Privacy Policy

Last updated: June 2026

This Privacy Policy explains how InSlides ("we", "us"), operator of inslides.digital, collects, uses and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data controller

InSlides is the data controller for the personal data processed through this service. You can reach us at privacy@inslides.digital.

2. Data we collect

  • Account data — email address, display name and hashed password (managed by Supabase Auth).
  • Content data — prompts, uploaded documents, URLs you submit and the presentations generated from them.
  • Billing data — subscription plan and status. Payments are processed by Paddle as merchant of record; we never receive or store your card details.
  • Technical data — logs strictly necessary for security and abuse prevention (e.g. rate limiting).

3. Why we process your data

  • To provide the service (generate, store and display your presentations) — performance of contract.
  • To manage your subscription and invoicing through Paddle — performance of contract and legal obligation.
  • To secure the platform (authentication, fraud and abuse prevention) — legitimate interest.

4. AI processing

The content you submit (prompts, documents, URLs) is sent to third-party language-model providers (such as Groq or OpenRouter) solely to generate your presentation. It is not used by us to train models. Do not submit sensitive personal data you are not authorised to share.

5. Where your data lives

Your account and content data are stored on Supabase (PostgreSQL) with row-level security so only your account can access your decks. The application is hosted on Vercel.

6. Retention

We keep your data for as long as your account exists. Delete your account from Settings → Danger zone and all your presentations, groups, invitations and billing records are permanently erased.

7. Your rights

Under the GDPR you have the right to access, rectify, export, restrict, object to processing of and erase your personal data. You can exercise most rights directly in the app (Settings) or by writing to privacy@inslides.digital. You also have the right to lodge a complaint with your local supervisory authority.

8. Processors

  • Supabase — database & authentication
  • Vercel — hosting
  • Paddle — payments (merchant of record)
  • Groq / OpenRouter — AI generation

9. Changes

We may update this policy from time to time. Material changes will be announced in the app before they take effect.