What Slater keeps about you, why, and how to take it with you or delete it.
Slater is run by Basil Meer, who is the data controller for the personal data described on this page. Questions and requests: basilmeer@gmail.com.
The guest invoice editor keeps your draft in this browser only. Its PDF is drawn in the browser too, so nothing you type is sent to us.
If the page hits an error, it sends us the error message, the page address (without anything after the "?") and your browser version, so we can fix it.
Your name, email address and password. The password is stored as a one-way hash, so nobody can read it.
Your business details, your clients, and your invoices and payments. Your clients’ names and contact details are personal data you control; we hold them only so you can invoice them.
Each request to our servers is recorded (time, address requested, how long it took, any error) to keep the service running and secure. These records and error reports are deleted automatically after 15 days; server logs are kept until newer logs overwrite them, usually within 30 days.
Everything else is kept until you delete your account.
Our servers and database are rented from Hetzner. Emails (invoices you send, password resets) go out through Resend. Error and performance records stay on our own servers.
We count page visits with Umami, which we run on our own servers. It sets no cookies and doesn’t identify you: it records the page address (without anything after the "?") and title, the referring site, your browser, language, screen size, device type and country. The country is looked up from your IP address, which isn’t stored. It respects your browser’s Do Not Track setting.
We don’t sell your data, run adverts, or use tracking cookies. The browser keeps your sign-in token and guest draft in local storage; neither is shared with anyone.
In Settings you can download everything in your account (business details, clients, invoices, payments and invoice PDFs) and delete your account. Deleting removes it immediately and can’t be undone; copies in our database backups are deleted as those backups expire, within 30 days.
UK businesses must keep invoice records for six years. When you close your account that duty stays with you, so download your data first.
You can also ask us to correct or explain what we hold by emailing basilmeer@gmail.com, and complain to the Information Commissioner’s Office (ico.org.uk).