Privacy Policy

Last updated 30 September 2026

This Privacy Policy explains how [LEGAL ENTITY NAME] (“we” or “us”) collects, uses, shares and protects personal data. It covers the SlidesAI iPhone app, the website at useslidesai.com, and the services we provide through them (together, “SlidesAI”).

Read it together with our Terms of Service. Words that the terms define, such as “inputs”, “outputs” and “your content”, mean the same here.

The short version

We collect what we need to make your slides and run your account. We do not collect your precise location or your contacts.
To make your slides, we send your product photos and product details to AI providers, such as fal, OpenAI and Google.
We do not sell your personal data, and we do not use it for advertising. There are no ads, trackers or analytics tools in SlidesAI.
We do not use your content to train AI models.
Generated images and finished slides are at web addresses that contain long random codes. Anyone with the address can open the image.
You can delete a project or your whole account at any time.
SlidesAI is only for adults 18 and older.

This summary helps you read the policy. It does not replace it. The full policy below applies.

1. What we collect

Some data comes from you, some from the service you sign in with, and some from your use of SlidesAI. We never get your Apple, Google or TikTok password.

Account data

Sign in with Apple: your name and email address. If you choose Hide My Email, we get an address that Apple forwards to you.
Sign in with Google: your name, email address and profile photo.
Sign in with TikTok: your TikTok display name and profile photo. TikTok does not give us your email address or phone number.
Sign in with a phone number: your phone number. Our sign-in provider texts a code to it.
An account ID from each service that you sign in with, and your SlidesAI account ID.
The name that you set in the app.
Sign-in records: the time of each sign-in, your type of device and browser, and your IP address. Our sign-in provider also works out your approximate location, such as the city, from the IP address. It keeps these records to protect your account.

Your content

Our Terms of Service call these “inputs” and “outputs”. Together they are “your content”.

Product links that you paste. We keep the address of the product page, without the tracking codes that share links often contain.
The product name and the product photos from a listing.
Photos and screenshots that you choose from your photo library, including photos that you add to a slide.
Product details that AI reads from your photos, such as the type of product, its colors and its brand. You can check and change them.
Your outputs: generated images, slide text and captions. When you save slides to Photos, the app also uploads the finished slides to us.
Your choices and edits: the styles you pick, the order of your slides, text you change, and your settings.

Photos can show people, places or things that say something about you or about others. Add only photos that you have the right to use, and do not add sensitive data that SlidesAI does not need.

Credits and purchases

Your credit balance, and a history of the credits you get, spend and get back.
Your plan, its status and its renewal date.
When you buy something in the app, Apple takes the payment. Apple tells us what you bought, when you bought it, and whether the purchase is active or refunded. We never get your card number or other payment details.

Technical data

When the app or the website connects to our servers, we get your IP address, the time and the request. Our network provider, Cloudflare, also handles this data.
A record of each generation job: its status, any error, the AI model that it used and its cost.
If you turn on Share With App Developers in your iPhone settings, Apple sends us crash reports and usage statistics. They do not identify you.

Messages

When you email us, we get your email address and what you write.

What we do not collect

We do not collect your precise location, your contacts, your health data or your browsing history.
We do not use your iPhone’s advertising identifier, and we do not track you across apps and websites that other companies own.
We do not use analytics or advertising tools in the app or on the website.
The app gets only the photos that you pick. To save slides, it asks only to add photos to your library, not to see it.
When you tap Paste, the app reads your clipboard, and iOS can ask you first. The app uses the text only if it is a web link. It sends the link to us only when you add it.

2. How we use your data

We use your data to:

Run SlidesAI for you: sign you in, keep your projects, read your products, make your slides and show them.
Send your inputs to our AI providers to make your outputs, as How AI makes your slides describes.
Manage your credits, your plan and your purchases, and give back credits when a generation fails.
Keep SlidesAI secure: stop fraud and abuse, stop people from opening extra accounts to get more free credits, and enforce our Terms of Service.
Fix problems and improve SlidesAI. For example, we study failed jobs and costs to choose better models and prompts.
Answer your messages and support requests.
Send you notices about your account, your purchases and changes to our terms or this policy, in the app or by email.
Obey the law, answer lawful requests, and protect our rights and the rights of others.

We do not:

sell your personal data, or share it for advertising,
use your content to train AI models,
use your content to promote SlidesAI, unless you give us permission, or
make decisions about you with legal or similarly significant effects by automated means alone.

3. How AI makes your slides

SlidesAI uses AI models from other companies. We send each one only what its step needs, and only when you add a product or ask SlidesAI to make or change slides. Before the app first sends your data to them, it asks for your permission. Without it, SlidesAI cannot make slides.

What each step sends

Reading your product. We send your product photos and the listing’s product name to Google’s Gemini API. It tells us the type of product, its colors and its brand.
Writing slide text. We send product details, such as the name, colors and brand, and the style’s example text to the Gemini API. It writes the slide text and the caption. This step does not send your photos.
Making images. We send your product photos and a text prompt that describes the product and the scene to fal, which runs the image model. Today that model is OpenAI’s GPT Image, so fal passes your request to OpenAI.
We may use Anthropic’s Claude API for the first two steps, in place of the Gemini API.

If we start to use a model from another company, we add that company to this list before we switch.

Training

We do not use your content to train AI models.
OpenAI, Google and Anthropic say that they do not use data from their paid APIs to train their models, unless the customer agrees. We have not agreed.
fal’s terms do not promise that fal never trains on customer data. They let fal use data that is aggregated or no longer identifies anyone to improve its services and to develop AI models.

How long AI providers keep your data

We tell fal to keep the photos that we send and the images that it makes for only 1 hour. Until then, they are at unguessable web addresses. We also tell fal not to store the content of each request, such as the prompt. fal can still keep basic records of each request, such as its time and cost.
Under its standard API policy, OpenAI keeps image requests for up to 30 days to check for abuse.
Google keeps Gemini API requests and responses for 55 days to check for abuse.
Anthropic deletes API requests and responses within 30 days. If its safety systems flag a request, it can keep that request for up to 2 years.

The fal period comes from the settings that we send with each request. The other periods come from the providers’ own policies on the date at the top of this page. Their policies control what they keep: fal, OpenAI, Google Gemini API and Anthropic.

Content filters and human review

Our AI providers check requests and outputs with automatic filters. When a filter blocks a request, it makes no output.
Providers can keep flagged requests longer, and their staff can review them, under their own policies.

We do not routinely look at your content. People on our team look at it only to:

answer your request,
fix a problem,
check a report of abuse or of a breach of our terms, or
obey the law.

5. Public addresses for your images

Our storage keeps two kinds of files:

Private files. The product photos that you add, from a link or from your library, are private in our storage. The app opens them with signed addresses that expire after about an hour. To make images, we also send them to fal, which keeps them for a time, as How AI makes your slides describes.
Public files. Generated images, photos that you add to a slide, and the finished slides that you save are public files. Each one has a web address on media.useslidesai.com that contains two long random codes.

Anyone who has the address of a public file can open it without signing in. Nobody can guess the address, and we do not list or publish it. We use public addresses so that your images load quickly.

If you share an address, anyone who gets it can see the image. When you delete the project or your account, we delete the files and remove their copies from Cloudflare’s cache. Copies can stay on devices that opened them.

6. TikTok

SlidesAI is not affiliated with, endorsed by or sponsored by TikTok.

Sign in with TikTok

If you sign in with TikTok, TikTok sends your display name, your profile photo and an account ID to our sign-in provider, Clerk. TikTok also gives Clerk a token for this basic profile. We use this data only to sign you in and to show your name in the app. We do not use it to read your videos or messages, or to post for you.

Reading TikTok Shop listings

When you paste a TikTok Shop link, the app opens the listing on your phone, with your own internet connection. TikTok gets the request like a visit from a web browser, with your IP address, and can set its own cookies in the app. TikTok’s privacy policy applies to that visit. If TikTok shows a security check, you complete it with TikTok.

The app then sends us the product name, the product page address without tracking codes, and the product photos. It does not send us anything else from the page.

Posting to TikTok

SlidesAI does not send anything to TikTok yet. You save your slides to Photos and post them in the TikTok app yourself. We will update this policy before we add a way to send slides to TikTok.

7. How long we keep your data

We keep personal data only as long as we need it for the reasons in this policy. Then we delete it.

Account data: until you delete your account.
Projects, photos, images and slide text: until you delete the project or your account.
Generation job records: until you delete your account. After you delete a project, its job records can still hold the product name and the addresses of files that we deleted.
Credit and plan records: until you delete your account.
Purchase records: we keep the record of each purchase for 7 years after the purchase, also after you delete your account. When you delete your account, we remove your account ID from these records. Tax, accounting and consumer law require them.
Sign-in records: Clerk keeps them for a limited time under its own policy.
Server logs: as long as we need them to find and fix problems and to keep SlidesAI secure.
Messages to us: as long as we need them to help you and to keep a record of what we agreed.
Backups: our database keeps a restore history so that we can recover from mistakes. Deleted data can stay in it for up to 30 days, and then it expires.
AI providers: as How AI makes your slides describes.

8. Deleting your data

Delete a project in the app at any time. We delete its products, photos, generated images, slide text and finished slides from our database and our storage.
Delete your account in the app’s settings, or email [email protected]. If you email us, we first check that the account is yours.
When you delete your account, we delete your account from Clerk. We also delete your projects, photos, images, slide text, settings, generation job records, credit history and plan records from our database and our storage, and we remove copies of your images from Cloudflare’s cache.
If you signed in with Apple, the app asks you to confirm with Apple first. We then tell Apple to stop SlidesAI’s access to your Apple Account.
We delete the records in our database at once. Our storage and Cloudflare’s cache follow, usually within minutes. If a step fails, we try again for about a day, and we always finish within 30 days. Copies in backups expire within 30 days after that.
We keep the record of each purchase, without your account ID, because the law requires it. AI providers keep some data for a time under their own policies, as How AI makes your slides describes.
You cannot undo a deletion. Your unused credits and remaining plan time end. Deleting your account does not cancel an App Store subscription. Cancel it in your Apple Account settings.
Deletion in SlidesAI does not remove copies outside SlidesAI, such as slides in your Photos library or posts on TikTok.

9. Your rights and choices

Wherever you live, you can ask us to:

tell you what personal data we have about you, and give you a copy,
correct data that is wrong,
delete your data, or
give you your data in a format that you can move to another service.

You can do some of this yourself in the app: change your name, edit your projects, and delete projects or your account.

To make a request, email [email protected]. We check that the request comes from you before we act on it. For example, we can ask you to confirm a code that we send to the email address or phone number on your account.

We answer within 30 days. If we need more time, we tell you why. The law where you live can give you more rights. US state privacy rights and People in the EU, the UK and Switzerland describe some of them.

Choices on your iPhone

You can change the app’s access to your photos at any time in the Settings app, under Apps, then SlidesAI.
You can stop using SlidesAI and delete the app at any time. Delete your account first to remove your data.

10. US state privacy rights

Some US states, such as California, Colorado, Connecticut, Oregon, Texas and Virginia, have consumer privacy laws. If you live in one of them and its law applies, you have the right to:

know what personal data we collect, use and disclose, and get a copy,
correct and delete your data,
opt out of the sale or sharing of your data, targeted advertising and profiling with significant effects. We do not do any of these.
not be treated differently because you use these rights,
appeal if we refuse your request. Email [email protected] with the subject “Privacy appeal”. If we deny your appeal, you can contact your state attorney general.

An authorized agent can make a request for you. The agent must show that you gave them permission, and we can ask you to confirm your identity with us.

We treat a Global Privacy Control signal from your browser as a request to opt out. Because we do not sell or share personal data, you do not need to do anything else.

California details

In the past 12 months, we collected these categories of personal information, as California law names them:

Identifiers: name, email address, phone number, account IDs and IP address.
Customer records: name, email address and phone number.
Commercial information: credit, plan and purchase records.
Internet or other electronic network activity: sign-in records and server logs.
Geolocation data: the approximate location that comes from your IP address, in sign-in records.
Audio, electronic, visual or similar information: the photos that you add and the images that we make from them.

Sources: you, your device, the services that you sign in with, the listings that you add, and Apple.
Purposes: the purposes in How we use your data.
Disclosures: we disclose each category to the service providers in Who we share it with, for those purposes only.
Retention: as How long we keep your data describes.

We do not sell or share any category, and we do not sell or share the personal information of anyone under 16. We do not use or disclose sensitive personal information for any purpose that California law lets you limit.

11. People in the EU, the UK and Switzerland

If you live in the European Economic Area, the United Kingdom or Switzerland, the GDPR or a similar law applies to your personal data. [LEGAL ENTITY NAME] is the controller of that data.

Legal bases

Contract: to provide SlidesAI under our Terms of Service. This covers your account, your projects, the AI processing that makes your slides, your credits and your purchases.
Legitimate interests: to keep SlidesAI secure, stop fraud and abuse, fix problems, improve SlidesAI, and make or defend legal claims. We make sure that these interests do not override your rights.
Legal obligation: to keep records that the law requires and to answer lawful requests.
Consent: where we ask for it. You can withdraw consent at any time. This does not affect what we did before you withdrew it.

Your rights

You can ask us to access, correct, delete or move your data, or to restrict its use. You can also object to processing based on legitimate interests. To use these rights, email [email protected].

If you have a complaint about how we use your data, email [email protected] first, and we will try to solve it. You can also complain to the data protection authority where you live or work. In the UK, this is the Information Commissioner’s Office.

International transfers

We process your data in the United States, and our providers can process it in other countries too. For these transfers, we use the protections that the law allows. Examples are the EU-US Data Privacy Framework, where a provider takes part in it, and the European Commission’s standard contractual clauses.

12. Where we process data

We are in the United States. Our database is in Oregon, and our web service and job worker run on servers that we operate in the United States. Clerk stores account data in the United States. Cloudflare, fal, OpenAI, Google and Anthropic can also process data in other countries. If you use SlidesAI from outside the United States, US law can differ from the law where you live.

13. Security

Data between the app, the website and our servers travels encrypted, over HTTPS.
Our database and storage providers encrypt data at rest.
The app keeps your sign-in session in the iPhone’s secure storage, the Keychain.
Your product photos are private, and the app opens them with addresses that expire.
We give access to our systems only to the people who need it to run SlidesAI.
No system is completely secure. If a breach affects your personal data, we tell you and the authorities as the law requires.

14. Children

SlidesAI is only for adults 18 and older, and it is not directed to children. We do not knowingly collect personal data from anyone under 18. If we learn that someone under 18 has an account, we close the account and delete its data. If you think that a child uses SlidesAI, email [email protected].

15. Cookies on the website

The website uses only the cookies that it needs to work:

Clerk sets cookies that keep you signed in on the website and protect your account.
Cloudflare can set cookies that help it detect bots and attacks.

We do not use analytics, advertising or tracking cookies, and we do not let other companies track you on the website. Some browsers send a Do Not Track signal. The website works the same way with or without it, because it does not track you.

The waitlist form on the website does not store or send your email address. If we connect it to a mailing list, we will update this policy first.

16. Changes to this policy

We update this policy when SlidesAI or the law changes, and we review it at least once a year. We post the new version on this page and change the date at the top. If a change is significant, we tell you in the app or by email before it takes effect.

17. Contact us

For questions or privacy requests, write “Privacy request” in the subject.

[LEGAL ENTITY NAME]
[MAILING ADDRESS]
Email: [email protected]