Privacy Policy

1. Information We Collect

We collect the minimum personal information necessary to provide our services:

• Email address
• User ID (provided by Google when you sign in with Google)
• Optional onboarding details you choose to share (business name, niche, goal)
• Content you create through the Service (slideshow titles, captions, images, prompts)
• TikTok OAuth credentials (open_id, access token, refresh token) when you connect your TikTok account

2. How We Use Your Information

Your information is used solely for the purpose of providing our service:

• To tie the slideshows you create to your account
• To generate slideshow content you request (your prompt and niche are sent to OpenAI to write captions)
• To publish slideshows to TikTok on your behalf — only when you explicitly request it
• To personalize the app (for example, pre-selecting your niche in Trends)

3. Google Authentication

SlideLabsAI offers sign-in with Google. When you sign in with Google, we receive only your email address and Google user ID for account creation and authentication; we do not access any other Google account data. Your use of Google sign-in is subject to Google's Privacy Policy.

4. TikTok Integration

When you grant us permission to access your TikTok account, we only use this access to publish photo slideshows on your behalf. We do not:

• Like, comment, follow, or view content on your behalf
• Edit or delete your existing posts
• Publish anything without your explicit action
• Access your messages, followers, or other account data beyond what is required to post

We request only the permissions we need to post on your behalf: the TikTok “video.publish” scope (to publish a photo slideshow directly) and the “video.upload” scope (to send it to your TikTok drafts) — nothing more. Each time you open the Post screen we read your TikTok creator information (nickname, avatar, and the privacy options your account allows) solely to display that screen accurately; we do not store it.

When publishing, SlideLabsAI sets only the properties you choose on the Post screen: the caption, privacy level, cover image, whether comments are allowed, whether TikTok may add music, and any commercial-content disclosure (your own brand or branded content). We never post, and never change any of these settings, without your explicit confirmation. We store your TikTok access and refresh tokens securely, server-side only, for as long as your account remains connected. By using the TikTok integration you agree to be bound by TikTok's Terms of Service.

5. Revoking Access and Data Deletion

You can disconnect TikTok at any time from within the app, which revokes the token with TikTok and deletes your stored credentials from our system. You can also revoke SlideLabsAI's access from your TikTok app settings (Settings & privacy → Security → Manage app permissions). If you request deletion of your account, we will promptly delete your email, tokens, and associated content.

6. Third-Party Services

We rely on a small set of processors to operate the Service:

• Supabase — authentication, database, and image storage (with row-level security)
• Vercel — application hosting
• OpenAI — caption and content generation (receives your prompts, never your credentials)
• TikTok — content publishing, only for accounts you connect

We do not sell, share, or disclose your personal information to any other third parties. Trend data shown in the app is compiled from publicly available TikTok content and contains no data about you. Background photos are licensed from Pexels and involve no user data.

7. Data Storage and Security

Your data is stored securely with Supabase using row-level security, so your slideshows and images are accessible only to you. TikTok credentials are stored server-side and never exposed to the browser. Your data will not be transferred outside our systems except as described in this policy or if you request deletion.

8. Cookies and Tracking

We use cookies only for session authentication (Supabase auth cookies) and short-lived OAuth state verification (TikTok CSRF protection). We do not use advertising cookies, third-party trackers, or analytics tools that profile you. If we introduce product analytics in the future, this policy will be updated first.

9. Payments

SlideLabsAI does not currently process payments. If paid plans are introduced, payments will be handled by a dedicated payment processor and we will never store your card details; this policy will be updated before any payment feature launches.

10. Your Rights

You have the right to access, correct, or delete your personal data at any time, including the right to request deletion of your email and all slideshows created with the Service. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise any of these rights, contact us using the information below.

11. Data Retention

We retain your data for as long as your account is active. Unsaved draft slideshows are cleaned up automatically. When you delete your account or request deletion, associated data is removed from our systems.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the date above.

13. Contact Us

If you have any questions about this Privacy Policy or want to exercise your data rights, contact us at slideshowai@gmail.com.