These terms apply to Slingshot LLC and to every Slingshot product, service and website. Slingshot is an independent services and product house that represents only itself, not any government entity or third party.
1. Who is responsible
Slingshot LLC is the controller of personal data collected through its websites and its own marketing, sales and account management. When we process data inside a product on behalf of a client organization (for example workspace content in Nexus, or learner records in Aware or Awake), that organization is the controller and Slingshot acts as its processor, under the client’s instructions.
This policy applies to all Slingshot products, services and websites listed in the Legal Center.
2. Data we collect
- Contact and inquiry data: name, email, phone, company, role and the content of messages and forms you send us.
- Account data: login details, organization, role and settings.
- Billing data: billing contacts, invoices and payment references. We do not store full card numbers.
- Usage and technical data: IP address, device and browser information, pages viewed, actions in our products, and logs.
- Learning and certification data (Aware, Awake, Academy): assignments, viewing progress, completions, quiz results and certificates.
- Content you provide to our products or as part of a project.
3. How we use it
- To provide, operate, secure and support our products and services.
- To respond to inquiries and manage the client relationship, including our CRM.
- To bill, collect payment and keep business records.
- To improve our products, including through aggregated or de-identified analytics.
- To send service and marketing communications, where the law allows or you have agreed. You can opt out at any time.
- To comply with law and to protect our rights and the rights of others.
Our legal bases are performance of a contract, our legitimate interests, legal obligations and, where required, your consent.
5. International transfers
Data may be processed outside your country, including in Jordan, Saudi Arabia and the EU. Transfers out of Saudi Arabia follow the PDPL and its implementing regulations. Transfers out of the EEA rely on appropriate GDPR safeguards such as Standard Contractual Clauses.
6. Retention
We keep personal data only as long as needed for the purposes above: account and product data while the account is active and for a limited period afterwards, billing records for as long as tax and commercial law requires, and marketing data until you opt out. Backups are overwritten on a rolling basis.
7. Your rights
Depending on where you are, you may ask to access, correct, delete or receive a copy of your personal data, object to or restrict its processing, and withdraw consent. Send requests to hit@eslingshot.com. We may need to verify your identity, and we respond within the time the law requires. If you use a workspace managed by your organization, we may refer your request to it.
You may also complain to your data protection authority, which in Saudi Arabia is the Saudi Data & AI Authority (SDAIA).
8. Security
We use reasonable technical and organizational measures, such as encryption in transit, access controls and logging, to protect personal data. No system is completely secure, and we cannot guarantee absolute security. Where the law requires, we will notify affected parties and authorities of a qualifying personal data breach.
9. Cookies and analytics
Our websites use cookies and similar technologies that are needed to run the site and remember your preferences (such as language and theme), and analytics to understand how the site is used. Embedded third-party content, such as YouTube videos, may set its own cookies under that provider’s policy. You can control cookies through your browser settings.
10. Children
Our products and services are intended for businesses and adults and are not directed to children. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes
We may update this policy by publishing a new version on this page with a new effective date. Where a change is material, we will take reasonable steps to tell affected account owners.
12. Contact
Privacy questions and requests: hit@eslingshot.com · Slingshot LLC, Jordan and the Kingdom of Saudi Arabia.