Legal
Privacy Policy
This Privacy Policy explains how Shikha Labs LLC collects, uses, discloses, and protects information in connection with Slab5, including the Slab5 website, dashboard, APIs, MCP tools, and related services.
1. Information we collect
We may collect the following categories of information:
- account information, such as name, email address, company, role, and authentication details;
- workspace information, such as workspace names, settings, roles, scopes, API keys, MCP clients, and grants;
- customer data you submit to Slab5 modules, such as CRM, CMS, tasks, support, assets, integrations, and analytics records;
- usage and audit data, such as API requests, MCP tool calls, credential events, module activity, IP address, user agent, timestamps, and request identifiers;
- billing information, such as plan, subscription status, credits, invoices, payment status, and payment processor identifiers;
- support and communications, such as contact forms, beta requests, support tickets, messages, and feedback.
2. How we use information
We use information to:
- provide, secure, operate, maintain, and improve Slab5;
- authenticate users, authorize credentials, enforce scopes, and manage workspace access;
- process API requests, MCP tool calls, webhooks, module operations, usage events, and audit events;
- provide customer support, respond to requests, and manage private beta access;
- process billing, credits, subscriptions, spend caps, and entitlement limits;
- detect abuse, debug errors, monitor reliability, and protect the service;
- communicate about product updates, security, operations, and account matters;
- comply with legal obligations and enforce our terms.
3. Customer data and workspace content
Customer data belongs to the customer. We process customer data to provide Slab5 and as otherwise directed by workspace users, API keys, MCP clients, agents, integrations, or administrators authorized by the customer. Customers are responsible for the data they submit and for configuring access controls appropriately.
4. AI agents and MCP clients
If you connect AI agents or MCP clients to Slab5, those agents may read, create, update, or otherwise process workspace data according to the scopes and permissions you grant. You are responsible for selecting agent providers, configuring scopes, reviewing agent actions, and ensuring that agent use complies with your obligations.
5. Sharing and disclosure
We may share information with:
- service providers that help us host, secure, operate, analyze, support, or bill for Slab5;
- payment processors and financial service providers for billing and fraud prevention;
- identity, authentication, infrastructure, observability, storage, and communication providers;
- professional advisors, legal authorities, or regulators where required or appropriate;
- successors in connection with a merger, acquisition, financing, restructuring, or sale of assets;
- third-party integrations you choose to connect.
We do not sell personal information for money.
6. Security
We use administrative, technical, and organizational safeguards designed to protect information. No system is perfectly secure. You are responsible for protecting your credentials, limiting scopes, revoking unused API keys and MCP clients, and configuring workspace permissions carefully.
7. Retention
We retain information for as long as needed to provide Slab5, comply with legal obligations, resolve disputes, enforce agreements, maintain security, support billing, and preserve audit or usage records. Retention periods may vary by plan, module, data type, workspace setting, and legal requirement.
8. International processing
We may process and store information in the United States and other locations where we or our service providers operate. If you use Slab5 from outside the United States, you understand that information may be transferred to and processed in the United States.
9. Your choices
You may access, update, export, or delete certain information through Slab5 dashboard features where available. You may also contact us for privacy requests. Some information may be retained where required for legal, security, audit, billing, backup, or legitimate business purposes.
10. California privacy notice
California residents may have rights to request access, correction, deletion, portability, and information about certain disclosures of personal information, subject to applicable exceptions. To make a request, contact us at support@slab5.com or through https://www.slab5.com/contact. We may need to verify your request before responding.
11. Children
Slab5 is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can take appropriate action.
12. Changes to this Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date.
13. Contact
Privacy questions and requests can be sent to support@slab5.com or through the contact page at https://www.slab5.com/contact.
