Privacy Policy

Please read these Privacy Policy carefully before using Sledge's platform

Effective Date: January 18, 2026

Introduction

This Privacy Policy explains how Sledge collects, uses, shares, and protects information when you use our platform, including software, websites, applications, and integrations (“Services”).

By using the Services, you agree to the practices described in this policy.

Scope of This Policy

This policy applies to:

  • Information collected through the Services
  • Communications such as support requests
  • Data from connected third-party integrations

This policy does not apply to third-party services that operate independently.

Information We Collect

Information You Provide

You may provide:

  • Account details (name, email, phone, business info)
  • Login and authentication data
  • Billing and payment information
  • Business data (documents, invoices, files)
  • Communications (support, feedback, inquiries)

Information Collected Automatically

We automatically collect:

  • IP address, device, browser, OS
  • Usage activity and performance logs
  • Error reports and diagnostics

We also use cookies to:

  • Maintain sessions
  • Remember preferences
  • Improve performance and security

Information from Integrations

If you connect third-party services, we may access:

  • Email data (metadata, attachments, timestamps)
  • Financial and accounting data
  • Integration configuration details
  • Secure access tokens

You are responsible for having permission to share this data.

Setup & Configuration Data

We store onboarding progress, preferences, and settings required for platform functionality.

How We Use Information

We use data to:

  • Operate and maintain the Services
  • Authenticate users and secure accounts
  • Process documents and workflows
  • Manage billing and subscriptions
  • Prevent fraud and misuse
  • Provide support and updates
  • Comply with legal obligations

We do not sell personal data.

Data Roles

Depending on use:

  • Sledge acts as a Data Controller for accounts, billing, and operations
  • Sledge acts as a Data Processor for customer data processed on your behalf

Integrations & Third-Party Data

Google Integration (Gmail)

Used for:

  • Reading emails for invoice extraction
  • Marking processed emails as read
  • Verifying user identity

Data is:

  • Not sold
  • Not used for ads or AI training
  • Deleted within 30 days after disconnection

Google Maps API

Used for:

  • Address validation and lookup

Only address data is shared (no personal account data).

Microsoft Outlook

Used for:

  • Email processing and syncing

Permissions include reading emails and maintaining connection.

QuickBooks Integration

Used for:

  • Syncing financial data (vendors, invoices, transactions)

Data is only used for requested functionality.

General Integration Rules

For all integrations:

  • Data is used only for requested features
  • Data is not sold
  • Data is not used for advertising or AI training
  • Access is restricted and secure

AI & Automated Processing

Sledge uses AI to:

  • Analyze documents
  • Extract and organize data

Outputs may contain errors.

Users must review results before use.

When We Share Data

SMS & Phone Numbers

Phone numbers and SMS opt-in consent are never shared with third parties for marketing purposes. Mobile information is used only to deliver the messages you opted into and is shared solely with the messaging providers (e.g. our SMS carrier) needed to send them.

Service Providers

We share data with trusted providers for:

  • Hosting and infrastructure
  • Payments and billing
  • Notifications and integrations
  • Customer relationship management (CRM), where contact details you submit (such as name, email, and phone) are stored so we can follow up with you

Business Transfers

Data may be transferred in case of:

  • Merger
  • Acquisition
  • Sale of assets

Legal Requirements

We may disclose data:

  • When required by law
  • To protect users and platform security

SMS / Text Messaging

If you provide a mobile number and check the SMS consent box on our waitlist/signup form, you opt in to receive onboarding and account text messages from Sledge at that number. SMS consent is optional and is never a condition of joining the waitlist or of any purchase.

  • Message frequency varies; message and data rates may apply.
  • Reply STOP to unsubscribe at any time, HELP for help, and START to re-subscribe.
  • We only text numbers that explicitly opted in via the consent checkbox.
  • Phone numbers and SMS opt-in consent are never shared with third parties for marketing purposes.

Data Retention

We retain data as needed for services and legal requirements.

Key timelines:

  • Integration data → deleted within 30 days after disconnect
  • Account data → retained up to 90 days after closure
  • Billing data → retained up to 7 years

Security

We use:

  • Encryption (in transit & at rest)
  • Access controls
  • Monitoring systems

No system is 100% secure, but we follow best practices.

Cookies

We use essential cookies to:

  • Maintain sessions
  • Improve performance
  • Enhance security

With your consent, we also use analytics and marketing cookies. This includes a third-party website-visitor-identification service that may identify the business you visit from (and associated professional contact details such as name, business email, and LinkedIn) so our team can follow up. This data is used for our own analytics and sales outreach and is never sold. These cookies load only after you accept, do not run for browsers sending a Global Privacy Control signal, and can be changed or withdrawn at any time via the cookie banner.

Users can also manage cookies via browser settings.

Cookie policy version 2, effective July 22, 2026. Your consent choice is recorded against this version; a material change to this policy asks for your consent again.

Changes since version 2 took effect: on September 13, 2026 we added _GRECAPTCHA (Google reCAPTCHA, anti-abuse) to the table below. It is a Necessary cookie, which is not subject to your consent choice, so it does not change what version 2 asked you to agree to and does not require a new consent. Noted here rather than by moving the effective date, so a consent choice already recorded against version 2 still resolves to the document that was in force when it was made.

CookieSet byCategoryDurationPurpose
cookie_consent_v1SledgeNecessary1 yearRemembers your consent choice.
sledge_aidSledgeNecessary2 yearsA random, anonymous visitor id. It is the subject of your consent record and, if you accept analytics, the id product analytics starts from.
token, auth_stateSledgeNecessary1 dayKeeps you signed in.
_GRECAPTCHAGoogle reCAPTCHANecessary6 monthsAnti-abuse. Set when you start filling in a public form (the waitlist), to tell a person from a script. It is a security measure, not analytics: it is never used to profile you or to advertise, and it is not tied to your consent choice, because a spam check a bot can switch off is not a spam check.
_ga, _ga_*Google AnalyticsAnalytics2 yearsDistinguishes visitors and sessions for website analytics. Set only after you accept analytics.
ph_*_posthogPostHog (US cloud)Analytics1 yearProduct analytics inside the app. Set only after you accept analytics.
swan.sid (local storage)SwanMarketingUntil clearedThe visitor-identification service described above. Loaded only after you accept marketing.
Ad identifiers (_gcl_*, and any set by a tag deployed through our tag manager)Google, and any advertising network we add a tag for (for example Meta or LinkedIn)MarketingPer networkConversion measurement for advertising. Google Consent Mode holds ad_storage, ad_user_data and ad_personalization denied until you accept marketing, so no advertising identifier is set before then, and withdrawing consent denies them again.

International Transfers

Data may be processed in the United States.

Laws may differ from your country.

Your Responsibilities

You must:

  • Have permission to share data
  • Follow applicable privacy laws
  • Review AI-generated outputs

Your Rights & Choices

You can:

  • Update account information
  • Disconnect integrations
  • Request account deletion

Some data may be retained if legally required.

Children's Privacy

Services are not intended for users under 18.

We do not knowingly collect children's data.

Third-Party Services

With your consent, we use Swan (getswan.com) to identify business visitors to our website.

Sledge is not responsible for external services.

Review their policies separately.

Policy Updates

We may update this policy anytime.

Continued use = acceptance of changes.

Contact

For questions or concerns:

support@getsledge.com
Privacy Policy - Sledge