Privacy Policy

1. Introduction

SlideNarrator ("we," "our," or "us") provides AI-powered presentation narration, script generation, and related video tools. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use www.slidenarrator.com and our related services (the "Service").

Related pages: Security · Subprocessors · Terms of Use.

This policy is written for transparency with customers and IT reviewers. It is not a substitute for legal advice. For a signed Data Processing Agreement (DPA), contact info@slidenarrator.com.

2. Information we collect

Account and contact information

• Name and email address when you create an account
• Authentication data (for example password hashes managed by our auth provider, or Google account identifiers if you use Google sign-in)
• Billing and subscription status via our payment provider
• Support messages and preferences you send us

Content you upload or create

• Presentation and related files you upload or save
• Audio samples for optional custom voice cloning
• Generated scripts, audio, video, and project metadata (titles, settings, history)
• Workspace membership and sharing choices

Technical and usage information

• IP address, browser type, device, and approximate location
• Product usage events needed to operate and improve the Service
• Cookies and similar technologies on our website (see Cookies below)

3. How we use information

• Provide, operate, secure, and support the Service
• Process presentations and generate scripts, narration, and video
• Create and use custom voice models only when you opt in and only for your account
• Manage accounts, workspaces, subscriptions, and credits
• Send transactional email (verification, resets, billing)
• Send product or marketing messages where permitted (you can opt out of marketing)
• Detect abuse, prevent fraud, and enforce our Terms
• Comply with law and respond to lawful requests

We do not use your uploaded presentations or voice samples to train our own foundation models. Third-party AI providers receive only what is needed to perform the feature you requested, subject to their terms and our agreements with them.

4. Legal bases (GDPR / UK GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or a jurisdiction with similar rules, we process personal data under one or more of these bases:

• Contract: to provide the Service you signed up for
• Legitimate interests: to secure, improve, and market the Service in ways that do not override your rights
• Consent: where required (for example certain cookies/marketing, or optional voice cloning)
• Legal obligation: when we must retain or disclose information to comply with law

5. Sharing and subprocessors

We do not sell your personal information. We share information only:

• With service providers that help us operate the Service
• With workspace members you invite
• When you direct us to (for example integrations you enable)
• For legal, safety, or business-transfer reasons

Our current subprocessors (infrastructure, AI, payments, email, and related vendors) are listed at /subprocessors.

6. Retention and deletion

• Temporary / unsaved processing files: about 7 days
• Saved project files: until you delete the project
• Generated audio (saved projects): about 30 days (can be regenerated)
• Generated videos (saved projects): about 15 days (can be regenerated)
• Custom voice samples and models: until you delete them or deactivate your account
• Account / billing records: as needed for operations, tax, fraud prevention, and legal compliance. After account deletion we may retain a minimal subscription / email record (marked deleted) for about 30 days to prevent credit-system abuse and support reactivation, then purge or further anonymize when no longer needed.

You can delete projects and voice data from account settings. You can deactivate your account from settings. After deactivation we delete personal projects, associated cloud files, personal custom voices, personal workspaces, credits, and your auth account. Projects and custom voices in shared team workspaces are kept and reassigned to the workspace owner so the team is not disrupted. A minimal deleted subscription / email record may be kept about 30 days for abuse prevention.

7. Security

We use industry-standard measures appropriate to our size and risk profile, including TLS in transit, provider encryption at rest, authentication, workspace access controls, database row-level security, and rate limiting on selected endpoints. See /security for details. No method of transmission or storage is 100% secure.

8. Your rights (GDPR / UK GDPR)

Depending on where you live, you may have the right to:

• Access personal data we hold about you
• Correct inaccurate personal data
• Request deletion ("erasure"), subject to legal exceptions
• Restrict or object to certain processing
• Data portability (receive a copy of data you provided)
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local supervisory authority

How to exercise rights: email info@slidenarrator.com with the subject "Privacy request" and enough detail for us to verify your identity and fulfill the request. We aim to respond within 30 days (or sooner where required by law). Self-serve data export is not yet available in the product; portability requests are handled manually by support.

9. California privacy rights (CCPA / CPRA)

If you are a California resident, you may have rights to know, access, correct, and delete personal information, and to opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising.

• We do not sell personal information for money.
• Our website may use advertising or analytics cookies (for example Google Ads tags). If those activities are treated as "sharing" under California law, you can request to opt out by emailing info@slidenarrator.com with the subject "Do Not Sell or Share", and by using browser controls / Global Privacy Control where available.
• We will not discriminate against you for exercising CCPA/CPRA rights.

Categories of information we collect are described in Section 2. We disclose personal information to service providers for business purposes as described in Sections 3 and 5.

10. Cookies and tracking

We use:

• Essential cookies: authentication and security required to run the Service
• Analytics / advertising cookies: to understand site performance and measure marketing (for example Google Ads tags on public pages), only after you accept them in our cookie banner

On your first visit we ask for consent. Choose Essential only or Accept all. Your choice is stored in your browser (sn_cookie_consent). Until you accept marketing cookies, Google tags run in denied Consent Mode (no ad storage). If your browser sends Global Privacy Control (GPC), we treat that as essential-only. You can clear site data in your browser to see the banner again and change your choice.

11. International transfers

We and our subprocessors may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms offered by our providers. Details on vendors are on /subprocessors.

12. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16 (or under 13 where a lower age applies under U.S. COPPA). If you believe a child has provided personal information, contact us and we will delete it.

13. Sensitive content

Do not upload protected health information (PHI), government classified data, or other regulated special-category data unless we have a written agreement expressly covering that use. We do not offer HIPAA BAAs at this time.

14. Changes

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date. Material changes may also be communicated by email or in-product notice.

15. Contact