MLXLabs is committed to protecting your privacy. This policy explains what we collect, why, where it is stored and the choices you have when you use OffSlate (offslate.com).
MLXLabs is the data controller for the personal data described here.
Information we collect
Account information: your email address and name, and your Google account identifier if you sign in with Google. We do not use passwords.
Content you give us: the website addresses you submit, the public content we read from those sites, the brand profiles and scripts you edit and approve, and any logos or images you upload.
Content we make for you: voiceovers and videos.
Messages you send us: the name, email address and message from our contact form. They are emailed to our support inbox and not stored in OffSlate.
Billing information: your plan, credit history and payment status. Card and payment details are collected and held by our payment provider, Dodo Payments, not by us.
Technical information: IP address, browser and device type, and access times, used for security, fraud prevention and keeping the Service running.
How we use your information
To provide the Service: create your account, read your website, generate your brand kit, scripts and videos, and deliver them to you.
To communicate with you: sign-in links, account and billing notices, and messages about your videos. We only send marketing email with your consent.
To keep the Service safe: detect fraud, abuse and prohibited content, and meet our legal obligations, such as tax records.
To improve the Service. We do not sell your personal data, and we do not use your content to train AI models.
Service providers we use
We share data only with providers that help us run the Service, and only what each one needs:
Amazon Web Services (application servers, website reading and video rendering); MongoDB Atlas (database); Cloudflare R2 (storage of your files and videos); Anthropic (AI that drafts brand kits, scripts and video layouts from your website content); ElevenLabs (premium voiceovers, when you choose one of its voices); Resend (email delivery, including contact form messages); Google (sign in with Google, if you use it); Sentry (error monitoring); Google Analytics, Google Ads and Microsoft Clarity (visit statistics, ad measurement and session recordings on OffSlate's public marketing pages only, never inside your account); Dodo Payments (payments, invoices and sales tax, as merchant of record).
We may also disclose information when required by law, or to protect our rights, our users or the public.
Where your data is stored and how it is protected
Our application servers, database and processing run on Amazon Web Services in Frankfurt, Germany (eu-central-1). Files and videos are stored in Cloudflare R2.
All traffic is encrypted in transit with TLS (HTTPS). Data is encrypted at rest. Our database accepts connections only from our own servers, and access to production systems is restricted and protected with multi-factor authentication.
Video rendering and website reading run in isolated, short-lived environments that hold no credentials.
Some providers listed above, such as Anthropic, process data in the United States. Where data leaves the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses.
How long we keep data
Your brands, scripts and finished videos are kept for as long as your account exists, until you delete them. A deleted video can be restored for 30 days, then it is erased with its files.
When you delete your account, we remove your personal data and the files we made for you within 30 days. We keep billing and credit records, with your identity removed, for as long as tax and accounting law requires.
Cookies
Inside your OffSlate account we use only essential cookies, to keep you signed in and to protect your session.
OffSlate's public marketing pages (the home, pricing, contact and legal pages on offslate.com) use Google Analytics and Microsoft Clarity to understand how visitors find and use those pages, and Google Ads to measure whether our ads lead to sign-ups. In the EEA, the UK and Switzerland they set no cookies until you accept; elsewhere you can reject them. You can change your choice at any time with the Cookie settings link at the bottom of those pages. We do not use cookies to show you personalised ads or follow you across other sites.
Your rights
Depending on where you live (including under the GDPR and the CCPA), you can ask to access, correct, export or delete your personal data, object to or restrict how we use it, and withdraw consent at any time.
You can delete your account yourself in your settings. For any other request, email us; we respond within 30 days and do not charge for it. You also have the right to complain to your local data protection authority.
Children
The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children. If we learn that we have, we delete it.
Changes to this policy
We may update this policy. We will tell you about significant changes by email or in the Service before they take effect.
Contact
Email support@offslate.com for privacy questions, data requests or a Data Processing Addendum.