Privacy Policy

1. Who We Are and Who Controls Your Data

Slidix is an AI-powered content-generation service operated by:

Wajid Ali is the data controller responsible for deciding how and why personal data is processed through Slidix.

For privacy questions or to exercise your data-protection rights, contact plexytuner@gmail.com.

2. Scope of This Privacy Policy

This Privacy Policy explains how Slidix collects, uses, discloses, stores and protects personal data when you:

• visit the Slidix website;
• create or use a Slidix account;
• submit content or URLs;
• create or store projects;
• generate slides, images or written content;
• purchase or manage a paid service;
• contact Slidix; or
• connect a third-party service such as TikTok.

This policy applies to personal data processed by Slidix as data controller.

Third-party platforms and services may process personal data under their own terms and privacy policies.

3. Sources of Personal Data

Slidix may obtain personal data:

• directly from you when you register, enter information, upload files, create projects, make a request or contact support;
• from an authentication provider when you choose to sign in through that provider;
• from TikTok when you explicitly connect a TikTok account and authorise the requested permissions;
• automatically from your browser, device and use of the Service; and
• from payment or infrastructure providers where necessary to operate the Service.

4. Personal Data We Collect

Depending on how you use Slidix, we may process the following categories of data.

4.1 Account and Identity Data

When you create or access an account, we may receive or process:

• your name;
• email address;
• profile image;
• internal account identifier;
• authentication-provider identifier;
• sign-in and account-status information; and
• account creation and update timestamps.

Where you sign in using Google, Slidix receives the profile information made available through that sign-in flow and required to create and secure your account.

4.2 User Content and Project Data

We may process information you submit to generate or manage content, including:

• product or website URLs;
• project names;
• product descriptions, features and taglines;
• audience and brand information;
• brand colours;
• instructions and prompts;
• text supplied by you;
• uploaded images, logos or screenshots;
• generated slides, written content and images; and
• related project settings and metadata.

You should not submit personal data that is unnecessary for using the Service. You must have the right to provide any content and personal data you submit.

4.3 Technical and Usage Data

When you access Slidix, we and our hosting providers may automatically receive:

• IP address;
• browser type and version;
• device and operating-system information;
• date and time of requests;
• pages or features accessed;
• request and response metadata;
• diagnostic information;
• error logs;
• security events; and
• identifiers necessary for authentication and session management.

4.4 Communications

When you contact Slidix, we process:

• your email address;
• your name, where provided;
• the contents of your message;
• attachments you provide; and
• information necessary to respond to and manage the request.

4.5 Billing and Transaction Data

Slidix offers paid plans, subscriptions and credit purchases. Slidix and Stripe may process:

• selected plan or product;
• subscription status;
• transaction identifier;
• payment status;
• billing country;
• billing contact information;
• invoice information;
• applicable tax information;
• card brand;
• card expiry metadata; and
• the final digits of a payment card.

Slidix does not receive or store your full payment-card number. Payment-card details are entered into Stripe's systems. Stripe may process payment data as an independent controller or under another role described in its own privacy notice.

4.6 Cookies and Browser Storage

Slidix uses cookies, local storage and session storage for:

• authentication and session continuity;
• security and fraud prevention;
• remembering your cookie-consent choice;
• preserving in-progress onboarding or generation work in your browser; and
• other technically necessary or preference-related purposes described in Section 12.

Optional analytics technologies are used only after you opt in through the cookie banner, where applicable.

5. TikTok Integration

Connecting TikTok is optional.

Slidix uses TikTok Login Kit and the TikTok Content Posting API when you choose to connect TikTok and authorise the permissions requested during the OAuth flow.

5.1 TikTok Data Received

When you connect TikTok, Slidix requests the following OAuth scopes: user.info.basic, user.info.profile, user.info.stats and video.publish.

Depending on the permissions you grant, Slidix may receive and process:

• your TikTok Open ID or another platform-specific identifier;
• your TikTok display name and username;
• your TikTok avatar;
• profile information such as bio description, verification status and profile link, where the user.info.profile scope is granted;
• account statistics such as follower count, following count, likes count and video count, where the user.info.stats scope is granted;
• access and refresh tokens needed to maintain the authorised connection;
• the scopes and permissions you granted;
• token expiry information;
• connection status;
• publishing-status information; and
• technical responses returned by TikTok when you initiate a publishing request.

Slidix only requests profile statistics when the corresponding scope has been granted and uses them to display connected-account information in the dashboard and generation interface.

5.2 How TikTok Data Is Used

Slidix uses TikTok-related data to:

• identify the TikTok account connected to a project;
• maintain the connection authorised by you;
• display relevant account information in the interface;
• retrieve publishing options or creator information required by TikTok's publishing flow;
• send content selected by you to TikTok;
• display publishing progress or results;
• record publishing attempts for troubleshooting and security;
• protect the integration against fraud, misuse and unauthorised access; and
• comply with TikTok's platform and developer requirements.

5.3 Publishing Control

Slidix does not publish content to TikTok automatically merely because an account is connected.

A publishing request is initiated only after you:

• select the content;
• review the relevant content and available publishing settings; and
• explicitly confirm the publishing action.

Slidix does not schedule or publish TikTok content in the background. No scheduling feature is currently offered.

5.4 TikTok Tokens

TikTok access and refresh tokens are stored server-side in Slidix's database and are used only to provide the authorised integration. They are accessed through server-side application logic and are not included in public API responses sent to the browser.

Tokens are not:

• displayed publicly;
• included in client-side source code;
• sent to analytics providers; or
• used for purposes outside the user-authorised TikTok integration.

5.5 Disconnecting TikTok

You may revoke Slidix's TikTok access through TikTok's own account or app settings at any time.

Within Slidix, you can:

• Unlink a TikTok account from a project in the dashboard under Product setup (settings tab) or on the generation screen; this removes the project link but may leave the stored connection available for re-linking; or
• Revoke at TikTok from the TikTok connection panel on the generation screen, which revokes the token with TikTok and deletes the stored connection from Slidix.

You may also contact plexytuner@gmail.com to request disconnection and deletion of stored TikTok connection data.

When TikTok is disconnected or its authorisation is revoked, Slidix stops using the affected authorisation to make new TikTok API requests. Disconnecting TikTok does not automatically delete content already published on TikTok.

5.6 TikTok Data Retention

TikTok tokens and connection metadata are retained while needed to maintain an authorised connection for your account.

They are deleted or rendered unusable when:

• you revoke the connection through Slidix;
• TikTok revokes or expires the authorisation;
• your Slidix account is deleted;
• you submit a valid deletion request; or
• retention is no longer necessary for the integration.

Records of publishing attempts may be retained for a limited period for troubleshooting, security and audit purposes.

5.7 TikTok's Independent Processing

TikTok separately controls the TikTok platform and may process personal data under TikTok's privacy policy. Slidix is an independent service and is not sponsored, endorsed by or affiliated with TikTok.

6. How and Why We Use Personal Data

6.1 Providing the Service

We use account, project, content, technical and integration data to create and manage accounts, authenticate users, process submitted URLs and content, generate requested output, store and display projects, provide downloads, manage credits and plans, provide optional third-party integrations and respond to user-initiated publishing requests.

The legal basis is generally performance of a contract or taking steps requested by you before entering into a contract.

6.2 Security and Abuse Prevention

We process relevant account, technical, usage and log information to protect accounts, detect unauthorised access, prevent fraud and abuse, enforce usage limits, investigate security incidents, maintain service integrity and enforce the Terms of Service.

The legal basis is Slidix's legitimate interest in operating a secure and reliable service and, where relevant, compliance with legal obligations.

6.3 Support and Service Communications

We use account and communication data to respond to questions, investigate problems, provide customer support, send security alerts, send account or billing notifications and communicate material changes to the Service.

The legal basis is performance of the contract, taking steps requested by you, compliance with legal obligations or Slidix's legitimate interests, depending on the communication.

6.4 Payments, Accounting and Tax

We process relevant billing and transaction information to complete purchases, manage subscriptions, prevent payment fraud, issue or retain accounting documentation, comply with tax requirements and handle billing disputes.

The legal basis is performance of a contract and compliance with legal obligations.

6.5 Product Maintenance and Improvement

We may use technical, diagnostic and usage information to identify errors, understand feature performance, maintain the Service, improve reliability, develop existing features and assess general usage patterns.

The legal basis is Slidix's legitimate interest in maintaining and improving the Service. Where information can reasonably be aggregated so that it no longer identifies you, we may use aggregated information for this purpose.

6.6 Consent-Based Processing

Where required by law, Slidix relies on consent for non-essential analytics cookies and any other clearly identified optional activity that requires consent.

You may withdraw consent at any time without affecting the lawfulness of processing performed before withdrawal. Authorising TikTok through TikTok's OAuth flow controls platform access; the GDPR legal basis for Slidix's processing of TikTok-related data depends on the purpose of that processing, as described in this policy.

6.7 Legal Claims and Compliance

Slidix may process relevant data to comply with applicable law, respond to lawful requests, establish, exercise or defend legal claims, investigate Terms violations and protect the rights and safety of Slidix, its users and others.

The legal basis may be compliance with a legal obligation or Slidix's legitimate interests in protecting its legal rights.

7. AI Processing

Generating content may require Slidix to transmit relevant prompts, submitted text, URLs, project information or images to artificial-intelligence providers. Only information reasonably necessary to complete your request is transmitted.

You should not include sensitive personal data, confidential third-party data or unnecessary personal information in prompts, URLs or uploaded files.

Slidix currently uses OpenAI to generate written content and images. Slidix does not use User Content to train its own general-purpose AI models.

How third-party AI providers handle submitted data is governed by their own terms and privacy policies. You should review those policies before submitting content.

AI-generated output may be inaccurate and should be reviewed by you before publication or use.

8. Whether Providing Data Is Required

Certain information is necessary to create an account and provide requested features.

• account and authentication data are required to create and secure an account;
• submitted content is required to generate requested output;
• relevant payment information is required to purchase paid services; and
• TikTok account data and authorisation are required only if you choose to connect and use the TikTok integration.

You are not required to connect TikTok to use unrelated Slidix features. Where required data is not provided, Slidix may be unable to provide the corresponding feature.

9. Service Providers and Other Recipients

Slidix shares personal data only where necessary for the purposes described in this policy. The role of each recipient may differ depending on the service and applicable law.

Google

Google provides sign-in authentication where you choose Google sign-in. Google processes data under its own privacy documentation: policies.google.com/privacy.

Supabase

Supabase provides database, authentication and file-storage infrastructure used to operate accounts, projects, uploaded files and server-side integration data. Privacy information: supabase.com/privacy.

Vercel

Vercel provides hosting, deployment, networking and request-processing infrastructure. Where you opt in to analytics, Vercel Web Analytics may also process limited usage information. Privacy information: vercel.com/legal/privacy-policy.

OpenAI

OpenAI processes prompts and content sent through Slidix to produce AI-generated written content and images. Privacy information: openai.com/policies/privacy-policy.

Stripe

Stripe processes payments, subscriptions and related fraud-prevention information for paid Slidix services. Privacy information: stripe.com/privacy.

MailerSend

MailerSend delivers transactional and account-related emails, such as trial and billing notices. Privacy information: mailersend.com/legal/privacy-policy.

TikTok

TikTok receives information and content when you connect TikTok or explicitly initiate a publishing request. TikTok operates its own platform and may act independently in relation to data processed through TikTok.

Slidix may also disclose information to professional advisers or public authorities where legally required.

10. International Data Transfers

Some service providers may process personal data outside the European Economic Area, including in the United States.

Where the GDPR requires a transfer safeguard, Slidix relies on an applicable transfer mechanism, which may include an adequacy decision, the European Commission's Standard Contractual Clauses, supplementary safeguards where required, or another lawful transfer mechanism.

You may contact plexytuner@gmail.com for information about the safeguards applicable to a relevant transfer.

11. Data Retention

Slidix retains personal data only for as long as reasonably necessary for the purposes described in this policy, including providing the Service, maintaining security, complying with legal obligations and resolving disputes.

Account Data

Account data is normally retained while your account remains active. After a verified account-deletion request, account data is deleted or anonymised within a reasonable period, except where retention is legally required.

Project and Generated Content

Projects, uploaded files and generated content are retained while needed to provide project-storage functionality. They are deleted when you delete them from the projects area, when your account is deleted or when you submit a valid deletion request, subject to limited backups and legal obligations.

TikTok Connection Data

TikTok tokens and connection metadata are retained only while needed to maintain the authorised integration, as described in Section 5.6.

Billing and Tax Records

Billing and transaction records may be retained for the period required by applicable Italian tax, accounting and legal obligations.

Security and Technical Logs

Technical and security logs are retained for a limited period based on their security, troubleshooting and operational purpose, in line with hosting-provider settings and operational needs.

Support Communications

Support messages may be retained for as long as needed to resolve the request, maintain appropriate records and establish or defend legal claims.

Backups

Data removed from active systems may remain temporarily in protected backups until those backups are overwritten or expire according to the applicable backup cycle operated by infrastructure providers.

Anonymised Data

Information that has been irreversibly anonymised so that it no longer identifies an individual may be retained and used without the retention limits applicable to personal data.

12. Cookies and Similar Technologies

Strictly Necessary Technologies

Slidix uses strictly necessary technologies for:

• authentication and session management through Supabase;
• security and load balancing;
• storing your cookie-consent choice in local storage under the key slidix_cookie_consent_v1; and
• providing features you explicitly request.

These technologies are required for the Service to function and, where legally permitted, do not require optional consent, but they are disclosed here.

Session and Local Browser Storage

Slidix also uses session storage and local storage to preserve in-progress onboarding, generation and interface state in your browser. This may include project context, draft content and similar temporary workflow data. These items are stored on your device and are not used for advertising.

Analytics Technologies

Slidix may use Vercel Web Analytics to understand how the website is used. This analytics tool is loaded only after you choose Accept all in the cookie banner. If you choose Essential only, analytics is not loaded.

You can change your choice at any time by clearing site data for Slidix in your browser and revisiting the site, or by using your browser's controls where available. Rejecting analytics is as accessible as accepting it through the cookie banner.

Slidix does not use Google Analytics, Meta Pixel, PostHog or similar advertising trackers.

13. Data Security

Slidix uses technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure and loss. These measures include:

• HTTPS encryption in transit;
• authentication and access controls;
• restricted server-side access to sensitive integration data such as TikTok tokens;
• database access policies;
• logging and monitoring; and
• reputable infrastructure providers.

No online service can guarantee absolute security.

Where legally required under applicable EU and Italian data-protection law, Slidix will assess and notify the competent supervisory authority and affected individuals of relevant personal-data breaches.

14. Your Data-Protection Rights

Subject to applicable law, including the GDPR, you may have the right to:

• obtain confirmation of whether your personal data is processed;
• access your personal data;
• correct inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive eligible data in a structured, commonly used and machine-readable format;
• withdraw consent where processing is based on consent;
• lodge a complaint with a competent supervisory authority; and
• exercise rights concerning qualifying automated decisions.

Withdrawing consent does not affect processing that was lawful before withdrawal.

To exercise a right, contact plexytuner@gmail.com. Slidix may need to verify your identity before completing a request.

Slidix will respond within the period required by applicable law, normally within one month under the GDPR. That period may be extended where legally permitted for complex or numerous requests, and you will be informed where required.

Requests are normally handled without charge. A reasonable fee or refusal may apply only where permitted by applicable law, including for manifestly unfounded or excessive requests.

15. Account and Data Deletion

Slidix does not currently provide a self-service account-deletion control in the application.

To request deletion of your Slidix account and associated personal data, email plexytuner@gmail.com from the email address associated with your Slidix account and ask for account deletion.

You can delete individual projects from the Projects area. Deleting a project removes the project record from your account, subject to the retention rules in Section 11.

Slidix may retain limited information where required for tax or accounting compliance, fraud prevention, security, dispute resolution, legal claims or another applicable legal obligation.

Account deletion does not automatically remove content already published to TikTok or another third-party platform. You must manage published content through the relevant platform.

16. Complaints

You may contact Slidix first at plexytuner@gmail.com so that a privacy concern can be investigated. You are not required to contact Slidix before lodging a complaint with a supervisory authority.

You also have the right to lodge a complaint with the supervisory authority in your country. For Slidix's Italian establishment, the relevant authority is:

Garante per la protezione dei dati personali
Official website: https://www.garanteprivacy.it

17. Children's Data

Slidix is intended for users who are at least 18 years old. Slidix does not knowingly collect personal data from children through accounts intended for adult users.

If you believe that a child has provided personal data to Slidix, contact plexytuner@gmail.com so the matter can be investigated and appropriate action taken.

18. Automated Processing and AI

Slidix uses automated systems to generate content requested by users and to support technical, security and operational functions.

Slidix does not use AI-generated content decisions to make decisions producing legal effects or similarly significant effects about users.

Generated content may contain errors and you are responsible for reviewing it before publication or reliance.

Slidix may use automated checks to help detect abuse, fraud or security threats and to enforce usage limits.

19. California and Other Regional Rights

Depending on where you live, local law may provide additional privacy rights. You may contact plexytuner@gmail.com to submit a privacy request.

Slidix does not sell personal data.

20. Changes to This Privacy Policy

Slidix may update this Privacy Policy to reflect changes to:

• the Service;
• data-processing activities;
• third-party integrations;
• security practices;
• applicable law; or
• business operations.

The updated version and its "Last updated" date will be published on this page.

Where a change materially affects users or their rights, Slidix may provide an additional notice by email or through the Service where appropriate or legally required.

Where new consent is legally required, Slidix will request it separately.

21. Contact

Slidix is operated by and its data controller is:

For privacy questions, complaints or data-protection requests, contact plexytuner@gmail.com.