Privacy
What we hold, why we are allowed to hold it, and how to make us delete it. Including the part most policies skip, which is the information we hold about people who never signed up.
In effect from 30 September 2026
The short version
Sluice does two things with personal information. It holds an account for you, and it reads public posts and listings which contain information about other people so it can tell you who is worth contacting.
The second is the part that deserves a careful answer, and it is answered below rather than buried.
What we hold about you
- Your email address and name.
- A hashed password. We cannot read your password and neither can anyone who steals the database.
- What you write in the product: what you sell, your customer profiles, your signals and places.
- Your credit balance and every movement in it.
- Ordinary server logs, including IP address, kept for security and debugging.
We do not take payment card details. Those go to our payment processor and never touch our servers.
What we hold about other people
This is the honest part. When you run a pass, Sluice reads publicly visible posts and business listings and stores what it found: a name, a public handle, a link to the profile, what the person publicly wrote, and where a listing says a business is. Where you switch on the optional lookups, it may also store a job title, an employer, a location or a work email address.
All of it is material that is publicly visible without logging in. We do not access private groups, private messages, anything behind a login, or anything a person has restricted.
Why we are allowed to. For customers in the UK and EU, our basis is legitimate interests: identifying businesses and the people who represent them for business-to-business contact. We have weighed that against the interests of the people concerned, which is why the product only reads public material, records the source of everything so any claim can be checked, and never contacts anybody automatically.
If you are one of those people. Write to hello@trysluice.com and we will remove your records from every workspace and tell you what we held. You do not need an account and you do not need to explain why.
Who else sees it
- Data suppliers. To look somebody up we pass a name, a profile link or a company to a supplier. They are contractually bound to process it only for that lookup.
- Our infrastructure providers, who host the application and the database.
- Our payment processor, for subscriptions.
- Nobody else. We do not sell data, we do not share it between customers, and we do not use one customer's leads to serve another.
Workspaces are separated at the database level: every query filters by workspace, and the separation is tested rather than assumed.
How long we keep it
Account information lasts as long as your account. Lead records last until you delete them, delete the watch, or close your account, at which point everything belonging to your workspace is deleted. Ledger entries are kept for seven years because tax law requires it. Logs are kept for thirty days.
Your rights
If you are in the UK or EU you may ask for a copy of what we hold, ask us to correct or delete it, object to processing, or ask for it in a portable form. Write to hello@trysluice.com and we will answer within thirty days. You may also complain to your data protection authority, which in the UK is the ICO.
Cookies
One cookie, for keeping you signed in. It is httpOnly, it cannot be read by scripts, and it lasts thirty days. We run no advertising trackers and no third-party analytics that follow you off this site.
Changes
If we change this in a way that matters, we will email account holders before it takes effect rather than quietly updating the date.