Security & data handling

Account access

SlidesMate uses Better Auth for email and password sign-in, password recovery, and Google sign-in when available. Passwords are handled by the authentication system and are not stored as readable text. Sign-in and password-reset requests have rate limits.

Production connections use HTTPS. Signed-in application requests check your session, and presentation access checks your ownership or collaborator role. Keep your login credentials private and use the password-reset flow if you lose access.

Private decks and public links

New presentations are private by default. Only the owner can enable or disable public sharing. When you enable a public link in Share, anyone with the link can view the presentation without signing in. Treat that link as public and avoid enabling it for confidential material.

Disabling public sharing stops access through the public viewer. It cannot recall copies, screenshots, or files someone already saved. Business collaboration separately lets owners add existing SlidesMate accounts with editor, viewer, or commenter roles. See sharing help for the controls and account requirements.

AI requests and source documents

OpenAI processes presentation generation and AI editing requests. Depending on the feature, a request can include your prompt, extracted source text, supplied facts or outline, slide content and speaker notes, and chat history. Uploading a source document sends it to SlidesMate for text extraction; source-based generation then sends extracted text to OpenAI.

Our Privacy Policy states that SlidesMate does not use presentation content to train its own models. Third-party processing follows provider terms. OpenAI documents that API data is not used for training by default unless the customer opts in; its API can retain content for abuse monitoring. Read OpenAI’s API data controls for the current terms and exceptions. This page does not promise zero retention or a SlidesMate-specific training opt-out arrangement.

Only submit information you are authorized to share with these services. Remove credentials and unnecessary personal or confidential information from source material before using AI features.

Storage and other service providers

Account records and saved presentations are stored in the application’s PostgreSQL database. Saved presentation data includes slide content and settings. Image references may point to external services.

Vercel provides hosting and background jobs. Postmark handles account email. Pexels and Unsplash supply stock images using image-search queries. Liveblocks supports Business collaboration: opening a Business presentation in the editor can send your account ID, name and profile picture for presence, including when you have not shared the deck. Choosing Google sign-in shares your name, email and profile picture with SlidesMate.

SlidesMate also records first-party funnel events with the page, event name, limited product context and account ID when signed in. The Privacy Policy explains these uses and international processing. We do not specify a guaranteed storage region or backup-deletion schedule here.

Payments

Paid subscriptions use Stripe-hosted Checkout and the Stripe billing portal. SlidesMate stores billing references such as customer and subscription IDs, plan, status and billing-period information. Card details are entered through Stripe’s payment flow. See Stripe’s security documentation for its controls.

For subscription management, see billing and cancellation help. Payment and content responsibilities are described in the Terms of Service.

Retention and deletion

Deleting a presentation removes it from the active application database. Account deletion is available in Settings and requires confirmation with your account email. If you have an open paid subscription, the application requires you to cancel and wait until the billing period ends before deleting the account.

Confirmed account deletion removes your active profile, presentations, sessions and collaboration references. As explained in the Privacy Policy, limited records may remain for security, billing, fraud prevention, legal compliance, or in provider backups and logs until their normal retention periods expire. Deleting active application data does not promise immediate erasure from every provider system.

Ask a security or privacy question

Contact support@slidesmate.com for a data request, retention question or security concern. Include the affected feature and enough detail to identify the issue. Do not send passwords, API keys or other credentials.

For practical product steps, visit the help center. No online service can guarantee absolute security; review the Privacy Policy and Terms of Service alongside your organization’s requirements before uploading sensitive material.