Privacy Policy
Last updated: March 28, 2026
1. Data Controller
Smart Data Brokers GmbH ("SlideForge", "we"), registered in Zurich, Switzerland, is the data controller for personal data processed through the SlideForge service. We comply with the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR) where applicable.
Contact: contact@slideforge.dev
2. Data We Collect
Account data
Email address and name (from Google OAuth sign-in). Used for account identification, billing, and service communication.
Usage data
API requests, slide generation briefs, template selections, job metadata (status, cost, latency). Used for service delivery, billing, and quality improvement.
Payment data
Processed by Stripe. We do not store credit card numbers. We store Stripe customer IDs and transaction records for billing purposes.
Generated content
PPTX files and PNG previews you generate are stored in Azure Blob Storage, scoped to your user account. Files are retained for 30 days after generation unless you delete them sooner.
3. AI Sub-Processors
Your slide generation briefs are processed by third-party AI models to generate slide content and code. The following providers may process your input text:
| Provider | Purpose | Location |
|---|---|---|
| Google (Gemini) | Code generation, enrichment, image generation | USA |
| OpenAI | Code generation, param extraction | USA |
| Anthropic (Claude) | Code generation (pro mode) | USA |
| Mistral AI | Visual quality review | France (EU) |
These providers process your brief text only for the purpose of generating your slide. We do not use your data for model training. All providers operate under Data Processing Agreements that comply with GDPR requirements for international data transfers.
4. Infrastructure Sub-Processors
| Provider | Purpose | Location |
|---|---|---|
| Microsoft Azure | Hosting, database, file storage | West Europe (Netherlands) |
| Cloudflare | DNS, email routing | Global |
| Stripe | Payment processing | USA / Ireland |
| Auth0 (Okta) | Authentication | USA |
5. Your Rights
Under FADP and GDPR, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data and account
- Portability — receive your data in a structured format
- Objection — object to processing for legitimate interests
- Restriction — request restricted processing
To exercise these rights, email contact@slideforge.dev. We will respond within 30 days.
6. Data Retention
- Generated files (PPTX, PNG): 30 days, then auto-deleted
- Job metadata (briefs, status): retained while account is active
- Account data: retained until you request deletion
- Payment records: retained for 7 years (Swiss legal requirement)
- Server logs: 90 days
7. Cookies
We use essential cookies only for authentication session management. We do not use analytics, tracking, or advertising cookies.
8. Data Breach Notification
In the event of a data breach affecting your personal data, we will notify the Swiss Federal Data Protection and Information Commissioner (FDPIC) within 72 hours and inform you without undue delay if the breach poses a high risk to your rights.
9. Changes
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service. Your continued use after changes constitutes acceptance.
10. Contact & Supervisory Authority
Smart Data Brokers GmbH
Zurich, Switzerland
Email: contact@slideforge.dev
Supervisory authority: Federal Data Protection and Information Commissioner (FDPIC)
www.edoeb.admin.ch