Privacy Policy

Last updated: May 6, 2026

This Privacy Policy explains what information Slato App (“Slato,” “we,” “us,” or “our”) collects when you use Slato (the “Service”), how we use it, who we share it with, and the choices you have. By accessing or using the Service, you agree to this Policy.

1. Overview

Slato is an AI-powered presentation generator. You describe a topic, and the Service uses large language models and supporting tools to plan, draft, and render a complete slide deck that you can edit, present, and export. To deliver this Service we collect a limited amount of information about you, your account, your billing, and the content you create or upload.

This Policy applies to all users of the Service, whether on a free tier, a paid subscription, or a credit-based plan. It does not apply to third-party websites or services that we link to but do not operate.

2. Information We Collect

Account information

When you sign in via a third-party identity provider (such as Google, GitHub, or another OAuth provider supported by our authentication partner Supabase), we receive your name, email address, profile image (if provided), and a unique identifier for your account. We do not receive or store your identity-provider password.

Billing information

Payments are processed by Stripe. When you purchase a subscription or a credit pack, Stripe collects your payment method, billing address, and other details required to charge you. We do not store your full payment-card number, CVV, or bank credentials on our servers. We receive only a tokenised reference to your payment method, the amount and currency of each charge, the status of the charge, and limited identifying information (such as the last four digits of the card and the card brand) so we can show you your billing history.

Content you provide

We collect and store the prompts, topics, instructions, audience descriptions, source documents, files, images, edits, and other inputs you provide to the Service (collectively, “User Content”), as well as the slide decks, outlines, themes, and other outputs that the Service generates from your inputs (“Output”). User Content and Output are stored so you can access, edit, present, and export your work later.

Usage and device information

We automatically collect technical information about how you interact with the Service, including IP address, approximate location derived from IP, browser type and version, operating system, device identifiers, referring URLs, the pages you visit, the actions you take (such as which features you use, how often you generate a deck, and which exports you trigger), error logs, and timestamps.

Cookies and similar technologies

We and our service providers use cookies, local storage, IndexedDB, and similar technologies to keep you signed in, remember your preferences (including your theme), persist in-progress decks across reloads, deliver the Service, prevent abuse, and measure aggregate usage. You can configure your browser to refuse cookies, but parts of the Service may stop working if you do.

Communications

If you contact us by email, we keep a record of the message, your email address, and any information you choose to share so we can respond and follow up.

3. How We Use Your Information

We use the information described above to:

  • Provide, operate, secure, maintain, and improve the Service;
  • Authenticate you, manage your account, and remember your preferences;
  • Process payments, manage subscriptions and credit balances, prevent fraudulent transactions, and issue receipts;
  • Generate slide decks, outlines, edits, themes, and other Output from your prompts and uploaded sources, including by sending the necessary inputs to third-party AI providers and web-search providers (see Section 5);
  • Diagnose, debug, and resolve technical problems, including by reproducing errors from logs;
  • Detect, investigate, and prevent abuse, security incidents, violations of our Terms of Service, and unlawful activity;
  • Communicate with you about the Service, including service announcements, billing notices, security alerts, and responses to your requests;
  • Aggregate or de-identify information for analytics, product research, and capacity planning;
  • Comply with legal obligations and enforce our rights.

4. How AI Generation Works

Important. When you ask Slato to generate, edit, summarise, classify, or otherwise transform content, we send your prompt and the relevant context (which may include parts of your User Content, source documents you uploaded, your audience description, and metadata about your deck) to third-party large-language-model providers — currently Anthropic — over their APIs. The provider processes the input on their infrastructure and returns the generated text, structured data, or transformations to us. We then store the Output as part of your deck so you can edit and re-use it.

Some features (for example, fact-finding for the planning stage of a deck) may also issue queries to third-party search providers and ingest the results into the prompt context. We make commercially reasonable efforts to use providers that contractually agree not to train their models on your inputs, but we cannot guarantee the data-handling practices of every third party at every point in time.

AI-generated Output is produced by statistical models and may be inaccurate, incomplete, biased, out of date, or fabricated. You are responsible for reviewing all Output before relying on it, presenting it, or sharing it with others. The Service is not a substitute for professional advice (including medical, legal, financial, accounting, or scientific advice).

5. How We Share Information

We do not sell your personal information. We do not rent it. We share it only in the limited circumstances described below.

Service providers

We share information with vendors that help us operate the Service, under contracts that limit how they may use that information. Today this includes:

  • Supabase — authentication, database, and storage infrastructure;
  • Stripe — payment processing, subscription management, and billing;
  • Anthropic — large-language-model APIs used for slide generation, classification, planning, editing, and auditing;
  • Hosting, content-delivery, error-reporting, analytics, email-delivery, and web-search providers used to run, monitor, and improve the Service.

We may add, remove, or substitute service providers from time to time. Each provider has its own privacy policy that governs how it handles information we share with it.

Legal and safety

We may disclose information when we have a good-faith belief that disclosure is necessary to (a) comply with applicable law, regulation, legal process, or a binding governmental request; (b) enforce our Terms of Service or investigate suspected violations; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect the rights, property, or safety of Slato, our users, or the public.

Business transfers

If Slato App is involved in a merger, acquisition, financing, reorganisation, bankruptcy, or sale of all or part of its assets, your information may be transferred or disclosed as part of that transaction, subject to the surviving entity continuing to honour the commitments in this Policy or notifying you of any material changes.

With your direction

We share information at your direction or with your consent — for example, when you choose to export a deck to PDF, share a link, or connect an integration.

6. Data Retention

We retain User Content, Output, and account information for as long as your account is active. If you delete a deck, the deck and its associated source files are removed from our active systems within a reasonable period; copies may persist briefly in backups, error logs, or caches before being overwritten in the ordinary course of operations.

If you delete your account, we delete or de-identify your User Content and Output within a reasonable period, except where we must retain certain information to comply with legal obligations (for example, tax and accounting records related to your past purchases), resolve disputes, prevent fraud or abuse, or enforce our agreements.

7. Your Choices and Rights

Depending on where you live, you may have rights under applicable privacy laws (including the EU and UK General Data Protection Regulation, the California Consumer Privacy Act / California Privacy Rights Act, and similar laws in other jurisdictions). These rights may include:

  • Accessing, correcting, or updating the personal information we hold about you;
  • Requesting deletion of your personal information;
  • Requesting a portable copy of your personal information;
  • Objecting to or restricting certain processing;
  • Withdrawing consent where processing is based on consent;
  • Lodging a complaint with a supervisory authority.

You can exercise most of these rights directly inside the Service (for example, by editing your account, deleting decks, or cancelling your subscription), or by contacting us at the address set out in Section 13. We may need to verify your identity before acting on your request and may charge a reasonable fee or refuse manifestly unfounded or excessive requests, as permitted by law.

We do not “sell” or “share” personal information for cross-context behavioural advertising as those terms are defined under California law.

8. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect the information we collect, including encryption in transit, access controls, and reliance on reputable infrastructure providers. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and identity-provider account secure and for promptly notifying us of any suspected unauthorised use of your account.

9. International Data Transfers

The Service is operated from, and information is processed in, the United States and other countries where we or our service providers maintain facilities. If you access the Service from outside those jurisdictions, you understand and consent to the transfer of your information to and the processing of it in those jurisdictions, which may have different data-protection laws than the country in which you reside.

10. Children

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us using the details in Section 13 and we will take steps to delete it. If you are between 13 and the age of majority in your jurisdiction, you may use the Service only with the involvement and consent of a parent or legal guardian.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If the changes are material, we will provide additional notice (for example, by email or via an in-app notice). Your continued use of the Service after the effective date of an updated Policy constitutes your acceptance of the changes.

13. Contact

If you have questions, concerns, or requests about this Policy or our handling of your information, please contact us at:

Slato App
Email: jpsingaraju@gmail.com