Privacy Policy

This Privacy Notice explains how Riley Rogers ("we", "us" or "our"), trading as SMRT Slides, collects, uses and protects your personal data when you use the SMRT Slides website and service (the "Service").

1. Who we are

Riley Rogers is the data controller for the personal data described in this notice. SMRT Slides is a cloud-based presentation management platform that helps teams store, search, assemble and export slides.

2. What personal data we collect

We collect the following categories of personal data:

• Account data: your name, email address, password hash and organization name.
• Profile data: your role (admin, content manager or member), display name and team membership.
• Content data: PowerPoint decks, Google Slides presentations uploaded as .pptx files, slides, folders and any text or images you upload to build your library.
• Usage data: how you interact with the Service (searches, decks built, exports, feature usage) and technical logs.
• Device and connection data: IP address, browser type, operating system, device identifiers and approximate location derived from your IP.
• Support data: messages you send to our support team, including chat transcripts and email threads.
• Marketing data: your preferences and, where you opt in, information used to send product updates and tips.

3. How we use your data

• To provide the Service: create and manage your account, process uploaded content, enable search and deck building, and deliver exports.
• Security and fraud prevention: verify identity, detect abuse, and protect the integrity of the Service.
• Customer support: respond to your questions and resolve issues.
• Product improvement: understand how the Service is used so we can improve features and performance.
• AI features: when you use AI assistance, we process the text of your brief and slide metadata solely to produce the suggestions or summaries you requested. Your content is never used to train public or proprietary AI models.
• Marketing: send you updates, tips and offers where you have opted in (you can unsubscribe at any time).
• Legal compliance: comply with applicable laws, respond to lawful requests, and enforce our agreements.

4. Legal basis for processing

We process personal data on the following legal bases:

• Contract performance: providing the Service under our Terms of Service.
• Legitimate interests: security, fraud prevention, product improvement and marketing to existing customers.
• Consent: where required, for marketing communications and non-essential cookies.
• Legal obligation: where we are required to process data by law.

5. Who we share data with

We share personal data only with:

• Service providers: hosting, authentication, analytics, email delivery and support tooling providers that process data on our behalf under strict confidentiality and security obligations.
• AI providers: AI features run through enterprise API endpoints that process your content only to fulfill your request. Content processed by AI features is never retained for that purpose or used to train public or proprietary AI models.
• Paddle: our Merchant of Record, which processes payments, subscription management, tax compliance and invoicing on our behalf.
• Professional advisers: legal, accounting and insurance advisers when necessary.
• Authorities: law enforcement, regulators or courts when required by applicable law.

6. International transfers

Some of our service providers operate outside the country where you live, including in the United States. When we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or reliance on adequacy decisions, and we ensure that data remains protected in line with this notice.

7. Data retention

We keep your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will securely delete or anonymize your personal data within 90 days, unless a longer retention period is required by law or to resolve disputes. Uploaded content is removed when you delete it or when your account is closed.

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure ("right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with a supervisory authority.

We aim to respond to requests within one month. To exercise your rights, contact us at hello@smrtslides.com.

9. Security

We use industry-standard technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews. No system is completely secure, so we encourage you to use a strong, unique password and enable any security features we offer.

10. Cookies and similar technologies

We use essential cookies to keep you signed in and maintain the security of the Service. With your consent, we also use analytics cookies to understand how visitors use our site. You can manage your cookie preferences through your browser settings. For more details, see our cookie notice below.

Cookie notice

• Essential cookies: required for the Service to function, such as session and authentication cookies.
• Analytics cookies: help us understand site traffic and improve the Service. These are only set with your consent.

You can withdraw consent for analytics cookies at any time by adjusting your browser settings or the cookie banner on our site.

11. Children's privacy

The Service is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, please contact us and we will delete it.

12. Changes to this notice

We may update this Privacy Notice from time to time. We will post the revised version on this page with an updated "Last updated" date. Continued use of the Service after changes means you accept the revised notice.

13. Contact us

If you have any questions about this Privacy Notice or how we handle your data, please email hello@smrtslides.com.