Privacy Policy
Last updated: February 18, 2026
1. Introduction
Slidespan ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and related services (the "Service").
2. Information We Collect
We may collect information about you in the following ways:
- Account Information: Name, email address, and profile information provided through Google Sign-In.
- Google Workspace Data: Access to Google Slides presentations, Google Drive files, and Google Sheets data that you explicitly authorize through OAuth consent.
- Usage Data: Information about how you interact with the Service, including features used, actions taken, and timestamps.
- Device & Browser Data: IP address, browser type, operating system, and device identifiers collected automatically.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service.
- Process automation tasks on your Google Slides presentations as instructed by you.
- Run governance checks, monitoring, and approval workflows on your behalf.
- Send transactional communications related to your account and usage.
- Enforce our terms, prevent abuse, and ensure security.
4. Google User Data
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only access Google Workspace data that you explicitly authorize, and we do not use this data for advertising purposes.
5. Data Sharing & Disclosure
We do not sell your personal information. We may share information with:
- Service Providers: Third-party vendors who assist in operating the Service (e.g., hosting, analytics, payment processing).
- Team Members: Other members of your workspace, as configured by your team's settings.
- Legal Requirements: When required by law, regulation, or legal process.
6. Cookies & Similar Technologies
We use cookies and similar browser-storage technologies for the following purposes:
- Authentication: Session cookies to keep you signed in (Firebase Auth). These are essential for the Service to function.
- Preferences: Local storage to remember your active workspace, display settings, and other preferences.
- Analytics (optional): We may use anonymous usage analytics to understand how the Service is used. These do not track you across other websites.
We do not use advertising cookies or trackers. You can manage cookie settings in your browser, but disabling essential cookies may prevent you from using the Service.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. Specific retention periods vary by data type and plan tier:
- Account data: Retained while your account is active. Deleted upon account deletion request (within 30 days).
- Generated outputs: Free plan — 7 days; Pro — 30 days; Advanced — 90 days; Enterprise — unlimited.
- Activity logs: Retained for the duration of your subscription. Deleted 90 days after account closure.
- Batch staging files: Automatically deleted 30 days after processing.
- Approval & monitoring history: Retained for the duration of your subscription.
- Google OAuth tokens: Encrypted and retained while your Google account is connected. Revoked upon disconnection.
You may request early deletion of your data at any time by contacting us.
8. Security
We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, secure OAuth token handling, and regular security reviews. However, no method of electronic transmission or storage is 100% secure.
9. Your Rights (Including GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with data protection laws, you have the following rights under the General Data Protection Regulation (GDPR) and similar laws:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): Request deletion of your personal data.
- Right to data portability: Receive your data in a structured, machine-readable format (JSON export).
- Right to restrict processing: Request that we limit how we use your data.
- Right to object: Object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on consent, withdraw it at any time.
We process personal data on the legal bases of (a) contract performance (to provide the Service), (b) legitimate interest (to improve and secure the Service), and (c) consent (for optional analytics). For data transfers outside the EEA, we rely on Standard Contractual Clauses or equivalent safeguards.
To exercise any of these rights, contact us at privacy@slidespan.com. We will respond within 30 days.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date.
11. Contact Us
If you have questions about this Privacy Policy, please contact us at privacy@slidespan.com.