will request your explicit permission first.

5. Sharing of Information

We may share information with service providers and partners that help us operate Email-Slicer, including providers for cloud hosting, storage, authentication, analytics, billing, integrations, error monitoring, customer support tooling, and AI-assisted processing. This includes Google, which provides Google Tag Manager and Google Analytics, and may provide Google Ads measurement tags through Tag Manager where enabled, for consented conversion measurement and advertising attribution on approved production domains; Microsoft, which provides Microsoft Clarity for website and application analytics and user-experience analysis on our configured production surfaces; and Sentry, which provides application error and performance monitoring.

We may also disclose information:

• When required by law, subpoena, or legal process;
• To protect the rights, safety, and security of Email-Slicer, our users, or the public;
• In connection with a merger, acquisition, financing, or sale of business assets.

We do not sell your personal information, nor do we “share” it for cross-context behavioral advertising as defined by laws like the CCPA.

6. Third-Party Services

Email-Slicer relies on third-party providers such as Firebase, Render, Stripe, Figma, Klaviyo, Omnisend, Google Tag Manager, Google Analytics, Google Ads measurement tags where enabled, Microsoft Clarity, Sentry, other analytics providers, monitoring providers, and AI service providers. When you connect Figma, Email-Slicer may process your Figma account identity, selected frame/file content, rendered frame artifacts, and the OAuth permissions needed to retrieve that content. OAuth credentials are handled server-side. These providers may process information on our behalf or in connection with services you choose to use. Subject to analytics consent and the published Google Tag Manager configuration, Google may process Google Ads click identifiers from a landing URL and related browser or measurement information for advertising attribution and conversion measurement. Email-Slicer does not intentionally store raw click identifiers in its own attribution records. Microsoft Clarity may process browser, device, technical, navigation, interaction, session-recording, and heatmap information for the purposes described in this Privacy Policy. Sentry may process operational and error-monitoring information as described above to help us diagnose failures, monitor performance, and maintain the security and reliability of the Service. Your use of third-party services may also be subject to those third parties’ respective terms and privacy practices.

Email Marketing Platform Integrations: Email-Slicer supports integrations with third-party email marketing platforms, including Klaviyo and Omnisend. You choose whether to authorize a connection to a supported platform. When you do, Email-Slicer processes the integration information necessary to provide the Service, including the authentication credentials and access tokens needed to maintain the authorized connection. Exporting through an authorized integration transfers the email template, images, and related content you export to the platform you select. Each provider processes that information under its own privacy policy. You can disconnect a supported integration at any time.

7. Data Processing Roles

For Customer Content and any personal data you choose to provide through the Service, the customer is generally the controller or business decision-maker for that data. Email-Slicer generally acts as a processor or service provider when processing Customer Content on the customer’s behalf in order to provide the Service.

Customers are responsible for ensuring they have the right to provide the content they upload, connect, or transmit through Email-Slicer and for determining whether the Service is appropriate for their intended data and workflows.

8. Data Retention

We retain personal data only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy (such as maintaining your active account), unless a longer retention period is required or permitted by law (e.g., for tax or legal compliance).

If you delete your account or request deletion, active production data may be deleted or anonymized according to our standard deletion protocols. Data stored in automated backups may remain until those backups are overwritten or deleted under our standard backup retention schedules.

Operational logs and error-monitoring records are retained according to our applicable internal and service-provider retention settings for as long as reasonably necessary for troubleshooting, reliability, security, legal, and compliance purposes.

Analytics and conversion records are retained according to our applicable internal and provider settings for only as long as reasonably necessary to measure product performance, understand conversion outcomes, maintain reliable reporting, and meet legal or compliance needs. Google Analytics retention and deletion controls are managed through our provider configuration.

9. Data Security

We implement reasonable administrative, technical, and organizational measures designed to protect your information against unauthorized access, loss, or alteration. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee its absolute security.

10. Your Rights and Choices

Depending on your location (such as the EEA, UK, or California), you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data.
• Right to Restrict or Object: Object to or ask us to restrict the processing of your data.
• Right to Data Portability: Request your data in a structured, commonly used format.

To exercise any of these rights, please contact us using the information in Section 15. We will respond to your request within the timeframe required by applicable law.

11. International Data Transfers

Email-Slicer operates globally, and we may process and store information in the United States and other jurisdictions where our service providers operate. By using the Service, you understand that your information may be transferred to countries that may have different data protection laws than your own. When we transfer data originating from the EEA or UK to other countries, we rely on legally provided mechanisms, such as Standard Contractual Clauses, to ensure your data is protected.

12. Cookies and Similar Technologies

We use cookies and similar technologies to operate the website, keep users signed in where needed, remember preferences, analyze traffic, improve the Service, and, where applicable, support marketing and conversion measurement. On approved production domains, Google Tag Manager and Google Analytics conversion measurement, including consented login, checkout, and initial paid subscription events, is loaded only after analytics consent. Checkout and purchase events may include plan, billing cycle, amount, currency, and a Stripe invoice transaction identifier. Microsoft Clarity may use cookies or similar identifiers, subject to applicable consent and its configured privacy controls, to support session analysis and user-experience measurement on email-slicer.com and app.email-slicer.com.

• Essential Cookies: Required for core website and platform functionality, security, authentication, and basic session management.
• Google Analytics and Advertising Technologies: Where enabled and permitted by analytics consent on approved production domains, Google Tag Manager may load Google Analytics and advertising measurement tags for the conversion events described above. Google tags may use cookies or similar technologies for attribution according to the published Tag Manager configuration; that configuration determines which Google services process the information. Email-Slicer does not intentionally store raw click identifier values in its own attribution records.Application (app.email-slicer.com): When analytics consent was already recorded before a page loads with gclid, gbraid, or wbraid, configured Google tags may read the original landing URL for advertising attribution before Email-Slicer removes the identifiers from the browser URL. If consent is unknown or declined, this startup path does not load marketing tags and Email-Slicer removes the identifiers; later consent does not restore or replay them.Public website (email-slicer.com): Google Tag Manager loads only after you accept analytics. The website leaves click identifiers in the page URL so that, once consent is granted, including if you accept later on the same page, configured Google tags may read them for advertising attribution. If you do not accept, the website does not load these tags. When you follow a link from the website to the application, only the type of click identifier is passed along, not its value.
• Analytics or Performance Cookies: Help us understand how visitors and users interact with the website and Service so we can monitor performance and improve reliability.
• Microsoft Clarity Technologies: Where enabled and permitted by consent, Microsoft Clarity may use analytics technologies to support session recordings, heatmaps, navigation analysis, and interaction measurement. Clarity is configured with privacy controls, including masking and restrictions on sensitive routes, designed to reduce the capture of sensitive content.
• Preference Cookies: Remember settings and choices such as consent preferences or interface-related selections.
• Marketing Cookies: May be used where applicable to support marketing attribution or conversion measurement, but we do not claim to deploy them in all environments or at all times.

You can manage cookie choices through our cookie banner or browser settings. Disabling certain cookies may affect parts of the website or Service.

13. Children’s Privacy

Email-Slicer is a B2B platform not directed to children under 13 (or 16 in certain jurisdictions), and we do not knowingly collect personal information from minors. If we become aware that we have collected such data, we will take steps to delete it immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the “Effective Date” at the top of this policy, and we may provide additional notice via email or a platform notification.

15. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise your data rights, please contact us at: