1. Who this policy covers
This Privacy Policy applies to the Sloth desktop application, joinsloth.com, and related services operated by JoinSloth (“Sloth,” “we,” “us,” or “our”). It does not govern third-party products you choose to connect, which have their own terms and policies.
2. Information we handle
Account and subscription information
When you create an account, we receive your email address, an account identifier, authentication records, and subscription tier. Passwords are handled by our authentication provider and are not visible to Sloth in readable form. If paid plans become available, the payment provider handles payment-card details; Sloth receives billing status and transaction references rather than full card numbers.
Your workspace content
We process tasks, task steps, workflow definitions, selected integration records, and other content you choose to save or sync. Some workspace data is stored in our cloud database so it can be associated with your account.
Local desktop data
Desktop preferences, approved folder paths, file-search indexes, activity intelligence, and recovery or security history may be stored on your device. Sloth does not capture screenshots or keystrokes. Activity capture is opt-in, and application names and window titles are not uploaded to the cloud under the current design.
AI and integration data
If you deliberately use an AI feature, the prompt and context you select—such as a task, approved file excerpt, or connected issue—may be sent to the configured AI service to produce a response. Sloth stores the request date, request count, and a conservative token estimate to enforce your plan allowance; this usage record does not contain your prompt or response. Sloth does not use private workspace content to train its own general-purpose AI model. When you connect a service such as GitHub, we handle the account and repository data needed for the feature. GitHub access tokens are encrypted on your device.
Product analytics
We use PostHog as a service provider to understand broad product usage. The website sends manually named, content-free events with a temporary per-tab-session identifier; it does not enable automatic click capture or session replay. The desktop application sends product and reliability events only if you enable Product & reliability metrics in Settings. It uses a random installation identifier that is not your Sloth account ID. Events may include operating system, app version, event outcome, and duration. They never include your email address, task text, prompts, responses, filenames, file contents, window titles, tokens, passwords, or payment-card data. We honor supported Global Privacy Control and Do Not Track signals on the website.
Website and security data
Our hosting, authentication, analytics, abuse-prevention, and security providers may process IP addresses, device or browser information, request timestamps, and limited identifiers necessary to operate, measure, and protect the service. Sloth keeps bounded local error logs and metadata-only security events; those events exclude task content, prompts, tokens, file names, and request arguments.
3. How we use information
- Provide authentication, syncing, task management, integrations, AI features, and support.
- Protect accounts, prevent abuse, troubleshoot failures, and maintain service reliability.
- Administer subscriptions and communicate important account or service notices.
- Improve Sloth using aggregated or de-identified information where practical.
- Comply with law and enforce our Terms of Use.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising or use private workspace content to target advertisements.
4. When information is shared
We disclose information only as needed to operate Sloth, at your direction, or as required by law. Categories of recipients may include cloud hosting and database providers, authentication and CAPTCHA providers, payment processors, AI providers used for features you invoke, connected services you authorize, and professional advisers or authorities where legally required. These providers may process information only for their contracted purpose and under their own legal obligations.
If Sloth is involved in a merger, financing, acquisition, reorganization, or sale of assets, information may be transferred as part of that transaction subject to this policy and applicable law.
5. Retention
We keep account and cloud workspace information while your account is active and for only as long afterward as reasonably necessary for security, legal, backup, and dispute-resolution purposes. Local history follows the retention setting available in the desktop app. Connected-service tokens are removed when you disconnect the integration or delete applicable local data. Backup copies may persist temporarily until routine rotation completes.
6. Your choices and rights
You can disable product analytics, activity capture, revoke approved folders, disconnect integrations, change privacy settings, export supported account data, clear local data, or delete your account from the desktop application. Website visitors may use a supported Global Privacy Control or Do Not Track signal to prevent analytics events. You may also contact info@joinsloth.com to request access, correction, deletion, or a copy of personal information. Depending on where you live, you may have additional rights and a right to appeal our response. We will verify requests before acting on them.
7. Security
We use measures designed to protect information, including encrypted transport, row-level database access controls, sandboxed application windows, encrypted integration tokens, bounded logs, and restricted renderer permissions. No system is completely secure, so we cannot guarantee absolute security. Please use a unique password and notify us if you suspect unauthorized access.
8. Children
Sloth is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided information, contact us so we can investigate and delete it where required.
9. International use
Sloth and its service providers may process information in countries other than your own. Where required, we use legally recognized safeguards for those transfers.
10. Changes to this policy
We may update this policy as Sloth changes. We will post the revised policy with a new effective date and provide additional notice or request consent when required for a material change.
11. Contact
Questions or privacy requests can be sent to info@joinsloth.com.