Privacy Policy

Who we are

slAIdes is operated by slAIdes (the "Seller"), who acts as the data controller for personal data processed through the Service.

What we collect

• Account info: email, display name, avatar (if you sign in with Google).
• Content: decks, uploaded documents and media, presenter notes, miniME prompts and conversations, generated results, and saved presentation style preferences.
• Usage: AI and MCP requests, model usage and wallet accounting, plan tier, payment and consent records, and error logs.
• Technical: IP address, browser, device info for security and debugging.
• Support messages you send us.

How we use it & legal basis

• To provide the Service and your account — performance of a contract.
• To enforce quotas, prevent abuse, and secure the Service — legitimate interests.
• To send transactional emails (account, billing) — contract / legal obligation.
• To debug issues and improve the product — legitimate interests.
• For any optional marketing — only with your consent.

AI processing

miniME uses third-party AI models through Lovable's AI gateway. When you request AI assistance, we send the prompt, relevant conversation history, selected deck or library context, style preferences, and relevant uploaded documents, extracted text or images needed for the task. This includes generation, editing, source analysis and learning a presentation style. The selected model provider also processes that request. The current built-in generation models are Google's Gemini models; Typesafe's Jev classifies requests and text to route tasks and format math. Avoid including personal or confidential information you are not authorised to share for this purpose.

We retain conversations, generated results, recovery records and usage accounting to provide chat history, recover interrupted work and calculate charges. If you connect an external MCP-capable AI client, it separately processes the information you make available under that client's provider settings and terms. Our MCP service reads or updates decks within the access you authorise.

Sharing

We do not sell your data. We share it only with the following recipients:

• Stripe — our payment processor. Stripe receives the data needed to process payments, manage subscriptions, calculate tax, issue receipts, and handle payment disputes. See Stripe's Privacy Policy.
• Lovable, Supabase and Cloudflare — application hosting, authentication, database, file storage, transactional email and network delivery, as used by the Service.
• Lovable's AI gateway and the model provider serving your request (currently Google and Typesafe) — prompts and task context described above. The provider depends on the selected model and task.
• Sentry, when error reporting is configured — technical error reports and an account identifier to diagnose failures. Session replay and performance tracing are disabled; we exclude account email, request details and activity breadcrumbs from these reports.
• Professional advisers (legal, accounting) where strictly necessary.
• Authorities where required by law.

International transfers

Some recipients are located outside the EEA/UK. Where this is the case we rely on adequacy decisions or Standard Contractual Clauses to safeguard your data.

Retention

We retain saved content while it is needed for your account. Moving a deck to Trash preserves it for restoration; permanent deletion removes it from your library. Local drafts, unsynced work and recovery records may also be stored on your device. Account deletion in Account settings cancels active subscriptions and removes account data and uploaded files from the Service. Copies you exported or shared with others remain under their control. Payment, tax, consent and dispute records may need to be retained after deletion to meet legal obligations or establish and defend legal claims; their retention depends on the record and applicable law.

Security

The Service uses encrypted connections, authenticated requests and account-scoped access controls to protect cloud content. No system is perfectly secure; report suspected incidents via the contact page.

Your rights

Subject to applicable law (including the GDPR for users in the EEA/UK) you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent. You can manage data export and account deletion from the avatar menu → Account settings. You may also lodge a complaint with your local data protection authority. We respond to verified requests within one month.

Cookies

We use cookies and local storage strictly necessary for authentication, remembering your preferences and keeping local decks, drafts and recovery state. We do not use third-party advertising cookies or session replay. The bundled editor fonts are served by slAIdes rather than Google Fonts. Stripe checkout uses its own cookies and storage for payments and fraud prevention. External content you choose to load can contact its hosting provider.

Children

The Service is not directed at children under 13.

Changes

Material changes to this policy will be posted here.

Contact

Privacy questions? Reach us via the contact page.