SlateVM Privacy Policy

Effective date: September 1, 2026
Last updated: September 1, 2026

This Privacy Policy explains how Elysian Edge LLC, a Nevada limited liability company operating SlateVM (“Elysian Edge,” “SlateVM,” “we,” “us,” or “our”), handles information when you visit slatevm.com, download or use the SlateVM application, sign in to an available SlateVM account service, communicate with us, or connect SlateVM to a compatible Model Context Protocol (“MCP”) client. It also explains the choices and rights available to you.

1. Privacy at a glance

  • Your virtual machines are local. VM bundles, virtual disks, configuration, installation media references, console state, guest files, SSH keys, and diagnostics are stored or processed on systems you control unless you deliberately move, upload, or share them.
  • The public website is stateless. The SlateVM website server serves files and does not create application accounts, set authentication cookies, or maintain a website session. The browser stores only your light/dark theme preference in local storage.
  • No advertising profile. SlateVM does not sell personal information, share it for cross-context behavioral advertising, or use third-party advertising trackers on the public website.
  • Sign-in is provider based. If account services are enabled and you choose Apple, Google, Microsoft, or Amazon, that provider authenticates you. SlateVM never receives your provider password.
  • MCP control is local. The bundled adapter communicates with the SlateVM app through a local Unix-domain socket. Your chosen LLM client may independently transmit prompts, tool inputs, images, or results under that provider's terms and privacy policy.

2. Information covered by this policy

“Personal information” means information that identifies, relates to, describes, or can reasonably be linked to a person or household. It does not include information that has been lawfully made public or information that has been deidentified or aggregated so it cannot reasonably identify you.

3. Information we collect

Information you provide

  • Account and profile information. When account services are available and you sign in, we may receive the information authorized through your chosen identity provider, such as name, email address, provider-specific identifier, and optional profile image.
  • Communications. If you contact us, we receive the content of your message, your contact details, and any files or diagnostic information you choose to include.
  • Transaction information. If paid plans or purchases are offered, a payment processor may process payment details. SlateVM receives transaction status and ordinary commercial records, not full card credentials.

Information processed automatically

  • Website request data. Our hosting and security infrastructure may process an IP address, request time, requested URL, response status, referrer, user agent, and similar network metadata needed to deliver the site, prevent abuse, diagnose availability, and maintain security.
  • Theme preference. The website stores the key slatevm.theme in your browser's local storage so it can remember light or dark appearance. This value remains in your browser until you clear it or change the setting.
  • Download request data. When you download SlateVM, the website and content-delivery infrastructure process the network request needed to deliver the DMG. The public release manifest itself contains product version, filename, size, URL, and integrity information, not personal information.

Information the application keeps locally

SlateVM processes VM names and identifiers, resource settings, disk images, selected installer paths and security-scoped bookmarks, network and display settings, shared-folder references, installation state, logs, screenshots requested through MCP, OCR output, guest addresses, and per-VM SSH credentials on your Mac. These data support the VM lifecycle and are not sent to SlateVM merely because you use the application.

Guest operating systems and applications inside a VM may collect or transmit information independently. They are separate products governed by their providers' terms and privacy practices.

4. How we use information

We use information only as reasonably necessary to:

  • provide, operate, download, authenticate, maintain, and improve SlateVM;
  • create and manage an account when account services are enabled;
  • respond to questions, support requests, legal requests, and product feedback;
  • protect the website, application, users, and public from fraud, abuse, and security incidents;
  • monitor service availability, debug failures, and preserve operational integrity;
  • administer purchases, licenses, and records when commercial services are offered;
  • comply with law and enforce our agreements; and
  • send service or product communications you request, with an opportunity to opt out of nonessential marketing.

5. Legal bases for processing

Where law requires a legal basis, we process information as necessary to perform a contract with you, take steps you request before entering a contract, pursue legitimate interests such as providing and securing the service, comply with legal obligations, protect vital interests, or act with your consent. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.

6. When information is disclosed

We may disclose the limited information described above:

  • To service providers. Hosting, content delivery, identity, payment, email, customer-support, and security providers may process information for us under contractual restrictions.
  • At your direction. Information is provided to an identity provider, LLM/MCP client, guest service, or other integration when you choose that workflow.
  • For legal and safety reasons. We may disclose information when reasonably necessary to comply with law or valid legal process, protect rights and safety, investigate abuse, or enforce agreements.
  • In a business transaction. Information may transfer as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law and continued protection.

SlateVM does not sell personal information, share it for cross-context behavioral advertising, or knowingly disclose personal information for targeted advertising.

7. Identity providers and linked services

If you select “Continue with Apple,” “Continue with Google,” “Continue with Microsoft,” or “Continue with Amazon,” your browser is redirected to the selected provider or our configured authentication service. The provider decides what information to request and shows you what will be shared. Its processing is governed by its own privacy policy. Links, operating-system downloads, guest software, CDNs, and LLM clients are also independent services; review their policies before sending information to them.

8. MCP, LLM clients, and automation

The bundled slatevm-mcp process translates structured MCP calls into the app's local control protocol. The app owns VM state and the adapter does not operate a remote SlateVM control service. Tool calls can expose VM configuration, diagnostics, logs, console captures, OCR text, guest addresses, command output, and other information to the MCP client you connected. If that client uses a cloud-hosted model, its provider may receive and retain those data. Choose a client and settings appropriate for your information, review commands before authorizing consequential work, and avoid placing secrets into prompts or console captures unless the selected service is authorized to receive them.

9. Retention

Local VM data remains on your Mac until you change or delete it. Deleting a VM through SlateVM moves its bundle to Trash; macOS controls final deletion. Browser theme preference remains until cleared. We retain account, support, transaction, and operational records only for as long as reasonably necessary for the purposes described here, including providing the service, resolving disputes, security, fraud prevention, accounting, and legal compliance. Retention periods vary by record type; when information is no longer required, we delete, deidentify, or securely isolate it.

10. Security

SlateVM uses administrative, technical, and organizational measures designed to protect information. The production app uses macOS App Sandbox and Hardened Runtime; selected files use scoped platform access; privileged networking is separated into a dedicated service; and the MCP control endpoint is local to the user account. Website traffic uses HTTPS. No system is perfectly secure, so you remain responsible for securing the Mac, guest operating systems, identity-provider account, LLM client, backups, and credentials you use with SlateVM.

11. Your choices and privacy rights

Depending on where you live, you may have rights to request access to personal information, obtain a portable copy, correct inaccurate information, delete information, restrict or object to processing, withdraw consent, and appeal a denied request. You may also have the right not to receive discriminatory treatment for exercising a privacy right.

To make a request, email privacy@slatevm.com with “Privacy Request” in the subject. Describe the request and the SlateVM account or email concerned. We may verify your identity and authority before acting. An authorized agent may submit a request where law permits, subject to verification. We will respond within the period required by applicable law.

You can clear the website's theme preference using browser controls. You can revoke SlateVM's identity-provider access through that provider, and you can remove local VM data, logs, screenshots, and SSH keys using SlateVM and macOS controls.

12. United States privacy rights

Residents of states with applicable consumer-privacy laws may request to know, access, correct, delete, or obtain a portable copy of covered personal information and may have rights to opt out of certain targeted advertising, sale, profiling, or other regulated processing, subject to statutory exceptions. SlateVM does not sell personal information, share it for cross-context behavioral advertising, or use personal information for targeted advertising. We do not knowingly sell or share personal information of consumers under 16. We honor applicable browser-based privacy signals where required and will not discriminate against you for exercising a privacy right.

13. International users

SlateVM is operated by Elysian Edge LLC from Nevada, United States. Service providers may process information in the United States and other countries whose laws differ from those where you live. Where required, we use recognized safeguards for international transfers. Residents of the European Economic Area, United Kingdom, or Switzerland may exercise the rights described above and may lodge a complaint with their local data-protection authority.

14. Children

SlateVM is a technical virtualization product and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child provided personal information, contact us so we can investigate and delete it as appropriate. Users below the age of legal majority should use SlateVM only with permission and supervision of a parent or legal guardian.

15. Changes to this policy

We may update this policy as SlateVM, its services, or applicable requirements change. We will post the revised policy here and update the effective or last-updated date. If a change materially affects how we use information already collected, we will provide additional notice or obtain consent when required.

16. Contact

Elysian Edge LLC is the operator of SlateVM and is located in the State of Nevada, United States. Questions, privacy requests, or complaints may be sent to privacy@slatevm.com. General product and support inquiries may be sent to support@slatevm.com.