Privacy Policy

Welcome to SlideForge ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered presentation generation service (the "Service").

By accessing or using SlideForge, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2.1 Information You Provide

• Account Information: Name, email address, username, and password when you create an account
• Profile Information: Avatar, bio, and other optional profile details
• Payment Information: Credit card details processed securely through Stripe (we do not store full card numbers)
• Presentation Content: Topics, prompts, and content you provide for presentation generation
• Communications: Messages you send to our support team

2.2 Automatically Collected Information

• Usage Data: How you interact with our service, features used, and time spent
• Device Information: Device type, operating system, browser type, and IP address
• Cookies and Tracking: Information collected through cookies and similar tracking technologies
• Log Data: Server logs, error reports, and performance metrics

2.3 Information via Our MCP Connector (Claude, ChatGPT, and other AI assistants)

SlideForge also offers a Model Context Protocol (MCP) server that lets you use SlideForge from within a compatible AI assistant. When you connect an assistant to your SlideForge account:

• You authorize the connection yourself via OAuth 2.1 (with PKCE) - SlideForge never receives or sees your assistant-provider password, and the assistant never receives your SlideForge password.
• The assistant sends us only the specific tool inputs needed for the action you requested (for example, a topic, tone, language, slide count, or a presentation ID) - the same inputs the website itself would send, not the surrounding conversation you have with the assistant.
• We return only the corresponding tool outputs (for example, a presentation ID, a generation status, or a time-limited export link) back through the assistant to you.
• The connected access token is scoped to your SlideForge account and can be revoked at any time from your account settings or your AI assistant provider's connected-apps settings.
• The assistant provider (e.g., Anthropic or OpenAI) handles that data under its own privacy policy for whatever it does on its side of the connection; SlideForge is not responsible for how the assistant provider itself stores or uses your conversation.

We use the data described in Section 2 for the following purposes:

• To generate your presentations: your topic, prompts, tone, language, uploaded files, and any other content you submit are sent to the AI providers listed in Section 4 to produce slide text and images, then assembled and stored as your presentation.
• To operate your account: creating and authenticating your account (including via Google or Apple sign-in), remembering your preferences, and providing customer support.
• To process payments and subscriptions: charging for credits or subscription plans, applying renewals, and issuing refunds.
• To communicate with you: transactional emails (e.g., generation-complete notices, receipts, password resets) and, where you have opted in, product updates and marketing emails.
• To keep the Service secure and reliable: fraud and abuse prevention, rate-limiting, bot detection, debugging, and monitoring uptime and performance.
• To measure and improve the Service: aggregate analytics on feature usage, and (where you have consented via the cookie banner) advertising performance measurement.
• To honor referral/affiliate attribution: as described in Section 7 and our Cookie Policy.
• To comply with legal obligations: tax, accounting, and financial record-keeping requirements, and responding to lawful requests from authorities.

We do not use your presentation content or prompts to train our own foundation models, and we instruct our AI subprocessors not to use your inputs to train their general-purpose models where those providers offer that control.

We do not sell your personal information. We share data only with the following categories of service providers ("subprocessors"), each acting on our instructions and only to the extent needed to provide the Service:

• AI generation providers: Moonshot AI (Kimi models, for outline/text generation), xAI, Google (Gemini/Imagen), and OpenAI (for image generation) receive the prompts and content needed to generate your slides.
• Payment processors: Stripe and Dodo Payments receive the billing information needed to process purchases and subscriptions; we never see or store your full card number.
• Cloud infrastructure and storage: Google Cloud Platform and Cloudflare (including Cloudflare R2 storage, CDN, and Turnstile bot-protection) host our application, your uploaded files, and your generated presentations.
• Notifications: OneSignal delivers transactional and (where consented) marketing emails and push notifications on our behalf.
• Authentication: Google and Apple provide "Sign in with" identity verification if you choose to use it; we receive only the profile fields those providers disclose (typically name and email).
• Analytics and advertising: Google Analytics and Google Ads, only where you have accepted analytics/advertising cookies via our consent banner (see Section 7).
• AI assistant platforms (MCP connections): if you connect SlideForge to an AI assistant such as Claude or ChatGPT, that platform relays the tool inputs/outputs described in Section 2.3 between you and SlideForge.

We may also disclose information if required by law, to protect the rights, property, or safety of SlideForge, our users, or the public, or in connection with a merger, acquisition, or sale of assets (with notice to you).

We implement industry-standard security measures appropriate to the sensitivity of the data involved, including:

• Encryption of data in transit (TLS/HTTPS) across the website, API, and MCP server.
• Passwords are hashed and never stored in plain text; we never see or store your full payment card number (handled directly by Stripe/Dodo).
• OAuth access tokens issued to connected AI assistants are scoped and revocable, and short-lived download links generated for file exports expire automatically after a few minutes.
• Access to production systems and customer data is restricted to authorized personnel who need it to operate the Service.

No method of transmission or storage is 100% secure. If we become aware of a data breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

• Account and presentation data: retained for as long as your account is active, so you can access your presentation history at any time.
• Deleted accounts: personal data and presentation content are deleted or anonymized within 30 days of a verified account-deletion request, except where retention is required below.
• Payment and transaction records: retained for as long as required by applicable tax, accounting, and financial regulations, typically up to 7 years.
• Support communications: retained for as long as needed to resolve your request and for a reasonable period afterward for quality and dispute-resolution purposes.
• Server and security logs: generally retained for a limited operational window (typically a few months) before automatic deletion, unless needed longer to investigate a specific security incident.
• Referral/affiliate attribution cookies: retained for up to 30 days, as described in our Cookie Policy.

Depending on your location, you may have the right to:

• Access the personal data we hold about you, and receive a copy in a portable format.
• Correct inaccurate or incomplete data, most of which you can update directly from your profile settings.
• Delete your account and associated data (see Section 6 for what this covers and any legal retention exceptions).
• Object to or restrict certain processing, including opting out of marketing emails (via the unsubscribe link in any marketing email) and non-essential cookies (via the consent banner or "Cookie settings" in the footer).
• Withdraw consent at any time where processing is based on consent, without affecting processing carried out before withdrawal.
• Lodge a complaint with your local data protection authority (for EEA/UK residents) or, for California residents, exercise your rights under the CCPA, including the right to know, delete, and opt out of the "sale" or "sharing" of personal information (we do not sell personal information, and you can opt out of advertising cookies via the consent banner).

To exercise any of these rights, email [email protected]. We will respond within the timeframe required by applicable law, and may need to verify your identity before fulfilling a request.