Privacy Policy

Introduction

This Privacy Policy explains how Sledge collects, uses, shares, and protects information when you use the Sledge mobile app and the services it connects to (“Services”).

By using the Services, you agree to the practices described in this policy.

Scope of This Policy

This policy applies to:

• Information collected through the Services
• Communications such as support requests
• Data from connected third-party integrations

This policy does not apply to third-party services that operate independently.

Information We Collect

Information You Provide

You may provide:

• Account details (name, email, phone, business info)
• Business and client addresses you enter
• Login and authentication data
• Business data (documents, invoices, files)
• Communications (support, feedback, inquiries)
• Conversations with Sledge AI, including your messages and any photos or screenshots you attach
• Voice recordings, when you choose to dictate a message
• Sign in details if you choose to sign in with Apple, Google or Microsoft (such as your name, email address and an account identifier from that provider)
• A profile photo, if you add one
• Details of teammates you invite or manage in a company account, such as names, email addresses and roles

Information Collected Automatically

We automatically receive:

• IP address, device type and operating system, sent to us with each request the app makes

In the mobile app we ask for access to your camera, photos and microphone only when you choose to take or attach a photo or dictate a message. You can withdraw that access at any time in your device settings.

Information Stored on Your Device (Mobile App)

The Sledge mobile app keeps some of your information on your device so it can open quickly and work with a weak connection. This includes a saved copy of data you have recently viewed and your sign in session, which is kept in your device's secure storage.

If you delete your account, the app clears this information from your device.

Information from Integrations

If you connect third-party services, we may access:

• Email data (metadata, attachments, timestamps)
• Financial and accounting data
• Integration configuration details
• Secure access tokens

You are responsible for having permission to share this data.

Setup & Configuration Data

We store onboarding progress, preferences, and settings the app needs to work.

How We Use Information

We use data to:

• Operate and maintain the Services
• Authenticate users and secure accounts
• Process documents and workflows
• Prevent fraud and misuse
• Provide support and updates
• Comply with legal obligations

We do not sell personal data.

Data Roles

Depending on use:

• Sledge acts as a Data Controller for accounts and operations
• Sledge acts as a Data Processor for customer data processed on your behalf

Integrations & Third-Party Data

Google Integration (Gmail)

Used for:

• Reading emails for invoice extraction
• Marking processed emails as read
• Verifying user identity

Data is:

• Not sold
• Not used for ads or AI training
• Deleted within 30 days after disconnection

Microsoft Outlook

Used for:

• Email processing and syncing

Permissions include reading emails and maintaining connection.

QuickBooks Integration

Used for:

• Syncing financial data (vendors, invoices, transactions)

Data is only used for requested functionality.

General Integration Rules

For all integrations:

• Data is used only for requested features
• Data is not sold
• Data is not used for advertising or AI training
• Access is restricted and secure

Signing In With Apple, Google or Microsoft

You can create an account or sign in with Apple, Google or Microsoft. We receive only what the provider shares with us: your name, your email address and an account identifier. If you use Apple's option to hide your email address, we receive a private relay address instead.

We do not receive your password for those accounts. Signing in this way does not give us access to your email, calendar or files.

If you delete your account, we remove the link to your Apple, Google or Microsoft sign in.

AI & Automated Processing

Sledge uses AI to:

• Analyze documents
• Extract and organize data
• Answer your questions about your company's records, and prepare actions for you to approve (Sledge AI)

Outputs may contain errors.

Users must review results before use.

Sledge AI, our assistant

When you use Sledge AI (in the chat, in Support and in Feedback):

• Your messages, the conversation so far, the records needed to answer you (such as bills, invoices, contracts and project details, which can include details of your clients and vendors) and any photos you attach are sent to our AI providers. Today that is OpenRouter, which routes requests to Google (Gemini)
• When you dictate a message, the audio is sent to OpenAI to be turned into text
• Your password is never shared, and records you don't ask about are not sent
• Under the terms we use with these providers, your data is used to answer you and is not used to train their models. Sledge does not use it to train AI models either
• Sledge saves your conversations so you can return to them. Authorised Sledge staff can review conversations to keep the service safe and working, and a reply you mark with a thumbs-down may be used to test and improve the assistant
• Sledge AI cannot change anything in Sledge without your approval
• You can delete a chat from your list, and turn Sledge AI off at any time in Settings under AI Settings. We ask for your consent before Sledge AI is first used, and again if the providers or the way your data is used change materially

When We Share Data

Service Providers

We share data with trusted providers for:

• AI and speech providers (currently OpenRouter, Google and OpenAI), to answer your questions and to turn dictation into text
• Hosting and infrastructure
• The integrations you choose to connect (Gmail, Outlook and QuickBooks)

Business Transfers

Data may be transferred in case of:

• Merger
• Acquisition
• Sale of assets

Legal Requirements

We may disclose data:

• When required by law
• To protect users and the security of the Services

Data Retention

We retain data as needed for services and legal requirements.

Key timelines:

• Integration data → deleted within 30 days after disconnect
• Sledge AI conversations → kept while your account is active. A conversation you delete is removed from your account right away and permanently erased when your account is deleted
• Deleted accounts → locked immediately and permanently deleted after a 30-day grace period; you can sign in during that time to restore the account
• Backup copies → removed on our normal backup cycle

Security

We use:

• Encryption (in transit & at rest)
• Access controls
• Monitoring systems

No system is 100% secure, but we follow best practices.

International Transfers

Data may be processed in the United States.

Laws may differ from your country.

Your Responsibilities

You must:

• Have permission to share data
• Follow applicable privacy laws
• Review AI-generated outputs

Your Rights & Choices

You can:

• Update account information
• Delete Sledge AI conversations from your chat list
• Turn Sledge AI off in Settings
• Disconnect integrations in Settings under Integrations
• Delete your account in the app (Profile, then Delete account), or ask us to by emailing support@getsledge.com

When you delete your account: the account is locked immediately and permanently deleted after a 30-day grace period. Signing in before then restores it. If you own a company account, you choose to transfer it to a teammate or delete it for everyone. Connected services such as Gmail, Outlook and QuickBooks are disconnected. The app clears its saved data from your device. Some data may be kept where the law requires, as described under Data Retention.

Some data may be retained if legally required.

Children's Privacy

Services are not intended for users under 18.

We do not knowingly collect children's data.

Third-Party Services

Sledge is not responsible for external services.

Review their policies separately.

Policy Updates

We may update this policy anytime.

Continued use = acceptance of changes.

Contact

For questions or concerns:

DMR Corp
3722 Las Vegas Blvd S, Unit 2709
Las Vegas, NV 89158-4330
United States
support@getsledge.com