Privacy Policy

The Service is operated by Working Software (Active Machines Corp.), a Delaware corporation. Our business is located in Seattle, Washington, USA.

For privacy questions or requests, email team@workingsoftware.ai.

This policy covers personal information we process when you:

• visit our marketing site or create a Slab account;
• sign in (including with email and one-time passcodes, or with Google Sign-In where enabled);
• manage your organization, team, company profile, or uploaded images; or
• enter business content into the Service (for example quotes, invoices, customer companies, or contacts).

It does not cover third-party websites or services that we do not control, including Google’s own privacy practices when you use Google Sign-In.

Depending on how you use the Service, we may collect the following categories of information:

• Account information. First name, last name, email address, and password (or a Google identity token when you sign in with Google).
• Organization and profile information. Company name, business email, phone number, website, branding (such as logo or avatar and brand color), and billing or business address fields you provide.
• Team information. Names, email addresses, and roles of members and invitees you add to your organization.
• Service content. Information you enter while using the Service, such as quotes, invoices, customer company or contact details, measurements, specifications, and related business records.
• Uploaded files. Images you upload for your organization (for example logos), subject to our size and format limits.
• Authentication and session data. One-time codes emailed for sign-in verification, session tokens stored in cookies, and related security signals needed to keep you signed in.
• Technical and log data. Our hosting and infrastructure providers may process IP address, browser or device type, timestamps, and similar diagnostic information when you access the Service.

We do not operate advertising or product-analytics cookies in the Service today. Lead forms on the marketing site that are not submitted to our servers are not retained by us.

We use essential, httpOnly cookies to operate authentication and sessions. Today those cookies are:

• slab_access — access session token;
• slab_refresh — refresh token;
• slab_challenge — short-lived login verification challenge; and
• slab_org — organization membership flag used by the application shell.

These cookies are required for the Service to function. We do not use them for advertising, and we do not currently set third-party analytics cookies.

We use the information described above to:

• provide, operate, maintain, and improve the Service;
• authenticate users, send one-time passcodes and team invitations, and protect accounts;
• enable collaboration within your organization and display the content you create;
• respond to support and administrative requests; and
• comply with law, enforce our terms, and protect the security and integrity of the Service and our users.

We share personal information only as needed to run the Service, as follows:

• Service providers. Hosting and application infrastructure (including our web frontend and the Slab backend API), and email delivery used for authentication codes and team invites.
• Google. If you use Google Sign-In, Google receives and processes identity information under Google’s terms and privacy policy so that we can verify your sign-in.
• Your organization. Other members of your organization may see profile, team, and business content according to their roles and permissions.
• Legal and safety. We may disclose information if required by law or to protect rights, safety, or the integrity of the Service.
• Business transfers. Information may be transferred in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

When you enter information about your customers, jobs, quotes, or invoices into Slab, you control that content. We process it to provide the Service to your organization. You are responsible for having a lawful basis to upload and process that information, including any personal information about your own customers or contacts.

We retain account, organization, and Service content for as long as your organization uses the Service and as needed for legitimate business, security, and legal purposes. When you ask us to delete an account or organization data, we will process the request as described below, subject to backups and legal retention needs.

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure.

You may update certain profile and organization information in the Service settings. You may sign out at any time, which clears session cookies on your device.

The Service does not currently provide a full self-serve account deletion flow. To request access, correction, or deletion of personal information we hold about you, email team@workingsoftware.ai. We may need to verify your identity and your relationship to the organization before fulfilling a request.

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) may provide rights to know, delete, and correct personal information, and to non-discrimination for exercising those rights. We do not sell personal information or share it for cross-context behavioral advertising.

To exercise applicable rights, contact us at team@workingsoftware.ai. We will respond as required by applicable law. Authorized agents may submit requests subject to verification.

If you are in Canada, you may have rights under applicable privacy laws (including PIPEDA and comparable provincial laws) to access or correct personal information we hold about you, subject to exceptions. To make a request, email team@workingsoftware.ai.

The Service is intended for adults using it for business purposes. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us so we can delete it.

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. If changes are material, we may provide additional notice through the Service or by email where appropriate.

Working Software (Active Machines Corp.)
Seattle, Washington, USA
Email: team@workingsoftware.ai