Privacy policy

Last updated 19 October 2026

This policy explains how Slate (“we”, “us”) handles personal data in connection with Slate, our HR and payroll service, and this website. It is written with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 in mind.

Two roles we play

For our customers' employee data, we act on the customer's instructions. When a company uses Slate, it decides what employee data is entered — names, contact details, PAN, Aadhaar, bank details, salary, attendance and leave — and why. The company is responsible for having a lawful basis and for giving its employees notice. We process that data only to provide Slate to that company.

For our own customers and website visitors, we decide how data is used. This covers account holders, people who sign up for a trial, and people who contact us.

What we collect

  • Account and signup details: name, work email, mobile number, company name, GSTIN and registered address.
  • Data customers put into Slate: employee records, documents, payroll, attendance, leave, expenses and related records.
  • Contact and demo requests: what you send us through the website.
  • Technical data: IP address, browser and device information, and logs needed to run and secure the service. If an employer enables location-checked attendance, the employee's location is captured at the moment of punching in or out.

How we use it

  • To provide, maintain and secure Slate, including payroll calculations and statutory outputs the customer asks for.
  • To send service emails such as account activation, payslip and approval notifications.
  • To respond to enquiries and manage trials and subscriptions.
  • To meet legal obligations, such as tax and accounting records.

We do not sell personal data and do not use customers' employee data for advertising.

Sharing

We share data only with service providers who help us run Slate — hosting, backups and email delivery — under contracts that require them to protect it, and with authorities where the law requires it. Statutory files (such as PF or ESI returns) are generated for the customer to file; we do not submit them on the customer's behalf unless agreed.

Security and retention

Data is encrypted in transit, access is limited by role, sensitive identifiers are masked in audit logs, documents are never served on public links, and the database is backed up nightly to separate storage. We keep customer data for as long as the account is active and for a limited period afterwards so it can be exported, unless the law requires us to keep it longer.

Your rights

You may ask to access, correct or erase your personal data, or withdraw consent where we rely on it. If you are an employee of a Slate customer, please contact your employer first — they control your records — and we will help them respond.

Cookies

We use only the cookies needed to keep you signed in and protect forms from forgery. We do not use advertising cookies.

Changes

We will post updates here and change the date above. Significant changes will be notified to account holders by email.

Contact

Slate. Use our contact form.