Privacy Policy

Last updated 29 June 2026

This policy explains how we handle personal data on slate-labs.com. We have written it to be read, not endured: plain English, short paragraphs, and no claims we can't keep. It is aligned with the GDPR and written for a global business audience.

Who we are and what this policy covers

Slate Labs Ltd is a software company incorporated in Dubai, United Arab Emirates. We refer to ourselves below as "Slate Labs" or "we". For the purposes of data-protection law, Slate Labs Ltd is the controller of the personal data described in this policy.

Slate Labs is a software (SaaS) business. We develop and license a CRM and a trading platform to licensed and registered brokers and proprietary trading firms, as a white-label B2B product. We are not a broker, dealer, exchange, clearing house, investment adviser, or financial institution, and we are not regulated as one. We do not hold or handle client funds, open or control trading accounts, or execute trades.

This policy applies to our marketing website at slate-labs.com and to the broker and IB portal accounts we provide to contracted customers. It does not cover the client-facing services that our broker customers operate. Where a broker deploys our software under its own brand, that deployment is operated by, and is the responsibility of, that broker, and the broker's own privacy notice governs its clients' data.

For any privacy or legal matter, contact us at hello@slate-labs.com.

The data we collect

We keep data collection deliberately narrow. Personal data reaches us in only two ways.

First, the "book a demo" and inquiry form. When you ask to see the product, we collect your full name, work email, company, country, the number of active traders you operate, and any free-text message you choose to send. This is stored on the Slate Labs platform backend so our team can respond to you.

Second, broker and IB portal accounts for contracted customers. To keep you signed in, we process your login credentials and session tokens.

We also keep standard server and security logs, such as IP addresses, which are generated automatically and used to operate and protect the site.

Just as important is what we do not do. The marketing site runs no web analytics and no tracking or advertising pixels: there is no Google Analytics, no Plausible or PostHog, and no Meta pixel. We do not sell personal data, and we do not share it for advertising.

How and why we use your data

We use inquiry-form data to respond to your message, arrange a demo, and pursue a potential business relationship with your firm. Our lawful basis is our legitimate interest in answering B2B inquiries and running our business, balanced against your interests.

We use portal account data, including credentials and session tokens, to authenticate you and keep you signed in. Our lawful basis is the performance of our contract with your firm.

We use server and security logs to operate, secure, and troubleshoot the site, again on the basis of our legitimate interest in protecting our service. Where any processing relies on your consent, we will ask for it clearly and you may withdraw it at any time.

Cookies and local storage

We use only what is essential. The marketing site itself sets no cookies. The broker and IB portal stores a refresh token in your browser's localStorage and keeps the access token in memory, solely to keep you signed in. Cloudflare, our hosting, CDN, and security provider, may set strictly-necessary security cookies.

There are no analytics, advertising, or third-party tracking cookies. Because we use only essential storage, no cookie-consent banner is required. You can control or clear cookies and local storage through your browser settings. See our Cookie Policy for the detail.

Who we share your data with

We do not sell personal data. We share it only with the processors and sub-processors that help us run the service, and only as needed to deliver it.

Cloudflare provides hosting, CDN, and security for slate-labs.com. The Slate Labs platform backend stores demo inquiries and powers portal accounts. SendGrid sends transactional email, such as portal invites and password resets; that email is sent by the platform backend, not by the marketing site.

Each of these providers acts on our instructions under appropriate contractual terms. We may also disclose data where the law requires it.

International transfers

As a UAE-based controller working with processors that operate in other regions, personal data may be transferred internationally. Where this happens, we rely on appropriate safeguards to protect your data in line with applicable data-protection law.

How long we keep it

We keep inquiry data for as long as we are pursuing the business relationship, and for a reasonable period afterward. Portal account data is retained in line with the relevant broker agreement. Logs are kept for a limited period for operational and security purposes.

Your rights

Subject to applicable law, you have the right to access your personal data, to have it rectified or erased, to restrict or object to its processing, to data portability, and to withdraw consent where processing relies on it.

To exercise any of these rights, email us at hello@slate-labs.com. You also have the right to lodge a complaint with a supervisory authority.

UAE Personal Data Protection Law

As a controller based in the United Arab Emirates, Slate Labs also acknowledges UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) as its home data-protection regime, and handles personal data consistently with it.

Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access, including access controls, encryption in transit, and the security protections provided by Cloudflare. No system is perfectly secure, but we work to keep the data we hold safe and to limit what we collect in the first place.

Children

Slate Labs is a B2B service. The site is not directed at, and is not intended for, anyone under the age of 18, and we do not knowingly collect personal data from children.

Changes and contact

We may update this policy from time to time to reflect changes to our practices or the law. When we do, we will revise the "Last updated" date above.

Questions about this policy or your data are welcome at hello@slate-labs.com.

"Slate Labs"™ and the Slate Labs logo are trademarks of Slate Labs. This policy is governed by the laws of the United Arab Emirates, and any disputes are subject to the competent courts of Dubai, United Arab Emirates.