Security
How we handle your data.
This page says what Orange Slice does today, not what we plan. Where something is not done yet, it says so.
01 / Where it lives
Your data is stored in the United States
- Database
- Postgres on Supabase, in the AWS us-east-2 region (Ohio).
- Web app
- Vercel.
- Enrichment workers
- Railway. They run the lookups and write the results to your sheet.
- Payments
- Stripe Checkout. Card numbers go to Stripe, and we never see or store them.
02 / Signing in
No passwords to leak
- People
- Sign in with Google, or with a one-time code sent to your email.
- The CLI
- The orangeslice command shows a link. You approve it in your browser, and the link expires after ten minutes.
- API keys
- We store only a hash of each key, never the key itself. Each key has scopes, and you can revoke it at any time.
03 / Workspaces
Each workspace sees only its own data
- Separation
- The database enforces row-level security on workspace data, so a signed-in user can read only the rows of their own workspaces.
- Roles
- A workspace has owners and members. Only an owner can delete the workspace.
- Connected accounts
- Gmail connects through Composio and LinkedIn through Unipile. They hold the sign-in tokens for those accounts.
04 / Sending
The agent asks before it sends or spends
- Approval
- The agent asks before it enrolls contacts or starts a campaign, unless you turn on auto-approve.
- Spending
- Before a paid run of six rows or more, the agent shows the cost and asks you first.
- Daily limit
- Campaigns send 20 messages a day by default, and at most 50.
- Recipients
- Every campaign email carries an unsubscribe link. A sequence stops for a contact when they reply.
05 / Your data
Delete it when you want to
- Sheets
- A deleted sheet goes to Trash, where you can restore it.
- Workspaces
- An owner can delete a workspace, with its sheets, API keys and connected integrations.
- Your account
- To close your account, email privacy@orangeslice.ai.
06 / Compliance
Where we are, plainly
- SOC 2
- We have not completed a SOC 2 audit yet.
- Security reviews
- If your team needs a security review or a questionnaire answered, email privacy@orangeslice.ai.
- Found a problem?
- Email privacy@orangeslice.ai with the details, and we will reply.
Questions about your data?
Email privacy@orangeslice.ai, or book a call with the team.
