Privacy Policy

Introduction

Welcome to Sleek. We are committed to protecting your privacy and being transparent about how we collect, use, and protect your personal information. This Privacy Policy explains our data practices in detail.

By using Sleek, you agree to the collection and use of information in accordance with this policy.

Information We Collect

1. Personal Information

We collect the following personal information when you use our service:

• Account Information: User ID and email address (collected during registration and authentication)
• Professional Information: User role selections (founder, frontend developer, backend developer, designer, marketing team, product team, other)
• Authentication Data: The authentication method you choose (GitHub, Google, or Email)

2. Project Information

• Project identifiers (IDs and names)
• Project content and designs you create
• AI prompts and instructions you provide to our AI features
• File attachments you upload

3. Usage Data

We automatically collect detailed information about how you interact with our service:

• Page views and navigation paths
• Feature usage and interaction patterns
• Button clicks and menu selections
• Design toolbar interactions and changes
• Zoom actions and editor controls
• Chat submissions and AI interactions
• Code viewing and copying actions
• Session duration and timestamps
• Page entry and exit events

4. Technical Information

• Device type and operating system
• Browser type and version
• IP address and approximate geographic location
• Screen resolution and device capabilities
• Referrer URLs

5. Error and Diagnostic Data

• Error messages and stack traces
• Console log output (for debugging purposes)
• Application state at time of errors
• Performance metrics

6. Payment Information

• Plan selections and billing cycle preferences (monthly/yearly)
• Payment processing is handled by Stripe; we do not store your credit card information

How We Collect Information

1. Automatic Collection

We use analytics tools to automatically collect information about your use of our service. This includes:

• Automatic page view tracking
• Session recording and replay
• Event tracking for user interactions
• Error monitoring and reporting
• Console log recording for debugging

2. Information You Provide

• Account registration details
• Profile information and role selections
• Content you create (projects, designs, prompts)
• Communications with our support team

3. Third-Party Authentication

When you sign in using GitHub or Google, we receive your email address and user ID from these providers.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to provide and improve our service.

Analytics Cookies

We use PostHog analytics (self-hosted at gatto.sleek.design) to understand how users interact with our service. PostHog sets the following cookies:

• ph_phc_[key]_posthog: Contains a unique identifier (distinct_id) used to track your session and associate events with your account

What We Track with PostHog

• User identification and session tracking
• Page views and navigation patterns
• Feature usage and interaction events
• Error occurrences and debugging information
• User properties and role information

Important: Our analytics tracking is currently enabled by default for all users. We do not currently offer an opt-out mechanism.

Third-Party Services

We use the following third-party services to provide and improve our platform:

PostHog

Purpose: Analytics, event tracking, session recording, and error monitoring
Data Shared: All usage data, user information, and technical data described above
Hosting: Self-hosted at gatto.sleek.design
Privacy Policy: PostHog Privacy Policy

Supabase

Purpose: User authentication and database services
Data Shared: Email address, user ID, and authentication credentials
Privacy Policy: Supabase Privacy Policy

Stripe

Purpose: Payment processing
Data Shared: Billing information and transaction details
Privacy Policy: Stripe Privacy Policy

Resend

Purpose: Transactional email delivery
Data Shared: Email address and email content
Privacy Policy: Resend Privacy Policy

How We Use Your Information

We use the collected information for the following purposes:

1. Service Provision

• Creating and managing your account
• Providing access to our AI-powered design tools
• Storing and managing your projects
• Processing your payments and managing subscriptions

2. Product Improvement

• Analyzing usage patterns to improve features
• Understanding which features are most valuable
• Identifying and fixing bugs and errors
• Optimizing performance and user experience
• Developing new features based on user behavior

3. Communication

• Sending transactional emails (account updates, receipts)
• Providing customer support
• Notifying you of service changes or updates

4. Security and Fraud Prevention

• Detecting and preventing fraudulent activity
• Monitoring for security threats
• Enforcing our terms of service

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to:

• Comply with our legal obligations
• Resolve disputes
• Enforce our agreements
• Maintain analytics and error logs for product improvement

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal purposes.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using HTTPS/TLS
• Secure authentication mechanisms
• Regular security audits and updates
• Access controls and authentication requirements

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Your Rights and Choices

GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have the following rights:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information
• Right to Restrict Processing: Request that we limit how we use your information
• Right to Data Portability: Request a copy of your data in a machine-readable format
• Right to Object: Object to our processing of your personal information
• Right to Withdraw Consent: Withdraw consent where we rely on consent as the legal basis for processing

CCPA Rights (California Users)

If you are a California resident, you have the following rights:

• Right to Know: Request information about the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of your personal information (note: we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

Exercising Your Rights

To exercise any of these rights, please contact us at privacy@sleek.design. We will respond to your request within 30 days.

Children's Privacy

Our service is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (for significant changes)
• Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Support: mattia@sleek.design

Data Processing Details

For transparency, here are specific details about our data processing activities:

Legal Basis for Processing (GDPR)

• Contract Performance: Processing necessary to provide our services to you
• Legitimate Interests: Analytics, error tracking, and service improvement
• Consent: Where you have provided explicit consent for specific processing activities
• Legal Obligation: Compliance with applicable laws and regulations

Sensitive Information

Please be aware that AI prompts you submit may contain sensitive or personal information. We recommend:

• Not including personally identifiable information in prompts
• Not sharing confidential business information
• Being mindful of what content you upload or create

We process this information to provide the AI functionality you request but do not use it to train models or share it with third parties except as described in this policy.