Privacy Notice

SlideFormat is a service of Itemdocks.com — operated and provided by Itemdocks Private Limited (“we”, “us”), trading as SlideFormat. Itemdocks Private Limited is the controller of your personal data — it decides why and how that data is processed. Our registered address is Door no 22/B, Ward-27, 691013, India. This notice covers the website at https://www.slideformat.com and its API at api.slideformat.com.

For any privacy question, request, or complaint, contact us at support@slideformat.com — our privacy contact, who also handles India DPDP grievance redressal.

SlideFormat is built privacy-first, and the architecture — not just the wording here — decides what happens to your data. There are three buckets:

2.1 Stored on your device only (your presentation content)

Everything you create with SlideFormat — your prompts, drafts, slide content, design choices, uploaded documents and images, research notes, and the generated .pptx files — is created, composed, and stored in your own browser (browser storage: IndexedDB and localStorage). This data is never transmitted to our servers for storage. Consequences you should know about:

• Clearing your browser’s site data (or using a different browser or device) permanently removes your decks. We cannot recover them for you.
• Anyone with access to your device and browser profile can open those decks. Keep your device secure.

2.2 Stored on our servers (account and billing essentials)

Our servers keep the thin service layer that makes the product work — and deliberately nothing else:

• Account data: your email address, optional display name and avatar, account tier, role, and timestamps.
• Credentials: handled by our self-hosted authentication service (Supabase GoTrue) on our own infrastructure. Passwords are stored only as salted hashes by that service — we never see them in plain text.
• Credits and billing records: your credit balance and a ledger of every credit movement (purchases, usage, grants) with amounts, timestamps, and payment-processor transaction references.
• Usage records: after a generation we record that one ran — the activity kind (skeleton, slide, deck), token and credit counts, slide count, and duration — with no deck titles, no prompt text, and no slide content.
• Technical telemetry: first-party generation events (slide/chart/table counts, duration, error codes, memory peak, and your browser user-agent string). Used only to keep the service healthy.
• In-app notifications and administrative audit records for credit adjustments.

2.3 Processed transiently, never stored (your prompt and deck content)

To generate a deck, your prompt and the draft slide content are processed in real time by our AI infrastructure: a stateless edge service on Cloudflare that relays them to the AI model providers we use, all under zero-data-retention (ZDR) terms. The generated content streams back to your browser, where the deck is stored locally. This content is not retained, logged, or used to train models — by us or on our behalf — and our edge service enforces that: it keeps no prompt or content logs.

2.4 Why we are allowed to hold it — purpose and legal basis

We collect each category for a specific purpose, and rely on the specific legal basis named here:

• Account data (email, display name, avatar, tier, role, timestamps) — to create, secure, and operate your account. Legal basis: performance of a contract (the Terms of Service).
• Billing records and the credit ledger — to take payment through our merchant of record, deliver credits, apply refunds, and keep the accounting records tax law requires. Legal basis: performance of a contract, plus compliance with a legal obligation (tax and accounting law).
• Usage counts, security logs and technical telemetry — counts of a generation (kind, tokens, credits, slide count, duration), error codes, and request/security logs, used to keep the service healthy, prevent abuse, and plan capacity. Legal basis: our legitimate interests in a secure, working service — never used for advertising or profiling.
• A keyed one-way hash of your email, kept after account deletion — solely to stop the same address claiming the free-credit grant repeatedly. Legal basis: our legitimate interest in preventing abuse of the free allowance (the hash is not readable back to your email and is not used to contact or identify you). For content that never leaves your browser, no legal basis is needed: we do not process it.

Where we rely on legitimate interests you may object at any time (see §7); where we rely on contract or legal obligation, we need the data to provide the service or meet the law.

We deliberately keep this list short. What each service receives:

• Cloudflare — hosting, CDN, and security for the site and our edge API. Cloudflare processes standard request data (IP address, request metadata) under its own privacy terms as our processor.
• Paddle — our merchant of record — processes credit-pack purchases as the seller of record: it takes payment, collects applicable tax, issues invoices, and handles refunds. Payment card details go directly to its checkout and never reach our servers. We receive and store only transaction references and amounts. Paddle is an independent controller of the buyer data it collects (your name, email, and payment details) under its own privacy notice; order lookups are handled at paddle.net.
• AI model providers (zero data retention) — receive your prompt and draft slide content for processing only, as described in §2.3.
• Research and imagery sources — when the AI researches your topic, we send topic-derived search queries(not your deck content) to our self-hosted search service (SearXNG), with fallbacks to public search (DuckDuckGo) and page readers (r.jina.ai). Imagery comes from public image search results. Search results are cached for at most 15 minutes in a cache keyed to your account, so results are never shared between users.
• Prompt moderation — prompts are checked automatically to block abusive content. Only the prompt text is sent for this check, under the same zero-data-retention terms, and it is not used for training.

We do not sell your personal data, do not share it for cross-context behavioural advertising, and have done so never.

We use strictly necessary sign-in cookies only — there is no consent banner because there is nothing optional to consent to:

• The session cookie (sb-hyacinth-auth-token), set by our authentication service (Supabase GoTrue) when you sign in and needed for every signed-in request (HttpOnly, SameSite=Lax; Secure in production). We use Lax rather than Strict so that an emailed confirmation or password-reset link — which opens from your mail app as a cross-site navigation — can complete the sign-in round trip. When the session payload is large, the browser stores it as numbered chunk cookies of the same cookie — same purpose, same lifetime, same flags.
• A short-lived PKCE code-verifier cookie, present only during the sign-in round trip and gone once the exchange completes. It protects the OAuth/PKCE sign-in flow against interception.

Both are exempt from consent requirements because the service cannot work without them. We set no analytics, advertising, or third-party tracking cookies, and we run no third-party analytics scripts. Beyond cookies, the product stores your working data in browser storage (IndexedDB/localStorage) as described in §2.1 — that storage is functional, first-party, and stays on your device.

• We never store your slide content on our servers.
• We never store deck titles or prompt text either — the only record a generation leaves on our servers is a usage row of counts.
• We never use your prompts, content, or decks to train AI models.
• We never sell or rent personal data.
• We never run third-party advertising or tracking on the site.

Deleting your account: self-service in Settings → Account (this control is being built now), or email support@slideformat.com from your account address and we will do it for you. On deletion the login identity and all account rows — profile, credit balance and ledger, usage counts, and notifications — are deleted, and the session cookies stop working.

• Account data — for as long as your account is open; then deleted with it, except as noted below.
• Billing ledger records — retained as long as required for tax and accounting compliance (our merchant of record, Paddle, holds the underlying payment records under its own obligations).
• Usage records — counts only (activity kind, tokens, credits, slide count, duration); retained while your account is open; deleted with it.
• Telemetry — kept in limited technical form for service health; contains no deck content.
• A keyed one-way hash of your email address, kept after deletion — the only record that survives account deletion. It cannot be reversed to your email, is not used for any other purpose, and exists solely to stop the same address claiming the free-credit grant again.
• Prompt/slide content — not stored at all (see §2.3). There is nothing to retain.

Depending on where you live, you have rights over your personal data. We honour all of the following, without charge, whoever you are:

• India (Digital Personal Data Protection Act) — access to your data, correction and completion, erasure, grievance redressal, and nomination of someone to exercise your rights.
• UK/EU GDPR — access (a copy of your data), rectification, erasure (“right to be forgotten”), restriction of processing, data portability, objection to processing based on legitimate interests, and the right not to be subject to solely automated decisions with legal effect (we make none).
• US state laws such as the CCPA/CPRA — to know what we collect and why, to delete it, to correct it, and to be free from discrimination for exercising your rights. We do not sell or share personal data for cross-context behavioural advertising.

To exercise any right, email support@slideformat.com (also our grievance-redressal contact) from your account address. We respond within one month, and tell you if a complex request needs longer. If you are unhappy with our answer you may complain to a supervisory authority — in the UK, the Information Commissioner’s Office; in the EU, the data-protection authority where you live or work; in India, the Data Protection Board. You may also object to processing we base on legitimate interests at any time.

SlideFormat is not directed at children. You must be at least 16 years old (or the age of digital consent in your country; at least 13 where US law applies) to create an account. If you believe a child has created an account, contact us and we will remove it.

Our infrastructure runs on Cloudflare’s global network and our self-hosted services, so your data may be processed in countries other than your own — including transfers out of India. Where personal data crosses borders, we apply the safeguards applicable law requires (such as the EU Standard Contractual Clauses or the UK International Data Transfer Addendum).

We protect the little data we hold with transport encryption (TLS/HSTS), strict security headers on every page, sanitisation of all AI-authored content before it renders, signature-verified payment webhooks, parameterised database access, and least-privilege service keys. See our Security page for the full picture.

If we change this policy materially, we will update the date above and, for significant changes, notify you in the product or by email before the change takes effect.

Itemdocks Private Limited (SlideFormat), Door no 22/B, Ward-27, 691013, India — support@slideformat.com. See also our Contact page, Terms of Service and Refund Policy.