Privacy Policy

At SlidePilot (operated by SlidePilot Inc. and Revolt AI, “we,” “us,” or “our”), we take your privacy and the security of your personal information seriously. This Privacy Policy outlines our data practices for the SlidePilot platform located at slidepilot.dev, along with our web applications, APIs, content generation tools, and related services (collectively, the “Service”).

Please read this Privacy Policy carefully alongside our Terms of Service to understand how we collect, use, disclose, and protect your information when you access or use SlidePilot. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue using the Service.

1. Data Controller Information

The data controller responsible for the processing of your personal data under this Privacy Policy is SlidePilot Inc. and Revolt AI. For any privacy-related inquiries, requests, or concerns, you can contact our privacy team directly at:

SlidePilot Privacy & Data Protection

Email: revoltai26@gmail.com

Website: slidepilot.dev

2. Information We Collect

We collect information in three primary ways: information you provide directly, information collected automatically through your use of the Service, and information received from third-party partners.

2.1 Information You Provide Directly

• Account & Authentication Information: When you register and sign in via Google OAuth (managed through Better Auth), we collect your name, email address, profile picture URL, Google unique user identifier, language preference, and timezone.
• Workspace & App Brand Profiles: When setting up a workspace, you may provide your app name, public website URL, written app descriptions, target demographic descriptions, core value propositions, feature lists, and desired brand voice/tone.
• Uploaded Media Assets: When creating or customizing slide designs, you may upload image files (PNG, JPEG, WebP), logos, icons, and badge graphics. These are processed and normalized (stripped of private EXIF metadata and resized) to render vertical slideshow slides.
• Templates, Image Library & Automations: When you use the Service, we store the slideshow templates you design (including hook and call-to-action lists and notes for the AI), the Pinterest board URLs and search terms you submit, the images and details (such as titles, descriptions, and alt text) of the Pinterest pins you import, and the schedules you set for automations and individual posts (days, times, and time zone).
• Customer Support & Communications: If you reach out to us by email or submit feedback, we collect your message content, email address, and any attachments or context you share.

2.2 Information Collected Automatically

• Log & Device Information: Our servers and hosting infrastructure automatically record information sent by your browser, including your IP address, browser type and version, operating system, referring URL, time of access, and pages viewed.
• Product Telemetry & Usage Analytics: We use PostHog to monitor product health and user engagement. This includes user interaction events (such as initiating workspace onboarding, template selections, slide edits, checkout launches, and export triggers) and uncaught client-side application exceptions.
• Cookies & Local Storage: We use essential cookies (via Better Auth) to maintain your authenticated login session and state across page navigations. We also use browser local storage for user preferences (such as your chosen light or dark theme via next-themes).

2.3 Payment & Billing Information

When you purchase a paid subscription, all payment card details, billing addresses, and tax collection are handled directly by our Merchant of Record, Polar (Polar Software Inc.). SlidePilot never receives, stores, or processes raw credit card numbers, security codes, or bank account credentials. We only receive and store transaction metadata, including your Polar customer identifier, subscription identifier, subscription status (active, trialing, past due, canceled), plan tier, and renewal period dates.

3. How We Use Your Information

We process your personal data for the following legitimate business purposes and legal bases:

• To Provide and Deliver the Service (Contract Performance): Creating your user account, managing workspace isolation, analyzing public website URLs or app descriptions to extract positioning, importing the Pinterest images you choose, generating AI slide copy and hooks, making posts from your templates on the schedules you set, operating the visual editor, and rendering downloadable slide images.
• To Process Subscriptions & Maintain Accounts: Verifying entitlement to Pro features, managing subscription statuses, tracking usage quotas, and facilitating billing management through the Polar customer portal.
• To Maintain Security and Prevent Abuse (Legitimate Interest & Legal Duty): Monitoring for security breaches, authenticating login requests, enforcing rate limits (such as upload frequency and file bounds), and detecting fraudulent or malicious usage.
• To Improve and Optimize the Service (Legitimate Interest): Diagnosing system errors, tracking aggregated usage patterns, testing new features, and optimizing AI prompt templates to improve slideshow quality.
• To Communicate With You: Sending necessary transactional notifications, subscription receipts, security alerts, and responses to your support inquiries.

4. Subprocessors & Third-Party Disclosures

We do notsell, rent, or trade your personal information to third parties, data brokers, or advertising networks. We only share data with trusted third-party service providers (“Subprocessors”) who assist us in operating our platform under strict confidentiality and data protection obligations:

Legal Disclosures: We may disclose your information if required to do so by law, subpoena, or in response to valid requests by public authorities (e.g., a court or government agency), or to protect the rights, property, or safety of SlidePilot, our users, or the public.

Business Transfers: If SlidePilot is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as a business asset. We will notify you before your personal data becomes subject to a different privacy policy.

5. Artificial Intelligence & Data Practices

SlidePilot uses advanced generative artificial intelligence models to extract positioning from website copy and write slideshow drafts.

• No Model Training: We do not use your private workspace data, draft copy, or uploaded brand assets to train, fine-tune, or improve publicly available foundation AI models without your explicit consent.
• API Data Handling: We transmit prompts and extracted copy to AI providers (via OpenRouter to OpenAI/Azure) strictly via zero-data-retention or commercial API endpoints governed by enterprise privacy terms.

6. Cookies & Tracking Technologies

SlidePilot uses cookies and similar storage technologies to maintain core platform functionality:

• Strictly Necessary Cookies: Required for authentication, security, and session management via Better Auth. Without these cookies, you cannot log in or access your workspaces.
• Preference Storage:We use your browser’s local storage to remember your visual preferences, such as system, dark, or light mode theme settings.
• Analytics Technologies: PostHog cookies and local storage items track product telemetry, usage flows, and system errors to help us improve the application.

You can configure your browser to reject cookies, but doing so may prevent you from authenticating or utilizing the SlidePilot platform.

7. Data Security Safeguards

We implement comprehensive technical and organizational measures to safeguard your personal data:

• All communication between your browser and our servers is encrypted in transit using industry-standard Transport Layer Security (TLS/HTTPS).
• Multi-tenant workspaces are strictly isolated at the database query level to prevent unauthorized cross-tenant data access.
• Media asset uploads are normalized through Sharp, stripped of embedded metadata, and stored with restricted access keys.
• Internal service secrets (ASSET_INGEST_SECRET) are strictly isolated to server-side environments and never exposed to client browsers.

While we take rigorous measures to protect your information, no method of transmission over the Internet or electronic cloud storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention & Deletion

We retain your personal data for as long as your account is active or as necessary to provide you with the Service.

• Workspace Data: Templates, images, posts, and automations remain in your workspace until you delete them. Soft-discarded posts are retained temporarily for recovery and subject to periodic cleanup. When a workspace owner deletes a workspace, its data and stored files are permanently deleted shortly afterward.
• Account Deletion: You may request the permanent deletion of your account and all associated workspace data at any time by contacting us at revoltai26@gmail.com. Upon receipt of your verified request, we will permanently delete or anonymize your personal data within thirty (30) days, except where retention is required by law (e.g. tax records or dispute resolution).

9. Your Rights & Choices (GDPR & CCPA/CPRA)

Depending on your location, you may have specific statutory rights regarding your personal information under data protection laws such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA):

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete personal information.
• Right to Erasure (“Right to Be Forgotten”): You can request that we delete your personal information.
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Restrict or Object: You can object to our processing of your personal data under certain conditions.
• Right to Non-Discrimination: We will not discriminate against you (by denying services or charging different rates) for exercising any of your privacy rights.

To exercise any of these rights, please email us at revoltai26@gmail.com. We will respond to your request within thirty (30) days.

10. International Data Transfers

Your information may be transferred to, stored, and processed in the United States and other countries where our cloud infrastructure providers (such as Cloudflare, Convex, and Google) maintain operations. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, please note that we transfer data in accordance with lawful transfer mechanisms, including standard contractual clauses approved by the European Commission.

11. Children’s Privacy

The Service is strictly intended for businesses and individuals aged 18 and older. We do not knowingly collect or solicit personal information from children under the age of thirteen (13) (or under sixteen (16) in certain European jurisdictions). If we become aware that we have collected personal data from a child under the applicable age without parental consent, we will take immediate steps to delete that information. If you believe a child has provided us with personal data, please contact us at revoltai26@gmail.com.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our legal obligations, technical architecture, or business practices. When changes occur, we will update the “Last Updated” date at the top of this page. We encourage you to review this page periodically to stay informed about our data protection practices.

13. Contact Us

If you have any questions, comments, or concerns regarding this Privacy Policy or our privacy practices, please contact us at:

SlidePilot Inc. / Revolt AI

Email: revoltai26@gmail.com

Website: slidepilot.dev