Privacy Policy
Effective July 3, 2026
What we collect
Account data: your email address, name, and authentication details, managed through Google Firebase Authentication. Your files: presentations you upload and the packages we generate — processed solely to perform the conversion and deleted automatically after the retention window (currently 24 hours). Usage data: conversion counts, slide counts, and API key activity, kept to operate metering, quotas, and billing. Site analytics: page views and product events via Google Analytics, which uses cookies. Payment data: handled entirely by Stripe — we never see or store your card details, only your subscription status and Stripe customer reference.
What we don't do
We don't sell your data, we don't use your presentations for anything except your conversion (no training, no analysis, no human review except at your request for support), and we don't send marketing email without your consent.
Service providers
We rely on a small set of subprocessors to run the service: Google Cloud Platform and Firebase (hosting, storage, processing, authentication — data stored in the United States), Stripe (payments), Resend (transactional email such as invites and verification), and Google Analytics (site usage measurement). Each receives only the data needed for its function.
Retention
Uploaded files and generated packages: deleted after the retention window (24 hours). Account, team, usage, and billing records: kept while your account is active and as required for tax and accounting after that. Usage events are retained in aggregate for billing history.
Your rights
You can access and update your profile in the dashboard, export your data, or ask us to delete your account and associated data by emailing support@slidekiln.com. Depending on where you live (for example, the EU/EEA under GDPR or California under CCPA), you may have additional statutory rights to access, correct, delete, or port your data — the same email is the way to exercise them.
Security
Files live in private cloud storage accessed through time-limited signed URLs, API keys are stored only as salted hashes, webhook deliveries are HMAC-signed, and all traffic is encrypted in transit. No system is perfectly secure, but conversions are short-lived by design — deleted data can't leak.
Changes and contact
We'll announce material changes to this policy by email or in the dashboard. Questions or requests: support@slidekiln.com. See also our Terms of Service.