Skip to main content
Slashy needs access to your email and calendar to work. This page explains what’s stored, why, how long, and what controls you have.

​
Data Slashy Stores

  • Metadata: Sender, recipients, subject, date, thread IDs, labels, read/unread status
  • Content: Message bodies indexed (encrypted) for AI features and search
  • Attachments: Metadata only — content fetched from Gmail on demand
  • Calendar: Event titles, times, attendees, locations, descriptions, recurrence
  • Memories: Facts about you and contacts (Settings > Memories)
  • Agent conversations: Chat history for context continuity
  • Automation logs: Trigger records and actions taken
  • Labels, snippets, automations, tasks, blocked/unsubscribed senders
  • Theme, compose mode, notification preferences
  • Email tracking data (open timestamps, device info)
  • Analytics (PostHog): Anonymized usage events — no email content
  • Error logs (Sentry): Crash reports with technical context — no email content

​
OAuth Access Model

Slashy connects via Google OAuth 2.0 with scoped permissions:
PermissionPurpose
Read and send emailInbox display, AI features, sending
Manage labelsImportance labels and Gmail label sync
Read and write calendarCalendar view, booking pages, events
Read contactsAutocomplete and enrichment
Slashy has no access to Google Drive, Docs, or other services. Review and revoke access anytime at myaccount.google.com/permissions.

​
Your Controls

  • Memories: Settings > Memories
  • Automations: Settings > Automations
  • Snippets: Settings > Snippets
  • Agent history: Agent sidebar
  • Full export: Email privacy@slashy.com for a machine-readable export (within 30 days per GDPR)

​
Deletion Timeline

TimelineWhat Happens
ImmediateAccount deactivated, sync stops
Within 24 hoursAll primary data permanently deleted
Within 7 daysCached email content and search indexes purged
Within 30 daysAll backup copies destroyed. No recoverable data remains.

​
GDPR Rights

If you are in the EEA: right of access, rectification, erasure, data portability, restrict processing, and right to object. Email privacy@slashy.com — all requests handled within 30 days. See the Privacy Policy and DPA for full legal details.

​
Common Data Questions

No. Slashy stores attachment metadata (filename, size, type) but fetches the actual file content from Gmail on demand. Your attachments remain in Google’s infrastructure.
Yes. Email privacy@slashy.com for a machine-readable export of your memories, automations, snippets, and agent history. Delivered within 30 days per GDPR.
Nothing. Slashy never modifies your Gmail data destructively. Your emails, labels, and contacts remain exactly as they were. Deleting Slashy simply removes the sync connection.

AI Privacy

How AI providers handle your data

Security & Privacy

Certifications, encryption, and compliance

Subprocessors

Full infrastructure provider list