Skip to main content
Slashy needs access to your email and calendar to work. This page explains what’s stored, why, how long, and what controls you have.
Slashy Account settings showing AI feature toggles, the bring-your-own Anthropic API key option, and Read mode

​
Data Slashy Stores

  • Metadata: Sender, recipients, subject, date, thread IDs, labels, read/unread status
  • Content: Message bodies indexed (encrypted) for AI features and search
  • Attachments: Metadata only — content fetched from Gmail on demand
  • Calendar: Event titles, times, attendees, locations, descriptions, recurrence
  • Memories: Facts about you and contacts (Settings > Memories)
  • Agent conversations: Chat history for context continuity
  • Automation logs: Trigger records and actions taken
  • Labels, snippets, automations, tasks, blocked/unsubscribed senders
  • Theme, compose mode, notification preferences
  • Email tracking data (open timestamps, device info)
  • Analytics (PostHog): Anonymized usage events — no email content
  • Error logs (Sentry): Crash reports with technical context — no email content

​
OAuth Access Model

Slashy connects via Google OAuth 2.0 with scoped permissions: Slashy has no access to Google Drive, Docs, or other services. Review and revoke access anytime at myaccount.google.com/permissions.

​
Your Controls

  • Memories: Settings > Memories
  • Automations: Settings > Automations
  • Snippets: Settings > Snippets
  • Agent history: Agent sidebar
  • Full export: Email privacy@slashy.com for a machine-readable export (within 30 days per GDPR)

​
Deletion Timeline

​
GDPR Rights

If you are in the EEA: right of access, rectification, erasure, data portability, restrict processing, and right to object. Email privacy@slashy.com — all requests handled within 30 days. See the Privacy Policy and DPA for full legal details.

​
Common Data Questions

No. Slashy stores attachment metadata (filename, size, type) but fetches the actual file content from Gmail on demand. Your attachments remain in Google’s infrastructure.
Yes. Email privacy@slashy.com for a machine-readable export of your memories, automations, snippets, and agent history. Delivered within 30 days per GDPR.
Nothing. Slashy never modifies your Gmail data destructively. Your emails, labels, and contacts remain exactly as they were. Deleting Slashy simply removes the sync connection.

AI Privacy

How AI providers handle your data

Security & Privacy

Certifications, encryption, and compliance

Subprocessors

Full infrastructure provider list