Privacy Policy

Last updated: June 2026

This Privacy Policy explains how InSlides ("we", "us"), operator of inslides.digital, collects, uses and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data controller

InSlides is the data controller for the personal data processed through this service. You can reach us at privacy@inslides.digital.

2. Data we collect

  • Account data — email address and display name. Sign-in is passwordless (magic links) — we never store a password.
  • Content data — prompts, uploaded documents, URLs you submit and the presentations generated from them.
  • Billing data — subscription plan and status. Payments are processed by Paddle as merchant of record; we never receive or store your card details.
  • Technical data — logs strictly necessary for security and abuse prevention (e.g. rate limiting).

3. Why we process your data

  • To provide the service (generate, store and display your presentations) — performance of contract.
  • To manage your subscription and invoicing through Paddle — performance of contract and legal obligation.
  • To secure the platform (authentication, fraud and abuse prevention) — legitimate interest.

4. AI processing

The content you submit (prompts, documents, URLs) is sent to third-party language-model providers (via OpenRouter) solely to generate your presentation. It is not used by us to train models. Do not submit sensitive personal data you are not authorised to share.

5. Where your data lives

Your account and content data are stored in a PostgreSQL database hosted on Supabase, accessible only by your account through authenticated server-side requests. The application is hosted on Vercel.

6. Retention

We keep your data for as long as your account exists. Delete your account from Settings → Danger zone to erase your account data from InSlides, including presentations, groups, invitations, generation knowledge, private AI cache entries and billing records. Our processors may retain limited security, legal or backup records for the periods stated in their own policies.

7. Your rights

Under the GDPR you have the right to access, rectify, export, restrict, object to processing of and erase your personal data. You can exercise most rights directly in the app (Settings) or by writing to privacy@inslides.digital. You also have the right to lodge a complaint with your local supervisory authority.

8. Processors

  • Supabase — PostgreSQL database hosting
  • Vercel — application hosting
  • Resend — transactional email (magic links, invitations)
  • Paddle — payments (merchant of record)
  • OpenRouter — AI generation

9. Changes

We may update this policy from time to time. Material changes will be announced in the app before they take effect.