Privacy Policy

1. Who We Are

SlideCut (the "Service") is a Google Slides add-on created by Andrew Apell. We are the data controller for the purposes of applicable data protection laws. If you have any questions about this policy, please contact us.

2. Information We Collect

We collect and process only the information necessary to provide the Service:

• Document content: The text content of documents you explicitly select for processing (Google Docs, PDFs, Word files, etc.). This content is transmitted to the Gemini API for slide generation and is not stored on our servers.
• Google Account email address: Used solely to identify you as a user and to manage your license. It is not stored or used for marketing.
• Usage metrics: We do not collect usage analytics. Google provides developers with an aggregate Apps Script dashboard showing total executions, success and failure rates and user counts.

3. How We Use Your Information and Legal Basis

We process your information only for the following purposes:

• To provide the Service (contract performance): Process your selected documents and generate presentation slides.
• To communicate with you (contract performance / legitimate interest): Respond to support requests and send service-related notices.
• To improve and protect the Service (legitimate interest): Diagnose technical issues, prevent abuse and ensure security.

4. Cookies and Analytics

We use Google Analytics (GA4) to understand how visitors use the website and to improve the site. Google Analytics uses cookies and similar technologies to collect aggregated data such as page views, visit duration and browser type. This information is anonymised and does not identify you personally.

• Cookie: A cookie banner is displayed on your first visit. You may accept or decline analytics cookies. Your preference is stored in your browser's local storage.
• Data processor: Google LLC. Data is processed in accordance with the Google Privacy Policy.
• Legal basis (GDPR): Consent. Analytics cookies are only loaded after you accept.

Note: The SlideCut add-on itself does not use cookies or analytics. Cookie usage applies only to the SlideCut website.

5. Google API Scopes and Permissions

SlideCut requires your authorisation for the following Google API scopes. Each is explained below:

• See, edit, create and delete your current Google Slides presentation: Allows SlideCut to add generated slides into the presentation you have open. Access is limited to the active presentation only.
• See, edit, create and delete all your Google Docs documents: Required to read the content of a Google Doc you specify by URL or ID. Not used for uploaded files.
• See your primary Google Account email address: Used to identify you as a user and manage license activation. Not stored or used for marketing.
• Connect to an external service: Required to send document content to the Gemini API for processing and to communicate with our license database.
• Display and run third-party web content in prompts and sidebars: Allows the add-on to render its user interface within Google Slides.

6. Third-Party Processing (Gemini API)

SlideCut uses the Gemini API provided by Google to generate slide content. Here is how your data is handled:

• Data transmission: The content of your selected document is sent to Google's Gemini API for processing.
• Your data is not used for training: We use a paid, enterprise-grade Gemini API. In accordance with Google's commitments for paid API services, your prompts and responses are never used to train AI models.
• Data retention by Google: Google retains API inputs and outputs for up to 55 days for abuse monitoring purposes only, in accordance with the Gemini API Terms.
• Google's policies: Google's use of this data is governed by the Gemini API Additional Terms of Service and the Google Privacy Policy.

7. Google Limited Use Disclosure

SlideCut's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Data Retention

SlideCut does not store your document content or generated presentations on its own servers. Presentations are created directly in your Google Slides account and remain under your control. License information (your email address and activation status) is retained for the duration of your use of the Service and deleted within 30 days of account inactivity or upon request.

9. Data Subject Rights (GDPR / UK GDPR)

If you are located in the European Economic Area, Switzerland or the United Kingdom, you have the following rights under applicable data protection law:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to restrict processing: Ask us to temporarily limit processing of your data.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.

To exercise any of these rights, contact us. We will respond within 30 days. We may ask for proof of identity before processing your request. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office).

10. International Data Transfers

Your data may be processed in countries where Google or its sub-processors maintain facilities. For transfers from the European Economic Area or the United Kingdom, Google provides appropriate safeguards through Standard Contractual Clauses approved by the European Commission and the UK ICO.

11. Security

SlideCut has passed Google's security review for Workspace Add-ons. All data in transit is encrypted using TLS. The Gemini API processes data in accordance with Google's enterprise-grade security practices, including encryption at rest and access controls. However, no method of electronic storage or transmission is 100% secure. We recommend against submitting highly sensitive information (such as health or financial records) as a general best practice.

12. Children's Privacy

The Service is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified by posting the updated policy on this page and updating the "Last updated" date.

14. Contact Us

If you have any questions, wish to exercise your data subject rights or would like to request a copy of the Standard Contractual Clauses we rely on for international transfers, please contact us.