Privacy Policy — Slope Strategy Group

1Scope of This Policy

This policy explains how Slope Strategy Group, LLC ("Slope," "we") handles information — both information about you as our client ("you," "Client"), and information about your own customers, leads, or contacts that passes through our platform because you use it to run part of your business ("your End Users").

If you're an End User of one of our Clients — for example, someone who called a business's Slope-powered phone line, or whose contact info is in a business's Slope CRM — the business you interacted with is the one responsible for how they collect and use your information; we process it on their behalf as described below. If you have a question about your own data, start with that business directly.

2What We Collect

Account & billing information — your name, business name, email, phone, and billing details.
Data you give us to run your business on the platform — CRM records (contacts, deals, notes), documents or data files you upload for an agent to use, instructions you write for how an agent should behave, and messages you send to an AI agent or to your Slope advisor.
Call data, if you use AI Phone Answering — call recordings, transcripts, and AI-generated summaries of calls handled by your phone agent. See Section 4 of our Terms of Service on call-recording consent.
Usage data — which agents you run, how often, and technical logs needed to operate and bill for the service. We also log the volume of AI usage internally, including on plans described as unlimited, so we can flag it directly with you if it looks like a runaway process rather than real business use — we don't use this to auto-restrict your account.
Website data — slopestrategy.com does not currently run any analytics or tracking tools. If that changes, this section will be updated to name the specific tool and what it collects.

3How We Use It

To provide the services — running your AI agents, operating your CRM, answering your calls, building and hosting your website.
To communicate with you about your account, your services, and support.
To bill you and maintain business records.
To improve the platform — for example, understanding which features are actually used. We do not use your business data or your End Users' data to train AI models, ours or a third party's.

4How AI Processing Works

When an AI agent does something for you — answers a question, summarizes a call, drafts a CRM update, researches a topic — the relevant data (your instructions, the business context needed to answer well, and any files or records involved) is sent to our AI processing provider, currently Anthropic, to generate the response. That data is processed under Anthropic's own commercial terms, summarized here:

Not used to train Anthropic's models. By default, Anthropic does not use inputs or outputs from its commercial/API products to train its models. Slope's platform doesn't use any feature that would change that — for example, we don't submit your data as training feedback through a "rate this response" control, which is the one specific, opt-in exception to Anthropic's default policy.
Automatically deleted. Anthropic deletes API inputs and outputs from its own systems within 30 days of processing them, except where it's required to keep something longer — for legal compliance, or to enforce its own usage policies against abuse.
No custom retention arrangement is currently in place. Anthropic offers longer or shorter (including zero) retention terms to qualifying commercial customers by separate agreement; Slope has not entered into one, so the standard terms above apply. If that changes, this section will be updated.

Where an agent has real web-search access (for example, the Market Research Digest), search queries derived from your configured topics are sent out to retrieve current information; we don't control what a public search index has indexed about a given query.

5Who We Share Data With

We don't sell your data or your End Users' data. We share data with the following categories of service providers, only as needed to run the platform:

Anthropic — AI processing (Section 4).
Supabase — our database and file storage provider; this is where your CRM records, call data, and account information live.
Vercel — hosts the application itself.
Resend — sends transactional email (account setup, notifications) on our behalf.

We may also disclose information if required by law, or to protect the rights, safety, or property of Slope, our clients, or others.

6Data Retention

We keep your data for as long as your account is active, and for a reasonable period after termination in case you request an export (Section 7 of our Terms of Service) or as needed for our own legal, tax, or accounting obligations. You can ask us to delete specific data sooner; see Section 8.

7Security

We use reasonable technical and organizational measures to protect your data — including encryption in transit and access controls limiting who can see your data internally. No system is perfectly secure, and we can't guarantee absolute security, but we'll notify you promptly if we become aware of a breach affecting your data, consistent with applicable law.

8Your Rights and Choices

You may have rights to access, correct, export, or delete the personal information we hold about you, or to object to certain uses of it, under the consumer privacy law of the state you're in. To exercise any of these, contact us at contact@slopestrategy.com.

Slope's clients and their End Users are based in the United States, so this policy is written around U.S. state privacy law rather than international frameworks like the EU's GDPR. Utah's own law, the Utah Consumer Privacy Act, only applies to businesses with over $25 million in annual revenue and either 100,000+ Utah consumers' data processed in a year, or 25,000+ if more than half of revenue comes from selling personal data — thresholds Slope does not currently meet.

As Slope grows: other states with comprehensive privacy laws (California, Colorado, Virginia, Connecticut, and a growing list of others) set their own thresholds, and some — California's in particular — can be triggered by data volume alone, without a revenue floor like Utah's. This section will be revisited as the client base grows.

9Children's Privacy

Our services are intended for use by businesses and are not directed at children. We don't knowingly collect personal information from anyone under 13.

10Changes to This Policy

We may update this policy as the platform and our providers change. We'll post the updated version here with a new effective date, and for material changes, we'll let you know directly.

11Contact

Questions about this policy or your data can be sent to contact@slopestrategy.com.