Privacy Policy

What we collect

• Account information — email address and authentication data when you sign up or sign in (email/password, Google, or Apple). Managed by Supabase Auth.
• Campaign content — topics, slide copy, voiceover scripts, generated images, platform captions, and reference images you upload for campaigns or your brand library.
• Narration & audio exports — when you use voice preview or export features, voiceover text is sent for text-to-speech synthesis. We store related usage metadata (for example, character counts) to enforce plan limits.
• Usage data — campaign counts, slide regeneration counts, video and narration usage, and credit balances to enforce your plan limits.
• Subscription & billing — your plan tier, subscription status, and billing period dates. On the web, payments are processed by Stripe; we receive a customer ID and subscription status, not your full card number. In the native app, purchases are processed by Apple (iOS) or Google (Android) via in-app purchase; we receive purchase and entitlement status through RevenueCat. We do not store payment card or bank account details.
• Connected social accounts (optional) — if you connect YouTube, TikTok, or Instagram in Settings, we store OAuth tokens and your account display name so SlidePress can post on your behalf when you choose to publish. For YouTube we also record publish status (video id, URL, errors) per campaign. If you also grant Facebook Page posting permission (requested through the same Instagram connection), we use it to post to a Facebook Page you manage — see "Instagram connection" below.
• Device tokens (optional) — if you use the native app and allow notifications, we store a push token to notify you when slide images finish generating.
• Biometric unlock (optional) — if you enable Face ID / fingerprint unlock in the native app, your session refresh token is stored in the device Keychain or Android Keystore. Biometric data never leaves your device; we do not receive it.

How we use your data

• Provide and secure your account.
• Generate slide copy, images, captions, and AI voice narration you request.
• Enforce usage limits and improve reliability.
• Process subscriptions, apply plan entitlements, and manage billing status across web and mobile.
• Post campaign videos to YouTube Shorts when you connect a channel and choose to publish.
• Send optional push notifications in the native app.

Service providers

We use trusted processors to run SlidePress, including Supabase (database and auth), Vercel (hosting), Google Gemini (slide text), Fal.ai (image generation), ElevenLabs (text-to-speech / AI voice narration, when you use those features), Google YouTube Data API (when you connect YouTube and publish Shorts), Stripe (web subscriptions), RevenueCat (mobile subscription status), Apple App Store and Google Play (in-app purchases on native apps), and Firebase Cloud Messaging (push delivery, when enabled). Voiceover text is sent to ElevenLabs only when you preview or export narration. YouTube access is used only to read your channel name at connect time and to upload videos you explicitly publish. Processors handle data only to provide the service.

YouTube connection & publishing

If you connect a YouTube channel, SlidePress requests read access to show your channel name and upload access when you publish a Short. We store OAuth tokens securely on our servers (not in the mobile app) and use them only to upload videos you choose to publish from a campaign. We record publish metadata (status, YouTube video id and URL) in your account.

SlidePress's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect YouTube anytime in Settings → Connected accounts. Disconnecting revokes our access tokens. Deleting your SlidePress account also revokes YouTube access and removes connection and publish records from our database. Videos already uploaded to YouTube remain on your channel until you remove them in YouTube Studio.

We do not sell Google user data. We do not share, transfer, or disclose Google user data except: (1) to service providers that help us operate SlidePress (such as hosting and database providers), strictly to provide requested features; (2) if required by law, legal process, or valid government request; (3) as part of a merger, acquisition, or asset sale with appropriate safeguards; or (4) with your explicit consent.

To protect sensitive data (including Google OAuth tokens), we use HTTPS encryption in transit, server-side token storage, encryption at rest provided by our infrastructure providers, and restricted access controls for production systems.

TikTok connection

If you connect a TikTok account, SlidePress requests basic profile access to show your display name. When you publish, we request posting permission to upload your campaign video with your TikTok caption. We store OAuth tokens securely on our servers (not in the mobile app) and record publish status per campaign.

You can disconnect TikTok anytime in Settings → Connected accounts. Disconnecting revokes our access tokens. Deleting your SlidePress account also revokes TikTok access and removes the connection from our database.

Instagram connection

If you connect an Instagram Professional account (linked to a Facebook Page), SlidePress requests basic profile access to show your username. When you publish, we request posting permission to upload your campaign as an Instagram Reel (9:16 video) or carousel post (4:5 slide images), using your Instagram caption. We store OAuth tokens securely on our servers (not in the mobile app) and record publish status per campaign.

Facebook Page posting uses this same Meta connection rather than a separate one. If you additionally grant Facebook Page posting permission (requested in Settings or the first time you publish to Facebook), SlidePress can post the same campaign video or slide images to a Facebook Page you manage, using the same caption. This does not post to your personal Facebook profile or news feed outside a Page you administer.

You can disconnect Instagram anytime in Settings → Connected accounts. Disconnecting revokes our access tokens, including Facebook Page posting permission. Deleting your SlidePress account also revokes Instagram and Facebook access and removes the connection from our database.

Account deletion

You can request deletion of your SlidePress account and associated data at any time, including after you uninstall the app:

• In the app — Settings → Account → Delete account. Type DELETE to confirm. Deletion is immediate.
• On the web — open slidepress.co/account-deletion and submit the form, or email hello@slidepress.co with the subject “Account deletion request”. Web requests are processed within 7 days.

Data retention & deletion

We keep your data while your account is active. Deleting your account removes your campaigns, brand library, connected platform accounts (OAuth tokens are revoked), publish history, usage history, and sign-in access. Posts already published to YouTube, TikTok, Instagram, or a Facebook Page remain on those platforms until you remove them there. Limited billing or legal records may be retained when required by Apple, Google Play, Stripe, or applicable law.

The same web form is used to request data deletion.

Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal data. Contact us at hello@slidepress.co for requests.

Children

SlidePress is not directed at children under 13. We do not knowingly collect data from children.

Changes

We may update this policy. We will revise the date at the top when we do. Continued use after changes means you accept the updated policy.

Contact

Questions about privacy: hello@slidepress.co