---
title: "Privacy policy"
description: "What the Slipky website and application collect and why. Draft, pending legal review."
image: "https://slipky.com/og-image.png"
---

# Privacy policy

A plain description of how this works today.

**Draft, pending legal review.** This page describes what the product does today and has not been reviewed by a lawyer. Last updated 6 October 2026.

Slipky is operated by Mazacode LTDA, CNPJ 45.655.559/0001-98, Florianópolis/SC, Brazil. This policy covers this website and the Slipky application.

## This website

This site sets no cookies, uses no advertising or analytics tags, and loads its fonts and images from its own domain. One exception we cannot remove: the hosting account injects the Cloudflare Web Analytics beacon, which reports aggregate page views without cookies. The only way to contact us from the site is a link that opens a WhatsApp conversation. WhatsApp handles that conversation under its own terms, and we keep the messages you send us.

## What the application collects

- Account details: your email address and name, provided when you sign in.
- Advertising and revenue data: campaigns, spend, impressions, clicks and conversions read from the Meta, Google Ads and TikTok accounts you connect, and payment events (amount, currency, customer email) from the Stripe account you connect.
- Product descriptions and settings you type, which are sent to an AI model to write ad copy.
- Operational logs needed to run and secure the service, including IP address and timestamps.
- A device notification token, only if you enable push notifications.

## What we do not do

We do not sell your data, we do not show advertising, and we do not track you across other websites or apps.

## Who processes data for us

Only the providers needed to run the service: the ad platforms you connect (to read campaigns and, where enabled, to send conversion events), Stripe for payments, Anthropic for the AI copy and insight features, an email provider for alerts and reports, and a push notification provider. Each acts on our instructions.

## Security

Traffic is encrypted in transit. Access tokens for connected ad platforms are stored encrypted with AES-256-GCM. Two-factor authentication is available. Customer emails sent to Meta and TikTok as conversion data are hashed first.

## Retention, export and deletion

We keep your data while your account exists. You can export it and delete your account from the settings page, and deletion removes your personal data and your organisation's data, except records we must keep by law, such as invoices.

## Your rights

Depending on where you live, including under Brazil's LGPD, you may have the right to access, correct, export or delete your data and to object to some processing. Use the in-app tools or ask through WhatsApp.

## Children

Slipky is a business tool and is not intended for anyone under 16.

## Changes

If we change this policy we will update the date above.