Privacy Policy

Last updated: October 24, 2026

Slides Summarizer ("we", "us") runs the website slidenotes.cc. This policy explains what data we process when you use it, why, and for how long.

1. Files you upload

To make a summary, we process the file you upload or the Google Slides presentation you link to (our server downloads it from Google).

The file is stored on our server only while it is processed and is deleted automatically within 60 minutes.
The text extracted from it is deleted within 24 hours.
The summary and the file name are kept in your summary history for 7 days, or 90 days with Pro, and then deleted.
We don't sell your files, don't show them to anyone and don't use them to train AI models.

2. AI processing

To write the summary, the text of your file is sent to our AI solutions provider, which processes it with advanced AI models. For a scanned file, images of its pages are sent to it as well, so that their text can be read. All of this happens only when you start the summary yourself: until then, nothing is sent to the provider. We don't send your name, email address or IP address. The provider processes the content to read the scans and produce the summary, under its own terms.

3. Your account

You can upload a file without an account, but its summary needs one: a free account gives you 5 summaries a day and a summary history. A file you upload before signing in is linked to your account when you sign in, and its summary is made when you start it. You sign in:

with your email address: we send you a sign-in link that works for 15 minutes;
or with Google: we receive your name, email address, profile picture and Google account ID.

We store your email address, your language and, if you agreed in the sign-in form, your consent to emails about product updates. That checkbox is ticked by default; you can untick it, and you can withdraw your consent at any time by writing to [email protected].

4. Payments

The Pro subscription is sold by Lemon Squeezy, our merchant of record: it takes the payment, charges taxes and issues receipts. We pass Lemon Squeezy your email address and your account number so that the payment is linked to your account. From Lemon Squeezy we receive the status, plan and dates of your subscription and the order details it reports to us, such as your name and country and the brand and last four digits of your card. We never see or store your full card number. See the Lemon Squeezy privacy policy.

5. Usage limits and server logs

We count summaries per day for your account, and uploaded files per day for your account or your browser session, to apply the daily limits.
Our server logs record technical events: your IP address, a hashed session identifier, your account number if you are signed in, a hash of your email address for sign-in and email events, the country of the request (from Cloudflare) and what happened, for example that a file was uploaded or a summary failed. Logs are kept for up to 12 months.

6. Forms

Contact form: your name, email address, message and language — so that we can reply.
Waitlist: your email address, the plan you are interested in, your IP address and browser type — so that we can tell you when the plan opens.

7. Why we process data

Under the GDPR, we process data to provide the service you ask for (performance of a contract); to keep the service secure, prevent abuse and understand how it is used (our legitimate interests); to send you product updates (your consent); and to meet legal obligations, such as the tax records kept by Lemon Squeezy.

8. Cookies and local storage

We set the following cookies:

PHPSESSID — your session: keeps you signed in and protects the forms. Deleted when you close the browser; on our server the session expires after 24 hours without activity.
_rfp — a random security identifier that protects sign-in with Google. Kept for 12 months.
preferred_lang — the language you chose (also kept in your browser's local storage). Kept for 12 months.
g_state — set by Google's sign-in script to remember whether you closed the One Tap prompt.

We use Google Analytics to understand how visitors use the site (pages viewed, device, approximate location). It sets its own cookies, such as _ga, for up to 2 years. Cloudflare may set technical security cookies. You can delete cookies in your browser settings; without our own cookies, sign-in will not work.

9. Third-party services

Cloudflare — delivers the site, protects it from attacks and tells us the country of a request.
Google — sign-in with Google (for visitors who are not signed in, our pages load Google's sign-in script, which may show the One Tap prompt, so Google learns about the visit), Google Analytics and downloading the Google Slides presentations you link to.
AI solutions provider — processes the text of your file and images of scanned pages with advanced AI models to read the scans and write the summary.
Lemon Squeezy — payments for Pro.
Hosting providers — our servers, database backups and email delivery; they process data only on our behalf.

Each of these services has its own privacy policy.

Some of these providers process data outside your country, for example in the United States.

10. How long we keep data

Uploaded files: up to 60 minutes. Extracted text: up to 24 hours.
Summaries: 7 days, or 90 days with Pro.
Account: until you ask us to delete it.
Server logs: up to 12 months.
Contact form and waitlist entries: until they are no longer needed for the reply or the announcement.
Database backups are overwritten within about a week, so deleted data disappears from them within that time. Before major updates we keep an extra copy for up to 30 days.

11. Your rights

Depending on where you live — for example under the GDPR in the EU and the UK, the CCPA in California, the LGPD in Brazil or the APPI in Japan — you can ask us to access, correct, delete or export your personal data, object to its processing, or withdraw your consent. To delete your account or make any other request, write to [email protected] from the email address of your account; we answer within 30 days. You can also complain to your data protection authority.

We don't sell your personal data and don't share it for advertising.

12. Security

The site works over HTTPS, and Cloudflare protects it from attacks. Sign-in links expire after 15 minutes. We never receive your full card number.

13. Children

The service is not directed at children under 13, and we do not knowingly collect their data. If you are under the age of digital consent in your country, use the service with a parent's permission.

14. Changes to this policy

We may update this policy. The date at the top shows the current version; we announce material changes on the site.

15. Contact

Questions about privacy: [email protected].