Privacy, with context.

Who is responsible

Slate HQ Ltd is the controller for personal information we receive through this website and our first-party ΔMBI service. We are registered in England and Wales under company number 17423471. Our registered office is 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. Contact [email protected] for privacy questions. Our ICO registration reference is 00015316058.

The website

When you browse, our hosting and security providers handle technical request information such as IP address, browser details, requested pages and timestamps to deliver and protect the site. We use this information for our legitimate interests in operating and securing the website. The site remembers your light or dark appearance choice in browser local storage.

If you choose analytics, Google Analytics helps us understand which public pages are read, whether a public page is scrolled near its end, which public site links are selected and their destination paths, where visits came from, broad country and city, device type, and the domains people choose when leaving the site. We send public page paths without URL queries, a referring site origin where available, and outbound destination domains rather than full links. Google receives technical connection information when its tag loads. We do not use analytics on account, sign-in, reset or other private routes, and we do not send names, email addresses, account IDs, form contents, site searches, ΔMBI questions or interactions, or keystrokes to analytics. Analytics cookies last up to 30 days from the first visit; Google Analytics event and user data retention is set to two months. You can reject analytics or withdraw your choice at any time through Cookie settings. Our basis for optional analytics storage and processing is your consent. See the Cookie Policy (UK) for the current cookie categories.

When you contact us, we receive the details you send, such as your name, email address and message. We use them to respond, manage the enquiry and take steps you request before an agreement. The basis is our legitimate interests in communicating with you or, where relevant, steps before a contract. Please do not put health records in a general enquiry.

When you ask the public site guide a question, the question and the page you are on are sent to its server-side answer service. The service sends the question and relevant published Slate HQ context to Anthropic’s Claude model to compose a sourced answer. Some questions about current external facts also trigger web search through that model. The service derives a day-scoped identifier from your IP address to limit misuse. Do not enter private health or account information in that public guide. Search queries in a page URL may also appear in browser and server history. We use this processing to provide the requested answer and protect the service, on the basis of our legitimate interests.

ΔMBI and AmbientOS

ΔMBI is Slate HQ Ltd’s first-party working-memory service. An invitation and account can hold your email, authentication and session information, ΔMBI-ID, display name, account settings, connected-client permissions and workspace memberships. Hosted Work and Personal spaces are separate. A space can contain records you or an authorised client supply, Neurons, source references, revision history, backups, imported files and time records. Shared-space members can access information permitted by that space’s settings.

We process account and workspace information to authenticate you, provide the memory and time features you use, respond to authorised requests, preserve history and support sharing. The contractual basis is providing the service you request. We process technical security and fault information for our legitimate interests in protecting and maintaining it, and information needed to meet a legal obligation on that basis. If you place special-category information in a hosted space, its processing requires an applicable Article 9 condition; do not assume that an ordinary account login supplies consent for a particular disclosure.

A client you connect may receive the context returned by ΔMBI and pass it to the model provider you choose. Check that client’s and provider’s terms and privacy information before connecting it. Approving a client controls its future access through ΔMBI. It cannot retrieve copies already received by that client or by another person. The local runtime keeps files and configuration on your device unless you choose a connected operation; exported copies remain under your control.

The account page uses browser session storage for sign-in continuity in a tab. “Keep me signed in on this device” uses longer-lived browser storage for the refresh token. Sign out on shared devices. Clearing browser storage does not delete a hosted workspace.

Hosted memory can be read by the service components needed to carry out authorised requests. We do not sell your personal data or use records received by Slate HQ Ltd to train AI models. These statements do not govern a separate AI provider you choose.

Providers, transfers and retention

Supabase supplies hosted database and authentication services; Cloudflare supplies the branded connection endpoint, hosting and security services. Our configured email delivery provider handles account messages. These providers receive information needed for their functions. A connected AI client, model provider or person in a shared space receives information when you authorise or share it. We may disclose information where law requires it.

Providers may process data outside the UK. Where UK transfer rules require safeguards, we use the applicable adequacy arrangements or contractual safeguards; ask us for details of a particular transfer.

Current hosted records remain until changed or removed. Earlier revisions and backups can persist after a current record is replaced so the service can provide history and recovery. We retain account, security, revision and backup information while needed for the service, a deletion request, a security matter or a legal obligation. We assess the period by the account’s status, the kind of information and those purposes. Site enquiry and technical records are kept only as long as needed for the enquiry, operation, security or legal duties. An exported file or a copy already received by a connected provider follows its own storage arrangements.

You can export current memory and manage records in the workspace. For deletion of an account and its retained history or backups, contact [email protected]; we will explain any information we must keep and why.

Your choices and rights

Depending on the processing, you can request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Where we rely on consent, you can withdraw it without affecting earlier processing. Contact [email protected] to exercise a right. You can also complain to the Information Commissioner’s Office.

We update this notice when service behaviour changes. The date above identifies this published version. See the website terms and ΔMBI terms of use.