Last updated 17 June 2026

Privacy Policy

This policy explains how Slabby handles information when people create, publish, share, and manage brand style guides. It is a practical starter policy and should be reviewed before production launch.

1. Information we collect

We collect account information such as your name, email address, password hash, session data, and billing identifiers when you sign up or use Slabby.

We collect the content you add to slabs, including brand names, descriptions, colours, typography, spacing rules, logos, uploaded assets, font metadata, downloadable-file settings, access settings, and version history snapshots.

If you use website import features, we process the URL you provide and the extracted brand signals, such as colours, font names, and logo candidates.

2. How we use information

We use information to provide Slabby, authenticate users, save and display slabs, publish selected content, generate exports, manage team access, process payments, improve reliability, and respond to support or legal requests.

We use access settings to decide whether a slab should be public, private to authorized team members, or password protected. Public content may be indexed, copied, cached, downloaded, or reused by people and tools that can access the published URL.

3. Cookies and sessions

We use cookies or similar technologies for sign-in sessions and password-protected slab access. These cookies are used to keep you signed in and to remember that you unlocked a protected slab.

If analytics, monitoring, advertising, or additional tracking tools are added later, this policy should be updated to describe them.

4. Sharing with service providers

We may share information with service providers that help operate Slabby, such as hosting, storage, database, payment, email, security, and analytics providers. These providers may process information only as needed to provide their services to us.

Payments are processed by Stripe or another payment provider. Slabby stores billing identifiers and subscription status, but payment card details are handled by the payment provider.

5. Public content and exports

When you publish a slab publicly, its visual page, JSON export, CSS variable export, PNG export, and any downloadable assets you enable can be accessed by others. Password-protected and private slabs are access-controlled, but you should avoid publishing confidential content unless the selected settings are appropriate.

Font files configured for specimen-only display are intended not to be served directly. Font files or assets marked downloadable can appear on the asset page and in downloadable archives.

6. Retention

We keep account information and slab content for as long as needed to provide the service, comply with legal obligations, resolve disputes, prevent abuse, and enforce agreements.

You can remove slabs, assets, team members, or your account content through available product controls. Some records may remain in backups, logs, billing records, or version history for a limited period unless deletion is legally required sooner.

7. Security

We use reasonable technical and organizational measures designed to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

You should use a strong password, limit team access to trusted users, and avoid uploading content that you are not authorized to share.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, export, or object to certain uses of your personal information. To make a request, contact privacy@slabby.ai.

You can also control many uses directly in the product by editing slabs, changing visibility, disabling downloads, removing team members, or deleting content.

9. International use

Slabby may be operated from, and information may be processed in, countries other than where you live. Those countries may have different data-protection laws.

10. Contact

For privacy questions or requests, contact privacy@slabby.ai.