Privacy Policy

Last updated November 2026

This policy explains what data SlydeMe collects, how it's used, and the controls you have. We try to keep it short and direct.

What we collect

• Account data: email and password hash. That's it on signup.
• Lecture content you submit: the URL you paste, or the file you upload. Stored in encrypted S3 buckets in AWS us-west-2.
• Generated artifacts: the study guide, AnKing tag list, gap-fill deck, and slides PDF we produce from your lecture. Tied to your account.
• Usage analytics: which pages and features you use, how often, basic timing, browser errors, and how you found SlydeMe (the referring site or campaign link you arrived from). We use PostHog for product analytics, including session replays in which every form field is masked. Used to improve the product, not to profile you or for advertising. Visitors in Europe are asked before any analytics loads.
• Feedback and help chat: messages you send through the in-app help chat or Feedback button, so we can answer you.
• Billing data: handled by Stripe. We see your subscription tier and status; we do not see card numbers.

What we do not collect

• We do not sell your data.
• We do not use your lecture content or generated artifacts to train AI models.
• We do not show ads or share data with ad networks.
• We do not look at your AnKi card stats unless you opt in via AnkiConnect, which runs locally on your machine and never sends to us.

How long we keep things

• Source videos: deleted within 24 hours of processing.
• Output files (study guide, deck, etc.): kept until you delete them, or 90 days after you cancel your account.
• Account record: kept until you delete the account.
• Logs / telemetry: 30 days, then aggregated.

Content fingerprints

We retain a one-way cryptographic fingerprint (a SHA-256 hash) of each lecture transcript so that when other students upload the same lecture recording, we can deliver matching study materials instantly instead of re-processing the same content. The hash is mathematically irreversible: it cannot be turned back into the lecture text. The transcript itself is still deleted within 24 hours per our copyright policy. We never share, sell, or publish these fingerprints; they exist solely to enable deduplication of identical-content processing.

Subprocessors

The third parties SlydeMe passes data to in order to deliver the service:

• AWS: hosting and storage
• Stripe: billing
• OpenAI: AI processing (study guides, flashcards, translation)
• Google Cloud: AI processing (slide and figure analysis)
• xAI: speech-to-text transcription
• ElevenLabs: backup speech-to-text transcription
• RapidAPI: retrieving public video links you paste
• Anthropic: the in-app help chat assistant
• PostHog: product analytics and error reporting
• Resend: transactional email delivery (account verification, completion notifications, password reset)

None of these subprocessors retain your content beyond what's required to deliver their service.

Your controls

• Delete any individual lecture and its artifacts from the dashboard.
• Ask us to delete your entire account through the in-app help chat or by email (we wipe all data within 24 hours of confirming).
• Turn off analytics at any time by emailing us, or decline the analytics prompt if you are shown one.
• Email slydeme@proformaconcepts.com with any data request and we'll respond within 30 days.

Children

SlydeMe is built for medical students. We don't knowingly accept accounts from anyone under 13.

Changes to this policy

We'll post material changes here and email account holders. The "Last updated" date at the top reflects the latest revision.