Legal

Privacy Policy

Last updated: August 13, 2026

1. Introduction

SOV GLOBAL VENTURES SL ("Company," "we," "us," or "our"), a company incorporated under the laws of Spain, operates emailslicer.app, the EmailSlicer application, the Figma plugin, and the EmailSlicer Chrome extension (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Password (stored as a cryptographic hash; we never store plaintext passwords)
  • Account creation date and last sign-in information

2.2 Usage Data

We automatically collect certain information about your interaction with the Service, including:

  • Number of image processing operations performed
  • Feature usage patterns (e.g., Klaviyo imports, downloads)
  • Browser type, device type, and operating system (via Google Analytics)
  • Pages visited and general navigation patterns

2.3 Klaviyo Integration Data

If you choose to connect your Klaviyo account, we store your Klaviyo API key(s) in encrypted form to facilitate the integration. We store client/account names you assign for organizational purposes. We do not access or store any data from your Klaviyo account beyond what is strictly necessary to perform image uploads.

2.4 Payment Information

All payment processing is handled by Stripe, Inc. We do not collect, store, or have access to your full credit card numbers, bank account details, or other sensitive financial information. We receive and store only limited transaction information from Stripe, such as subscription status, payment dates, and transaction identifiers.

2.5 Chrome Extension Capture Data

The EmailSlicer Chrome extension accesses only the Gmail message that you have opened and explicitly choose to capture. To provide that feature, it processes the message HTML and basic message metadata such as subject, sender, and date. A local PNG or HTML download is generated on your device. If you actively choose to send a capture to Figma, we also transmit the rendered image and the related basic message metadata to our Supabase infrastructure, associated with your authenticated EmailSlicer account, so it can be made available in the EmailSlicer Figma workflow.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, operate, and maintain the Service
  • To process transactions and manage your subscription
  • To send transactional emails (e.g., account confirmation, payment receipts, subscription updates)
  • To monitor and analyze usage trends to improve the Service
  • To detect, prevent, and address technical issues or abuse
  • To comply with legal obligations

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

EmailSlicer uses Chrome extension data only to provide and improve the user-facing capture, export, account, and Figma-import features described in the extension and on this website. We do not use or transfer Gmail content, browsing activity, or captured email data for advertising, profiling, creditworthiness, or sale to data brokers. We do not allow people to read captured email content except when you specifically request support, where needed to investigate abuse or a security incident, or where required by law.

4. Image Processing and Data

This is important: all image slicing and compression operations are performed entirely client-side within your web browser.

  • Your images are never uploaded to our servers during the standard web application workflow.
  • We do not store, access, view, analyze, or retain any images you process through the web application.
  • Image data remains exclusively on your device and within your browser session.

4.1 Figma Plugin Exports

When using the EmailSlicer Figma plugin's export feature, images are temporarily uploaded to our secure storage infrastructure (powered by Supabase) solely for the purpose of transferring them to the web application. These temporary files are automatically deleted within 24 hours. During this brief storage period, images are stored in an access-controlled environment and are only accessible to the authenticated user who initiated the export.

4.2 Klaviyo Uploads

When you use the "Import to Klaviyo" feature, processed images are sent directly from your browser to Klaviyo's servers using your own Klaviyo API key. We act as a technical facilitator for this transfer but do not store the images on our servers during this process.

4.3 Chrome Extension Captures

The extension does not scan Gmail in the background. It handles only a message you explicitly capture. Captures used for local preview, PNG download, or HTML download remain on your device. When you select the optional Figma transfer, the rendered capture and basic message metadata are sent over HTTPS to Supabase to support the transfer to your EmailSlicer and Figma workflow. Captures are shown as available for import for a limited period in the product interface. You can request deletion of account-associated data at any time by contacting us.

5. Third-Party Services

We use the following third-party services, each with their own privacy policies:

  • Stripe — Payment processing. Stripe collects and processes payment information under its own privacy policy. See: stripe.com/privacy
  • Supabase — Database hosting, user authentication, and secure file storage. See: supabase.com/privacy
  • Resend — Transactional email delivery. We use Resend to send account-related emails. See: resend.com/legal/privacy-policy
  • Google Analytics — Anonymous website usage analytics. See: policies.google.com/privacy
  • Klaviyo — User-initiated integration. When you connect your own Klaviyo account, data exchange occurs between your browser and Klaviyo's servers using your own credentials. See: klaviyo.com/legal/privacy
  • Figma — Optional plugin integration. Authentication is handled via Figma's OAuth flow. See: figma.com/legal/privacy

6. Data Retention

  • Account data is retained for the duration of your active account and deleted upon request.
  • Temporary files from Figma plugin exports are automatically deleted within 24 hours.
  • Chrome capture data is handled only for the capture, export, and optional Figma-import workflow. It is shown as available for import for a limited period; you may request deletion of account-associated capture data at any time.
  • Usage analytics data is retained in an aggregated, anonymized form and cannot be used to identify individual users.
  • Payment records are retained as required by applicable tax and financial regulations.
  • Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Your Rights (GDPR and Applicable Law)

As a company based in Spain and subject to the General Data Protection Regulation (GDPR) and the Spanish Organic Law on Data Protection (LOPDGDD), we respect your data protection rights. You have the right to:

  • Access — Request a copy of the personal data we hold about you.
  • Rectification — Request correction of inaccurate personal data.
  • Erasure — Request deletion of your personal data ("right to be forgotten").
  • Restriction — Request restriction of processing of your personal data.
  • Data Portability — Request transfer of your data in a structured, commonly used, machine-readable format.
  • Objection — Object to the processing of your personal data in certain circumstances.
  • Withdraw Consent — Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at hello@emailslicer.app. We will respond to your request within 30 days, as required by law.

You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — AEPD) at www.aepd.es.

8. Cookies and Tracking Technologies

We use the following types of cookies:

  • Essential Cookies — Required for authentication and session management. These cookies are strictly necessary for the Service to function and cannot be disabled.
  • Analytics Cookies — Google Analytics uses cookies to collect anonymous usage statistics. This data is aggregated and does not personally identify you. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

We do not use advertising cookies, social media tracking cookies, or any third-party cookies beyond those listed above.

9. Security

We implement industry-standard security measures to protect your personal data, including:

  • All data transmitted between your browser and our Service is encrypted using TLS/SSL.
  • Passwords are stored using cryptographic hashing algorithms and are never stored in plaintext.
  • Klaviyo API keys are stored in encrypted form.
  • Our infrastructure is hosted on Supabase, which provides enterprise-grade security, including row-level security, encrypted data at rest, and regular security audits.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly. If you believe a child under 16 has provided us with personal data, please contact us at hello@emailslicer.app.

11. International Data Transfers

Your data may be processed by third-party services located outside the European Economic Area (EEA). Where such transfers occur, we ensure they are conducted in compliance with applicable data protection laws, including through the use of Standard Contractual Clauses or other appropriate safeguards.

12. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

For material changes that significantly affect how we process your personal data, we will make reasonable efforts to notify you via email or through a prominent notice on the Service.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: