Privacy policy

SLIM (the SITS Lighter Inbox Manager) is run by Simplified IT Solutions (registered in England and Wales, company number 00000000, registered office to follow). We are the data controller for the personal data described here. This policy explains what we collect, why, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).

What we collect

• Your sign-in: your name, email address, a hashed password and, if you turn it on, your two-factor settings.
• Your account: its name, the people in it and their roles, and your settings.
• Mailbox connection details: each mailbox's address, server settings and app password or access token. Passwords and tokens are stored encrypted and used only to connect to your mailbox.
• Email headers: for each email in your connected mailboxes, the sender's name and address, subject, date, size, folder, whether it has been read, and its unsubscribe link. We never store the text of your emails or their attachments.
• What you do in SLIM: clean-ups, rules, your safe list, unsubscribes and the screener, so they can be shown, checked and undone.
• Billing: your subscription and invoices. Card details are handled by Stripe; we never see or store them.
• Technical data: sign-in sessions and server logs (such as IP address and browser), kept for security.

Why we use it

• To provide SLIM to you under our terms: showing your email grouped by sender, and carrying out the clean-ups, unsubscribes and rules you ask for (contract).
• To take payment and keep financial records (contract and legal obligation).
• To keep SLIM secure and working, and to help you when you ask (legitimate interests).
• To send emails you have asked for, such as the read later digest and the monthly report. You can turn these off in Account settings.

We don't sell your data, use it for advertising, or use your email headers to train AI models.

When you unsubscribe

To unsubscribe you from a sender, SLIM uses the link or address the sender gave in their email. This tells that sender that your address wants to stop receiving their mail.

Google user data

If you connect a Google account, SLIM's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use it only to provide the features you see in SLIM, and people at Simplified IT Solutions don't read it unless you ask us to help, it's needed for security, or the law requires it.

Who else processes it

• Stripe, for payments.
• Our hosting provider, which runs the servers SLIM is on.
• Our email provider, which sends SLIM's own emails (such as sign-in codes and reports).
• Anthropic, only if an owner of your account turns on AI. SLIM then sends Anthropic the senders, subjects and dates of your emails to sort senders, suggest a clean-up plan, write rules and answer questions. Never the text of an email. Anthropic doesn't use it to train its models.
• Sentry, which tells us when something goes wrong in SLIM. Error reports say where the error happened and on which page, never your mailbox passwords or anything from your emails.
• Your IT provider or our support team, only if an owner of your account lets them in, and only while that lasts.

Where any of these process data outside the UK, they do so under safeguards approved under UK law.

How long we keep it

We keep your account's data while the account is open. Email headers are removed when the emails leave your mailbox. The detail of each clean-up is kept for 30 days so it can be undone. When an owner closes the account, its mailboxes, passwords, email headers and history are deleted straight away. Billing records are kept for as long as the law requires (usually six years).

Your rights

You can ask for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to take it elsewhere. Account owners can download the account's data and close it in Account settings, and anyone can delete their sign-in from My profile. For anything else, email hello@slim.example.

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If we change this policy in a way that matters, we'll tell account owners by email before it takes effect.