Privacy Policy

Hancock Design LLC, doing business as Slope (“we”) operates Slope, a tool for tracking design progress at useslope.app. This policy explains what we collect, why, and what you can do about it. We don't sell personal information, and we don't use your content for advertising.

What we collect

Account information. Your email address, password (stored only as a salted hash by our authentication provider), display name, and an avatar image if you upload one. If you turn on two-factor authentication we store the TOTP secret and your recovery codes.

Content you create. Workspace, pod and project names and descriptions, hill positions and the notes attached to them, crit summaries and outcomes, target dates, and the activity history of those changes. Content belongs to the workspace it was created in and is visible to that workspace's members according to their role.

Invitations. When you invite someone we store the email address you entered and a one-way hash of the invite token. The token itself appears only in the emailed link.

Billing. If your workspace upgrades, Stripe handles the payment and we store only the Stripe customer and subscription identifiers and your plan and seat count. We never receive or store full card numbers.

Technical data. Our hosting and database providers log IP addresses, browser user-agent strings and request metadata for security and reliability.

How we use it

To run the product: authenticate you, show your workspace's data to the right people, send transactional email (invitations, notifications and daily recaps you have enabled), bill the workspace, and to diagnose problems and prevent abuse. We do not run advertising and do not profile you for marketing.

Automated summaries

Daily recaps and the in-app question box are generated by Anthropic's Claude API. To answer, we send a digest of recent workspace activity — workspace, pod, project and member names, hill positions and notes, and crit summaries — to Anthropic for processing. We do not send your email address, password, payment details or authentication secrets. Anthropic processes this data as our service provider and does not use it to train its models. If you would rather this never happen, an owner or admin can leave recaps off; the question box only runs when someone asks it a question.

Who else processes your data

We use a small number of providers, each processing data only to provide their service to us: Supabase (database, authentication and file storage), Vercel (application hosting), Stripe (payments), Resend (transactional email), and Anthropic (the automated summaries described above). Data is stored in the United States. We also disclose information if the law requires it, or to protect our rights or our users' safety.

Cookies

We set a session cookie to keep you signed in, and small preference cookies that remember your theme and whether you dismissed the getting started checklist. There are no advertising or cross-site tracking cookies. Clearing them signs you out and resets those preferences.

How long we keep it

Account and workspace data is kept while the account exists. Deleting your account removes your profile, memberships and notifications immediately, and deletes any workspace where you were the only member. Content you created in a shared workspace — projects, hill history, crits — stays with that workspace, with your authorship cleared. Backups roll off within 30 days. Billing records are retained as long as tax and accounting rules require.

Your choices

You can edit your name, avatar and email in Settings, and delete your account at any time from Settings → Account → Danger zone. If you are in the EEA or UK you have rights of access, correction, portability, erasure and objection; if you are in California you have rights of access, deletion and to opt out of sale (we do not sell data). Write to support@useslope.app and we will respond within 30 days.

Security

Traffic is encrypted in transit. Access to workspace data is enforced at the database level by row-level security policies, not only in the application. Two-factor authentication is available to every account and can be required for a whole workspace on paid plans. No system is perfectly secure, and we can't guarantee absolute security.

Children

Slope is a workplace tool and is not directed to children. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

Changes

If we change this policy materially we will update the effective date above and, for significant changes, notify account holders by email. Continuing to use Slope after a change means you accept it. See also our Terms of Service.