Last updated: August 2026
This agreement is part of the Terms of Service and applies whenever SleekBase processes personal data of your customers on your behalf. Here, "you" is the business owner and "we" is SleekBase.
You are the controller of your customers' personal data: you decide why and how it is processed. SleekBase is the processor: we process that data only to provide the Service, following your instructions. For our own data about you as a customer — your account and billing — SleekBase is the controller, and our Privacy Policy applies.
We process your customers' personal data for as long as your account is active, plus the deletion window described below. The purpose is to operate your Digital Branch: serve visitors, answer questions, quote, qualify, book appointments, send confirmations and reminders, and show you the results in your dashboard.
Data subjects: the visitors and customers of your Digital Branch. Categories of data: identity and contact details (name, phone, email), the content of conversations with the AI Manager, appointment details (date, time, service, number of people, notes) and any audio or images the customer chooses to send. We do not intentionally process special categories of data; you must not enter health, financial or other sensitive data into the Service beyond what a normal appointment requires.
We will: process the data only on your instructions and to provide the Service; not sell it or use it for our own purposes; not use it to train general-purpose AI models; keep it confidential and limit access to the personnel who need it; apply the technical and organizational security measures described in our Privacy Policy; and assist you in fulfilling your own legal obligations.
You authorize us to use the sub-processors needed to run the Service: cloud hosting and application infrastructure, large language model providers (AI Manager replies), Stripe (payments), our email provider, our telecom provider (text messages) and Google Calendar (only if you connect it). Each is bound by a written contract with obligations no less protective than this agreement. If we replace a sub-processor in a way that materially affects the processing, we will inform you in advance.
We apply encryption in transit and at rest, access control on a need-to-know basis, encrypted storage of OAuth tokens, hashing of verification codes, environment isolation of secrets, and periodic review. You are responsible for the security of your own account, including who you give access to.
If we become aware of a breach affecting your customers' personal data, we will notify you without undue delay with the information we have — nature of the incident, data affected, likely consequences and measures taken — so that you can meet your own notification duties.
If one of your customers asks you for access, correction, export or deletion of their data, you can act directly in your dashboard, and we will help you with anything you cannot do there. If a request reaches us directly, we will refer the person to you and inform you, unless the law requires otherwise.
You can export or delete your customers' data at any time from your dashboard. When you delete your account or the Service ends, we delete your customers' personal data within 30 days, except any copy we must keep by law and routine backups, which expire on their own cycle.
On reasonable written request, and no more than once a year unless an incident justifies it, we will give you the information you need to confirm we are complying with this agreement.
Data is processed primarily in the United States. Where a transfer involves personal data from another jurisdiction, we rely on the safeguards agreed with each sub-processor.
In case of conflict between this agreement and the Terms of Service regarding the processing of your customers' personal data, this agreement prevails.
For any question about this agreement, or to request a signed copy, write to us at:
Email: info@sleekbase.io