Legal

Privacy Policy

Version 1.1 · Effective Date: 14th August, 2026

1. Introduction

One Differential Private Limited ("One Differential", "Company", "we", "our", or "us") values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you access or use our products and services, including Olak, a business networking platform for micro, small and medium enterprises (MSMEs), and SlateIt, a productivity platform that helps businesses manage their day-to-day work.

This Privacy Policy applies both to registered users of our Services and to visitors who interact with certain public-facing features (such as a Business Page or its chat assistant) without creating an account or logging in. References to "you" in this Policy include such visitors, to the extent of their interaction with the relevant feature.

This Privacy Policy should be read together with the product-specific Annexures published alongside it (Annexure A: Olak, and Annexure B: SlateIt), which describe additional data practices specific to each product. In the event of any conflict between the main body of this Policy and a product-specific Annexure, the Annexure shall prevail in relation to that product.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

Note: One Differential is committed to complying with the Digital Personal Data Protection Act, 2023 and applicable rules, as amended from time to time.

2. About Us

Company Name: One Differential Private Limited

Registered Office: 15, Manav Mandir Society, Seminary Hills, Nagpur – 440006, Maharashtra, India

Website: https://onedydx.com

Email: legal@onedydx.com

3. Information We Collect

Depending on how you use our Services, we may collect the following categories of personal information:

Information You Provide

  • Name
  • Email address
  • Phone number (optional)
  • Company name (optional)
  • Profile photograph (optional)
  • Business profile information
  • Files and content uploaded by you
  • Calendar information (only if you choose to connect your calendar)
  • Public endorsements ("vouches"), posts on the community "ask" board, reactions, and re-promotions given or received from other members, and Business Page content, as described in Annexure A
  • Messages you submit through an in-app chat feature, including as a visitor who has not created an account, as described in Annexure A
  • If you join our waitlist before an app is available in your city: your name, email address, and city

Information Collected Automatically

When you use our Services, we may collect limited technical information including:

  • Operating system information
  • Application analytics
  • Crash reports
  • Session or device identifiers necessary to operate certain features (e.g., aggregate visit analytics or chat sessions for a Business Page), as described in Annexure A

We do not intentionally collect your IP address as part of our standard application functionality. Additional, product-specific categories of information are described in the applicable Annexure (A: Olak / B: SlateIt).

If you join a waitlist for a product that is not yet available in your city, we use your name, email, and city solely to notify you when that product becomes available, and do not use this information for any other purpose without your separate consent.

4. Why We Use Your Information

We use your information to:

  • Create and manage your account.
  • Authenticate your identity.
  • Enable networking between businesses, including public vouching, the community "ask" board, reactions, and re-promotions between members.
  • Allow businesses to create and manage profiles and public Business Pages.
  • Operate an AI-powered chat assistant on Business Pages to respond to visitor queries.
  • Operate an AI-powered task agent on SlateIt that reads group conversations to create and assign tasks, as described in Annexure B.
  • Provide productivity and collaboration features.
  • Synchronize your calendar if you choose to connect it.
  • Store content and files uploaded by you.
  • Improve application performance and reliability.
  • Analyze usage patterns and measure engagement to improve our Services.
  • Respond to customer support requests.
  • Process subscriptions and purchases.
  • Send important service-related notifications.
  • Notify you if you join our waitlist and the relevant app subsequently becomes available in your city.
  • Send promotional communications where applicable, subject to your preferences.

We collect only such personal information as is reasonably necessary to provide and improve our Services.

5. Permissions Requested by the App

Depending on the features you choose to use, the application may request access to:

  • Camera – to capture or update your profile photograph.
  • Photos/Storage – to upload profile images or other files.
  • Calendar – to synchronize calendar events.
  • Location – only to determine your time zone for scheduling purposes.
  • Notifications – to send service-related notifications and updates.

These permissions are optional unless required for a specific feature selected by you.

6. Registration and Privacy Notice

Before you create an account, we show you a short, plain-language summary of what personal data we collect and why, along with a link to this full Privacy Policy and our Terms of Service, on the sign-up screen itself. By creating an account and using the Services, you acknowledge that you have read these documents.

7. AI-Powered Features

Our Services may offer AI-powered features to assist users with activities such as improving written content, generating business information, or responding to queries. When you choose to use these features, the information you voluntarily submit may be shared with our AI service providers solely for generating the requested response.

Our AI functionality is supported through OpenRouter and underlying AI models such as DeepSeek, Claude, and Minimax. These third-party providers may process or retain the information submitted during AI interactions in accordance with their own privacy policies and terms.

Users are encouraged not to submit sensitive personal information or confidential business information unless necessary. Use of AI-powered features is optional.

8. User-Provided Content and Third-Party Personal Data

Our Services allow users to voluntarily submit, upload, post, share, or otherwise provide information and content, including business information, posts, messages, files, images, voice notes, calendar information, and other content ("User Content"). Users are responsible for the User Content they provide through the Services. Where User Content contains personal data or information relating to another individual, the user submitting such information is responsible for ensuring that they have the necessary authority, permission, consent, or other lawful basis, as applicable, to provide such information through the Services.

Users should not upload or share sensitive, confidential, or third-party personal information that they are not authorised to disclose. One Differential processes such User Content only as necessary to provide, operate, secure, and improve the Services and in accordance with this Privacy Policy.

To maintain a safe community, users may report and block content or other users that they reasonably believe violate our Terms of Service or applicable law. Where available, users may also block other users. We may review reported content or accounts and take appropriate action, including restricting access to content, removing content, or suspending accounts where appropriate.

9. Third-Party Services

To provide our Services, we use trusted third-party service providers. These include:

Firebase Authentication

Used to authenticate users and verify sign-in credentials. Information processed may include:

  • Email address
  • Authentication identifiers
  • Login verification information

Firebase Analytics and Crash Reporting

Used to understand how the app is used and to diagnose crashes. Firebase Analytics processes aggregated usage events (e.g., screens viewed, features used, and purchase-funnel events) together with non-identifying attributes such as membership status and activity level. Crash Reporting collects crash logs and device/OS information. We do not collect advertising identifiers and do not use this data to serve targeted advertising.

Supabase

Used to host and manage application data. Information stored may include:

  • User profile information
  • Business profile
  • Posts
  • Connections
  • Uploaded files
  • Other content created within the platform

Google and Apple Sign-In

Used to verify user identity during authentication.

Google Calendar and Apple Calendar

Used only if you choose to connect your calendar. Calendar information is accessed solely to enable synchronization of your events.

RevenueCat

Used for subscription and purchase management. RevenueCat processes subscription status and transaction-related information required to verify purchases. RevenueCat does not independently process your complete payment card details.

OpenRouter

Used to route AI requests to supported AI models.

AI Providers

AI providers such as DeepSeek, Claude and Minimax process information voluntarily submitted by users when AI-powered features are used.

10. Payments

Subscriptions and in-app purchases will be processed through Apple App Store, Google Play Store and RevenueCat. Payment information is processed by the relevant payment platform and is not independently stored by One Differential except as necessary to verify subscription status.

11. Data Storage

Our primary application infrastructure is hosted in India. Certain third-party service providers may process or store limited personal information using infrastructure located in India, the United States, or other jurisdictions depending on their service architecture.

12. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, tax, or accounting requirements, whichever is later. Our current retention periods are:

  • Account and profile information: retained for the duration of your account and up to 30 days after account deletion, to allow for account recovery and fraud prevention.
  • Business profile and networking data (Olak): retained for the duration of your account, unless you request earlier deletion.
  • Files and content uploaded (SlateIt): retained for the duration of your account, or until you delete the specific content.
  • Calendar data: retained only for as long as your calendar remains connected, and deleted upon disconnection.
  • Authentication logs (Firebase): retained for 90 days for security and fraud-prevention purposes.
  • Transaction and subscription records (RevenueCat, App Store, Play Store): retained for 8 years to comply with applicable Indian tax and accounting laws.
  • AI interaction data: not retained by us beyond the session required to generate a response, save as may be retained by our AI service providers under their own policies.

Where personal data is no longer necessary for the purpose for which it was processed, and you have not interacted with us for the specified period, or you have withdrawn consent and no other ground for processing applies, we will erase such personal data, unless retention is required under applicable law.

13. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you have the following rights in relation to your personal data:

13.1 Right to Access Information

You have the right to obtain a summary of the personal data we process about you and the processing activities undertaken with respect to such data, including the identities of any data fiduciaries and data processors with whom your personal data has been shared, along with a description of the data so shared.

13.2 Right to Correction and Erasure

You have the right to request:

  • Correction of inaccurate or misleading personal data;
  • Completion of incomplete personal data;
  • Updating of personal data;
  • Erasure of personal data that is no longer necessary for the purpose for which it was collected, unless retention is required for a legal purpose.

13.3 Right to Grievance Redressal

You have the right to have any grievance regarding the processing of your personal data addressed by us in a timely and effective manner, as set out in Section 13 below.

13.4 Right to Nominate

You have the right to nominate any other individual to exercise your rights under the Act in the event of your death or incapacity. You may register a nominee by writing to us at the contact details provided in Section 13.

13.5 How to Exercise Your Rights

You may exercise any of the above rights by submitting a request to legal@onedydx.com, or through the in-app "Privacy Requests" option, if available. We may request additional information to verify your identity before acting on your request. We aim to respond within 30 days, and in any case no later than 90 days as permitted under applicable rules.

Please note that these rights may be subject to reasonable restrictions under applicable law, including where processing is necessary for compliance with legal obligations or for the establishment, exercise, or defence of legal claims.

14. Grievance Redressal

In accordance with the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer to address any complaints, questions, or grievances regarding the processing of your personal data.

Grievance Officer

Name: Kunal Jadhav
Designation: Director
Email: legal@onedydx.com
Address: 15, Manav Mandir Society, Seminary Hills, Nagpur – 440006, Maharashtra, India

If you have a grievance regarding our processing of your personal data, please write to the Grievance Officer with full details of your complaint. We will acknowledge your grievance promptly and aim to resolve it within 30 days of receipt.

If you are not satisfied with the resolution provided, you may approach the Data Protection Board of India, established under the Digital Personal Data Protection Act, 2023.

15. Consent and Withdrawal of Consent

Where we rely on your consent to process personal data, such consent is obtained through clear affirmative action, such as checking a consent box, clicking "I agree," or through granular in-app permission toggles (for example, when requesting access to your camera, photos, calendar, or location).

You have the right to withdraw your consent at any time. Withdrawing consent is designed to be just as easy as giving it, in accordance with Section 6(4) of the Digital Personal Data Protection Act, 2023. You may withdraw consent by:

  • Adjusting your permissions through your device settings (for camera, photos, calendar, and location);
  • Disabling specific features within the app (for example, disconnecting your calendar);
  • Writing to us legal@onedydx.com requesting withdrawal of consent for a specific processing activity or deletion of your account.

Please note that withdrawal of consent will not affect the lawfulness of processing carried out prior to such withdrawal. Withdrawing consent stops any further processing based on that consent, but does not by itself require us to immediately erase your data — we will retain it only for as long as needed for any purpose that still applies (for example, a legal or accounting requirement), and erase it once no such purpose remains.

Withdrawal of consent may also mean that we are unable to continue providing certain features or Services that depend on the relevant personal data, and we will inform you of such consequences at the time of withdrawal where applicable. Where processing is based on grounds other than consent (such as compliance with a legal obligation), withdrawal of consent will not apply to such processing.

16. Legal Basis for Processing

We process your personal data primarily on the basis of your consent. In limited circumstances, we may also process personal data under the "certain legitimate uses" recognised under Section 7 of the Digital Personal Data Protection Act, 2023, including for example:

  • Where you have voluntarily provided personal data for a specified purpose and have not indicated that you do not consent to its use (e.g., providing your email for customer support);
  • For compliance with any judgment, decree, or order of a court or tribunal, or any law in force in India;
  • For responding to a medical emergency involving a threat to life;
  • For purposes related to employment, where applicable.

17. Security Safeguards

We implement reasonable technical and organisational security safeguards to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These safeguards include, where appropriate:

  • Access controls limiting personal data access to authorised personnel on a need-to-know basis;
  • Regular review of our security practices and those of our third-party service providers once in every three years;
  • Secure account authentication through Google and Apple sign-in services

While we take reasonable steps to protect your personal data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

18. Personal Data Breach Notification

In the event of a personal data breach, we will notify affected Data Principals promptly through your registered contact details, describing the nature of the breach, its likely consequences, and the steps we are taking to address it. We will also notify the Data Protection Board of India, with a more detailed report in accordance with the Digital Personal Data Protection Act, 2023 and applicable rules.

19. Cross-Border Data Transfers

Under the Digital Personal Data Protection Act, 2023, the transfer of personal data outside India is permitted by default, except to countries or territories that may be restricted by the Central Government by way of notification. Certain of our third-party service providers (including cloud hosting and AI service providers) may process or store personal data on infrastructure located outside India, including in the United States. We ensure that any such transfers are made in compliance with the Act and any applicable restrictions notified by the Central Government from time to time.

20. Children's Data

Our Services are intended for use by businesses and individuals who are 18 years of age or older. We do not knowingly collect personal data from children, and our Services are not directed at children within the meaning of the Digital Personal Data Protection Act, 2023. If we become aware that we have inadvertently collected personal data from a child without verifiable parental consent, we will take steps to delete such information promptly.

21. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, or applicable law. We will notify you of any material changes through the app or by other appropriate means, and will update the "Last Updated" date at the top of this Policy. Your continued use of the Services after such changes constitutes your acknowledgment of the updated Policy.

22. Records of Consent

Where we rely on your consent, or where you accept this Privacy Policy or any updated version of it, we maintain a record of the specific version of the Policy you were shown, the date and time of your acceptance, and the manner in which consent was given (e.g., at sign-up, through an in-app permission toggle, or upon re-acceptance following a material update). This record is maintained for our compliance purposes and may be relied upon to demonstrate valid consent, including in response to a request from you or from the Data Protection Board of India. A summary of the version and date of your acceptance may be made available to you upon request, in accordance with Section 12.1.

23. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

One Differential Private Limited
15, Manav Mandir Society, Seminary Hills, Nagpur – 440006, Maharashtra, India
Email: legal@onedydx.com

Annexure A: Olak

This Annexure forms part of, and is to be read together with, the Privacy Policy of One Differential Private Limited. In the event of any conflict between this Annexure and the main body of the Privacy Policy, this Annexure shall prevail solely in relation to your use of Olak.

A.1 About Olak

Olak is a business networking platform primarily for micro, small and medium enterprises (MSMEs) and independent entrepreneurs, designed to help members connect with one another professionally within a trusted community. Olak enables users to:

  • Build a professional/business profile and connect with other members of the community;
  • Post requests for help or introductions on a community "Ask" board, and respond to other members' requests;
  • React to other members' posts (e.g., with a "like" or "appreciation" reaction) and "re-promote" posts or profiles to their own network;
  • Give and receive public "vouches" — endorsements from other members based on their personal experience or interaction with a member — which are displayed on the recipient's profile;
  • Have their platform activity (such as vouches received, help given, and community participation) reflected as a "level" or reputation indicator on their profile;
  • Create a Business Page — a public, dedicated web page for their business, accessible at a unique Olak subdomain (e.g., businessname.olak.app) — available to Premium members;
  • Organise or participate in offline networking events within their local community.

Olak is a networking platform only. Olak does not itself offer, broker, recommend, or provide any business, work, service, or project to any user. Vouches, levels, reactions, Ask board posts, and Business Page content reflect the activity and personal opinions of members using the platform; Olak does not independently verify, authenticate, or guarantee the identity, credentials, trustworthiness, or claims of any member, or the accuracy of any vouch, level, post, or Business Page content. Any engagement between members, or between a member and a visitor to their Business Page, is undertaken directly between the parties concerned, at their own discretion and risk.

A.2 Additional Information We Collect on Olak

In addition to the information described in Section 3 of the main Privacy Policy, Olak may collect the following, depending on the features you use:

Community, Vouching, and Reputation Information

  • Posts you make on the Ask board, and any responses or replies to other members' posts;
  • Vouches you give to other members, and vouches you receive, including any accompanying text or comment;
  • Reactions (e.g., likes/appreciations) you give or receive on posts or profiles;
  • Re-promotions you make of other members' posts or profiles;
  • A computed "level" or reputation score associated with your profile, generated based on your platform activity (such as vouches received, posts made, and responses given).

We do not independently verify the identity, business, or credentials of any member in connection with these features, and a vouch, reaction, re-promotion, or Ask board post reflects only the personal activity and opinion of the member who made it. We do not collect or require any supporting documents (such as identity proof or business registration documents) in connection with these features.

Business Page Information

Business Pages are available exclusively to Premium (paid subscription) members. Any user, including non-members and non-logged-in visitors, may view a published Business Page or interact with its chat assistant free of charge. In connection with creating and operating a Business Page, we collect:

  • The business name and business details selected or added from your profile;
  • Your logo and cover photo (including cropped/edited versions you create using the in-app editing tool);
  • Cities or regions served, or a "Pan India" designation;
  • A description of the services offered;
  • Business address and website (if provided);
  • A confirmation that you are an authorised representative of the business, which you provide by ticking a declaration checkbox (self-certified, not independently verified by us);
  • Your chosen, permanent page name/subdomain (e.g., businessname.olak.app);
  • Up to five work-sample photographs;
  • A downloadable PDF brochure, if uploaded;
  • Private "notes" you add for the chat assistant's use (e.g., current offers, price updates, delivery information) — these notes are not displayed publicly but are used as reference material for the automated chat assistant described in A.4 below;
  • Page visit analytics (see A.6 below).

A Business Page remains private and inaccessible to others until you complete and actively "publish" it. You may save progress and return to complete these steps later; incomplete/unpublished pages are not visible to other users.

Business Page Visitor and Chat Assistant Information

Business Pages include a chat feature that allows any visitor — including visitors who are not registered Olak users and have not logged in — to ask questions about the business. In connection with this feature, we (and our AI service providers, as described in Section 7 of the main Privacy Policy and A.4 below) process:

  • The questions and messages submitted by the visitor during the chat session;
  • The automated responses generated in reply;
  • Limited technical information necessary to operate the chat session (e.g., session identifiers), even where the visitor has not created an account or logged in.

We do not require visitors to provide their name, email, phone number, or any other identifying information to use the chat assistant, unless the visitor voluntarily includes such information in their messages. Visitors are encouraged not to share personal or sensitive information through the chat feature.

Waitlist Information

If you join the Olak waitlist prior to the app becoming available in your city, we collect your name, email address, and city, solely to notify you when Olak becomes available where you are, as described in Section 3 of the main Privacy Policy.

A.3 How We Use This Information

In addition to the purposes described in Section 4 of the main Privacy Policy, information collected through Olak is used to:

  • Display Ask board posts, responses, vouches, reactions, and re-promotions to other members, to help members find and assess who to connect with;
  • Compute and display a level/reputation indicator on your profile based on your platform activity;
  • Publish and display your Business Page/microsite to visitors, including prospects who are not registered Olak users;
  • Facilitate connections and messaging between members;
  • Enable the creation, discovery, and management of offline networking events;
  • Share relevant attendee or RSVP information with event organisers for the purpose of coordinating the event;
  • Notify waitlist members when Olak becomes available in their city.

A.4 The Business Page Chat Assistant

Each Business Page includes an AI-powered chat assistant that answers visitor questions using only the information the business owner has provided on their page and in their private notes (e.g., services offered, cities served, current offers). The chat assistant operates using the AI infrastructure described in Section 7 of the main Privacy Policy (via OpenRouter and underlying AI models such as DeepSeek, Claude, and Minimax).

Visitor messages and business owner–provided content (including private notes) may be processed by these third-party AI providers solely to generate responses to visitor queries, in accordance with those providers' own privacy policies and terms. Business owners should not include any sensitive personal information, third-party personal data, or confidential information beyond what is intended to be used to answer customer queries, within their private notes or page content.

A.5 Public Visibility of Information

Please note that certain information on Olak is, by design, visible to other users or the public — including to visitors without an Olak account — such as:

  • Vouches you give or receive, including the name of the member and any accompanying text;
  • Ask board posts, responses, reactions, and re-promotions, together with the name/profile of the member who made them;
  • Your computed level/reputation indicator;
  • All published Business Page content, including your logo, cover photo, business description, services, cities served, address, website, work-sample photos, and brochure, accessible to anyone with the page link, with or without the Olak app installed;
  • Your professional profile and connection information, visible to other members;
  • Public event listings, including organiser name and event details.

Your Business Page subdomain (e.g., businessname.olak.app), once selected, becomes a permanent, unique public identifier for your business and cannot subsequently be changed. You should exercise discretion when choosing what information to include in your profile, Ask board posts, vouch comments, Business Page, private notes, or event listings, as this information may be viewed publicly by third parties, including via search engines or shared links, outside your network.

A.6 Business Page Visit Analytics

We provide Business Page owners with aggregate analytics regarding their page, including a visitor count and a day-by-day visit chart. This analytics data reflects page-level traffic volume and does not identify individual visitors by name or account to the Business Page owner. We may use technical identifiers (such as session or device identifiers) internally to compile these aggregate figures and to prevent abuse (e.g., artificially inflated visit counts), but such identifiers are not shared with the Business Page owner and are retained only as long as necessary for these purposes.

A.7 No Verification or Endorsement by Olak

Olak does not verify, authenticate, or endorse:

  • The identity, qualifications, or business credentials of any member;
  • The accuracy of any vouch, reaction, re-promotion, or Ask board post made by one member about another;
  • The methodology or outcome of any computed level/reputation score, beyond it being an automated reflection of platform activity;
  • The accuracy of any content, offer, or information on a Business Page, or of any response generated by the chat assistant;
  • The quality, reliability, or outcome of any work, service, or engagement undertaken between members, or between a member and a Business Page visitor.

The declaration that a member is an authorised representative of a business is a self-certification by the member and is not independently verified by Olak.

A.8 Event Organisers

If you organise an event through Olak, you act as a data fiduciary in your own capacity in respect of the attendee information you receive for the purpose of organising that event (such as attendee lists and contact details), and you agree to use such information solely for purposes connected to that event and in compliance with applicable law. One Differential facilitates the listing and RSVP functionality but is not responsible for an organiser's independent use of attendee information outside the platform.

A.9 Deletion of Business Pages

If you delete your Business Page, all associated content — including your logo, cover photo, description, work-sample photos, brochure, private notes, chosen subdomain, and visit analytics — is permanently and completely deleted from our systems, and the subdomain is released. This deletion is irreversible. Chat conversation logs associated with the deleted page are deleted along with it, save for any residual copies retained by our AI service providers in accordance with their own data retention policies (see Section 7 of the main Privacy Policy), or as required to comply with applicable law.

A.10 Retention — Olak-Specific

In addition to the retention periods described in Section 11 of the main Privacy Policy:

  • Ask board posts, vouches, reactions, and re-promotions: retained on the relevant member's profile for as long as the recipient's or poster's account remains active, or until removal is requested in accordance with A.11 below.
  • Level/reputation score: recalculated on an ongoing basis and retained for as long as your account remains active.
  • Business Page content (including private notes and analytics): retained for as long as the page remains published/active, and permanently deleted upon deletion of the page as described in A.9.
  • Business Page chat logs: retained for 90 days for quality and abuse-prevention purposes, or deleted immediately upon deletion of the associated page, whichever is earlier.
  • Messages and connection history: retained for the duration of your account, unless deleted by you.
  • Event data (listings, RSVPs, attendee lists): retained for 90 days after the event date, after which attendee-level data is deleted, save for aggregate/anonymised records retained for platform analytics.
  • Waitlist information: retained until the app becomes available in your city and you are notified (or you unsubscribe, whichever is earlier), and deleted within 90 days thereafter unless you go on to create an account.

A.11 Correction and Removal of Vouches, Reactions, and Posts

Because a vouch, reaction, re-promotion, or Ask board post about you is authored by another member and reflects that member's own view, you may request that we review and, where appropriate, remove such content about you by contacting us using the details in A.12 below, in addition to any in-app removal tools available to you or the original author. We will assess such requests in line with our content-moderation practices and applicable law.

A.12 Contact

For any questions specific to Olak's data practices, you may contact us using the details in Section 22 of the main Privacy Policy, noting "Olak" in the subject line.

Annexure B: SlateIt

This Annexure forms part of, and is to be read together with, the Privacy Policy of One Differential Private Limited. In the event of any conflict between this Annexure and the main body of the Privacy Policy, this Annexure shall prevail solely in relation to your use of SlateIt.

B.1 About SlateIt

SlateIt is a productivity platform for small and medium businesses (SMBs), designed to help teams track tasks, sync calendars, and assign work in a single chat-first workspace. SlateIt enables users to:

  • Create groups/channels for a project, team, or client, and invite members via a share link, or Apple/Google sign-in;
  • Communicate in a group chat, including text messages, @mentions of teammates, dates, files, and voice notes;
  • Have an AI-powered task agent read group conversations and automatically capture, create, and assign tasks (with an owner and due date) based on the conversation;
  • Receive automated "pings" and reminders on tasks, generated by the task agent;
  • Connect per-group and per-account calendars that sync with the workspace and surface scheduling conflicts;
  • Add threaded comments to tasks;
  • Belong to and switch between multiple accounts/teams (e.g., work, side projects, or other groups) within the app;
  • Receive push notifications, grouped by group/channel.

B.2 Additional Information We Collect on SlateIt

In addition to the information described in Section 3 of the main Privacy Policy, SlateIt may collect the following, depending on the features you use:

Group and Communication Information

  • Group/channel names, membership, and invite links;
  • Messages you send within a group chat, including text, @mentions, and dates referenced in conversation;
  • Voice notes you record and send within a group chat;
  • Files and attachments you share within a group chat;
  • Threaded comments you add to a task.

Task and Calendar Information

  • Tasks created (whether by you, another member, or automatically by the task agent), including task titles, descriptions, assignees, due dates, and status;
  • Ping/reminder history associated with a task;
  • Calendar events you connect from Google Calendar or Apple Calendar, and events created directly within a per-group or per-account calendar in SlateIt;
  • Scheduling conflicts identified by the app across your connected calendars.

Multi-Account Information

  • If you use SlateIt across multiple accounts or teams (e.g., a work account and a separate group), we maintain each account's data separately, though your underlying user profile (e.g., name, contact details) may be common across the accounts you operate within the app.

B.3 The AI Task Agent

SlateIt includes an AI-powered task agent that reads the messages sent within a group chat and identifies action items (for example, phrases like "we need to" or "can you"), automatically creating a tracked task with a suggested owner and due date. The agent also generates pings/reminders to help surface tasks that may be falling behind, and may reference voice notes, files, or dates shared in the group chat to inform the tasks it creates.

The task agent operates using the AI infrastructure described in Section 7 of the main Privacy Policy (via OpenRouter and underlying AI models such as DeepSeek, Claude, and Minimax). Group chat messages, voice notes, files, and related content may be processed by these third-party AI providers solely to generate tasks, pings, and related outputs, in accordance with those providers' own privacy policies and terms.

Because the task agent reads the ongoing conversation within a group, all content shared in a group chat — including by other members — may be processed by the agent for this purpose. Members should avoid sharing sensitive personal information or confidential information beyond what is necessary for team coordination within a group chat.

AI-generated tasks, pings, and summaries are automated outputs and may occasionally be inaccurate or incomplete; members remain responsible for reviewing and correcting tasks as needed.

B.4 Visibility of Information Within a Group

Messages, tasks, comments, files, voice notes, and calendar entries shared within a group or channel are visible to all members of that group, in accordance with the access you grant when you create or join it. Data associated with one account/team (e.g., a work group) is not visible to members of a separate account/team you may also use within the app (e.g., a personal or family group), except to the extent you are a common member of both.

B.5 Voice Notes

Where you send a voice note within a group chat, the audio recording is stored so that other members of the group can access and play it back. Voice notes are not currently processed by the AI task agent or any AI feature.

B.6 Calendar Sync

If you choose to connect a Google or Apple calendar, or use a per-group or per-account calendar within SlateIt, we access calendar information solely to display your schedule, sync events, and identify conflicts across your connected calendars, as described in Section 3 of the main Privacy Policy. Calendar data is retained only for as long as the relevant calendar remains connected, and is deleted upon disconnection.

B.7 No Guarantee of Task Agent Accuracy

SlateIt's task agent is an automated tool and does not guarantee that it will accurately capture, assign, or track every task discussed in a group chat, or that its pings and reminders will be complete or timely. Teams remain responsible for verifying and managing their own tasks and deadlines.

B.8 Retention — SlateIt-Specific

In addition to the retention periods described in Section 11 of the main Privacy Policy:

  • Group chat messages, voice notes, and files: retained for as long as the relevant group remains active, or until deleted by a member with permission to do so.
  • Tasks and threaded comments: retained for as long as the relevant group/account remains active, or until deleted.
  • Calendar sync data: retained only for as long as the relevant calendar remains connected, and deleted upon disconnection.
  • If you leave or are removed from a group, your past messages and contributions may remain visible to remaining group members as part of the group's history, consistent with how group messaging works.

B.9 Contact

For any questions specific to SlateIt's data practices, you may contact us using the details in Section 22 of the main Privacy Policy, noting "SlateIt" in the subject line.