Privacy Policy

Slidereel (“Slidereel”, “we”, “us”, or “our”) is an AI-powered video generation service operated by Bruno Godinho, located in Belgium, European Union.

Bruno Godinho is the data controller for personal data processed through Slidereel. For any privacy-related questions or to exercise your rights, contact us at support@tryslidereel.com.

This Privacy Policy applies to all users of tryslidereel.com and its associated services. By using Slidereel, you acknowledge that your personal data will be processed as described here.

We collect the following categories of personal data:

Account data — collected when you register:

• Email address
• Display name (from your Google account, if you use Google Sign-In)
• Profile photo URL (from your Google account, if applicable)
• Firebase User ID (a unique identifier assigned to your account)

Billing data — collected when you purchase a subscription or credit pack:

• Subscription status, plan type, and credit balance (stored by us)
• Payment card details and billing address (collected and stored directly by Stripe — we never see or store raw card numbers)
• Transaction history and invoice records

Usage data — collected automatically as you use the service:

• Topics and text prompts you submit for AI generation
• Generated scripts, slide content, and image prompts
• Rendered video files (stored for 14 days then deleted)
• Credit consumption history
• Project and history metadata (topic, platform, slide count, render status)

Technical data — collected automatically:

• IP address
• Browser type and version
• Device type and operating system
• Referring URL and pages visited within the service
• Timestamps of actions (sign-in, generation, rendering)

Social account data — only if you connect a social platform (TikTok, Instagram):

• OAuth access token (encrypted at rest)
• Platform username / display name
• Token expiry date

Webhook data — only if you configure a webhook:

• Your webhook endpoint URL
• A signing secret (stored as a hash — we cannot recover the plain-text value)
• Delivery logs

We use your personal data for the following purposes:

• Providing the service: Processing your AI generation requests, rendering videos, managing your credit balance, and delivering your output files.
• Account management: Creating and maintaining your account, authenticating your identity, and communicating with you about your account.
• Billing and payments: Processing subscription and credit pack payments, issuing invoices, and handling refunds.
• Service communication: Sending transactional emails (account events, payment receipts, subscription renewals, material changes to these policies).
• Security and fraud prevention: Detecting and preventing abuse, unauthorised access, and fraudulent activity.
• Service improvement: Understanding aggregate usage patterns to improve features and reliability. We do not use your prompts or generated content to train AI models without your explicit consent.
• Legal compliance: Meeting our obligations under applicable EU law, including GDPR, tax regulations, and responding to lawful requests from authorities.

Under the General Data Protection Regulation (EU) 2016/679, we process your personal data on the following legal bases:

• Contract performance (Art. 6(1)(b)): Processing necessary to provide the service you signed up for — account creation, AI generation, rendering, billing, and delivery of your output.
• Legitimate interests (Art. 6(1)(f)): Security monitoring, fraud prevention, aggregate analytics for service improvement, and enforcing our Terms of Service. We have assessed that these interests do not override your fundamental rights.
• Legal obligation (Art. 6(1)(c)): Retaining financial records and responding to lawful regulatory or law enforcement requests.
• Consent (Art. 6(1)(a)): Where we rely on your consent (e.g., optional marketing emails), you may withdraw it at any time without affecting the lawfulness of prior processing.

We share your data with the following processors, each bound by a data processing agreement and adequate safeguards:

• Google Firebase (Google LLC) — Authentication (Firebase Auth) and file storage (Firebase Storage / Google Cloud Storage). Your account credentials and rendered video files are stored on Google infrastructure in the EU or US. See Google's Privacy Policy.
• Stripe, Inc. — Payment processing. Stripe collects and stores your payment card details directly. We store only your Stripe Customer ID and subscription status. See Stripe's Privacy Policy.
• Anthropic PBC — AI script generation via the Claude API. Your text prompts are transmitted to Anthropic's servers for processing. See Anthropic's Privacy Policy.
• Google DeepMind / Google GenAI — AI image generation via the Gemini API. Your image prompts are transmitted to Google's servers for processing.
• ElevenLabs, Inc. — Text-to-speech voice-over generation. Slide text is transmitted to ElevenLabs for synthesis. See ElevenLabs' Privacy Policy.
• TikTok / ByteDance — If you connect a TikTok account, we store an OAuth access token and publish videos on your behalf. TikTok's own privacy policy governs their handling of your data.
• Meta (Instagram / Facebook) — If you connect an Instagram account, we store an OAuth access token and publish videos on your behalf via the Instagram Graph API. Meta's own privacy policy governs their handling of your data.

We do not sell your personal data to any third party. We do not share your data for advertising purposes.

Current state: Slidereel does not currently use any third-party analytics or tracking cookies. We collect only the technical data described in Section 2 through our own server logs.

Planned future addition: We intend to add Google Analytics to measure page visits and feature usage. Before doing so, we will:

• Update this Privacy Policy with full details of what is collected.
• Add a cookie consent banner where required by EU law (ePrivacy Directive).
• Configure Google Analytics in a privacy-preserving mode (IP anonymisation enabled, data retention minimised).

Cookies we use today: We set a single session cookie to maintain your login state. This cookie is strictly necessary for the service to function and does not require consent under EU law.

We retain your data for the following periods:

• Rendered video files: 14 days from the time of rendering, then permanently deleted from cloud storage.
• Project metadata and history (topic, settings, slide text, render status): Retained while your account is active, and for up to 90 days after account deletion.
• Account data (email, display name): Retained while your account is active. Deleted within 30 days of account deletion upon request.
• Billing records and invoices: Retained for 7 years as required by Belgian and EU tax law.
• Server logs (IP, timestamps): Retained for up to 90 days for security and debugging purposes.
• Social OAuth tokens: Deleted immediately when you disconnect the platform or delete your account.

As a data subject in the European Economic Area, you have the following rights. To exercise any of them, email support@tryslidereel.com with your registered email address and the right you wish to exercise. We will respond within 30 calendar days.

• Right of access (Art. 15): Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
• Right to erasure / “right to be forgotten” (Art. 17): Request deletion of your personal data. Note that we may retain billing records for the legally required 7-year period.
• Right to restriction of processing (Art. 18): Request that we pause processing of your data in certain circumstances.
• Right to data portability (Art. 20): Request your data in a structured, machine-readable format (e.g., your project history as JSON).
• Right to object (Art. 21): Object to processing based on legitimate interests (e.g., analytics). We will stop unless we have compelling legitimate grounds.
• Right to withdraw consent (Art. 7(3)): Where processing is based on consent, withdraw it at any time without affecting prior processing.
• Right to lodge a complaint: You have the right to complain to your national supervisory authority. In Belgium, that is the Data Protection Authority (GBA / APD).

Some of our processors (Anthropic, ElevenLabs, Stripe) are based in the United States. When your data is transferred outside the European Economic Area, we rely on one or more of the following safeguards:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• EU–US Data Privacy Framework (where the processor is certified).

You can request details of the specific transfer mechanisms in place for each processor by emailing support@tryslidereel.com.

We take appropriate technical and organisational measures to protect your personal data, including:

• HTTPS encryption for all data in transit.
• Encryption at rest for files stored in Google Cloud Storage.
• OAuth access tokens stored with encryption; signing secrets stored as hashes only.
• Access to production systems restricted to the operator; no third-party access without a valid business reason.
• Firebase Security Rules to prevent unauthorised data access.

No system is completely secure. In the event of a personal data breach that is likely to result in high risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and you directly without undue delay, as required by GDPR Art. 33–34.

The service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child under 16 has provided us with personal data, contact us at support@tryslidereel.com and we will delete it promptly.

We may update this Privacy Policy from time to time. For material changes, we will notify you by email at least 30 days before the change takes effect. The “Last updated” date at the top of this page always reflects the most recent version.

We will never change how we use your data in a way that reduces your privacy rights without giving you the opportunity to object or close your account first.

For any privacy questions, data subject requests, or complaints:

• Email: support@tryslidereel.com
• Data controller: Bruno Godinho, Belgium, European Union
• Response time: We acknowledge within 3 business days and provide a substantive response within 30 calendar days.

If you are not satisfied with our response, you may escalate to the Belgian Data Protection Authority (GBA / APD) or the supervisory authority in your country of residence within the EU.