Privacy Policy
Effective 30 September 2026. This policy covers the Slide-Easy Mac app, this website and the help and contact forms.
The short version
- Slide-Easy runs its AI models on your Mac. Your products, research, screenshots, drafts, images, videos, voice and Instagram tokens stay there. We never receive them.
- The app has no analytics, crash reporting, ads or tracking.
- This website sets no cookies and loads nothing from Google or other trackers.
- We only get what we need to sell you a licence, check it, and answer you.
- We don't sell or share personal data.
Who we are
Slide-Easy is made and sold by Sumant Tirkey, a solo founder in India ("we"). We decide how your data is used (the "controller").
Address: BTM Layout 1st Stage, Madiwala, Bengaluru, Karnataka 560068, India. Email: hello@slideeasy.app. You can also use the contact form. More in the Imprint.
What stays on your Mac
Everything you make with Slide-Easy is processed on your Mac, under your control: the products you add, their research, screenshots you give it, drafts, images, videos, voiceovers, and your Instagram token (kept in the macOS Keychain). We never receive any of it.
Screenshots of other pages are used on your Mac as style references only. They're never uploaded or copied into posts.
What we collect, and why
| What | Why | Legal basis | Who handles it |
|---|---|---|---|
| Purchase: your name, email, country and order number | To give you a licence key, support you, and handle refunds | Contract | Polar (merchant of record), which runs checkout, payment and tax |
| Licence activation: licence key, activation ID, a salted hash of your Mac's hardware ID, and the label "Mac" | To enforce the limit of 2 Macs per key. The app re-checks about once a week and works offline for up to 30 days | Contract | Our licence server (a Cloudflare Worker), which checks the key with Polar |
| Help, feedback, complaints and withdrawals from the app or this website: your message, its category, an email for a reply (optional), your name and order number (withdrawals only), the app and macOS version (from the app), and recent app logs only if you tick the box | To answer you, fix problems, and handle complaints, refunds and withdrawals | Legitimate interest in answering you; legal obligation for complaints and withdrawals; your consent for logs | Our licence server stores it (Cloudflare D1); Resend delivers it to us by email |
| Emails you send us | To answer you | Legitimate interest | Our email inbox (Gmail, by Google) |
| Website visits: IP address, browser type, pages requested (standard web request logs) | To deliver and protect the site | Legitimate interest | Cloudflare (hosting) |
Like any web request, the licence check and the forms pass through Cloudflare, which sees your IP address to carry them.
Do you have to give it? To buy, Polar needs your email and payment details. To unlock the app, it needs to activate your key. Everything else is optional: you can use the app without ever writing to us.
Automated decisions: none. Nothing about you is decided by a machine.
Your Mac's hardware ID: the app reads it only to make the salted hash for the licence check you asked for. That's strictly necessary for the service, so it needs no separate consent. We never use it for anything else.
What the app connects to for you
These connections go straight from your Mac to the service. They don't pass through us and we can't see them. Each service's own terms and privacy policy apply.
- Instagram (Meta). Posting uses the Instagram API through your own Meta developer app and your own token, kept in the macOS Keychain. While a post goes out, a Cloudflare quick tunnel makes that post's images public for about a minute so Instagram can fetch them. Saving a post and posting it yourself doesn't use the tunnel.
- Hugging Face and GitHub. The AI models and add-ons download from them at setup. They see your IP address.
- Apple. For your own app, Slide-Easy reads public App Store data from Apple's public feeds.
- Anthropic or OpenAI, only if you pick them. If you choose your own Claude Code or Codex login as the writer, prompts go to Anthropic or OpenAI under your own account and their terms.
- Team mode, only if you turn it on. It links your own devices over your own private network. Nothing passes through us.
Polar's checkout runs on polar.sh, under Polar's privacy policy. Any cookies there are Polar's.
How long we keep it
| Data | How long |
|---|---|
| Licence activation records | While your licence is valid, then 1 year, then deleted |
| Help, feedback, complaint and withdrawal messages, and emails you send us | 2 years after your last contact, then deleted |
| Order and tax records | Held by Polar as long as tax and accounting law requires |
| Website request logs | Short-term, by Cloudflare under its own policy |
| Everything on your Mac | Until you delete it. See how to delete it |
If you get a refund, your key is deactivated and its activation records follow the same 1-year rule.
Who handles data for us, and where
| Company | What for | Where | Safeguard |
|---|---|---|---|
| Cloudflare, Inc. | Website hosting, licence server, message database | United States and its global network | Processor under Cloudflare's data processing terms, with the EU Standard Contractual Clauses, the UK Addendum and the EU-US Data Privacy Framework |
| Resend | Delivering help and feedback messages to us by email | United States | Processor under its data processing terms, with the EU Standard Contractual Clauses |
| Polar Software, Inc. | Checkout, payment, tax, invoices, refunds, licence keys | United States | Merchant of record: it sells to you and handles payment and tax data as its own controller |
| Google (Gmail) | Our email inbox | United States | Google's data processing terms, with the EU Standard Contractual Clauses |
We work from India, so we also read your messages and order details there. We don't give personal data to anyone else, except where the law requires it.
What we don't do
- We don't sell or "share" personal data (as California law defines it), and we don't use it for targeted advertising.
- We don't collect telemetry: no usage analytics and no crash reports. If we ever add them, they'll stay off until you turn them on, and this policy will change first.
- We don't train AI models on your content.
- No other company tracks you across sites through Slide-Easy or this website.
Security
Your Mac's hardware ID is salted and hashed before it leaves your Mac, your Instagram token sits in the macOS Keychain, and Polar handles payments, so we never see card numbers. Our licence server stores only what's listed above, and only the founder can reach it.
No system is perfectly secure. If a breach puts your personal data at risk, we'll tell you without delay, and tell the authorities within 72 hours where the law requires.
Your rights
Wherever you live, you can ask us to:
- show you the personal data we hold about you and who we've given it to (access),
- correct it (rectification),
- delete it (erasure),
- limit how we use it (restriction), or stop using it (objection),
- give it to you in a file you can take elsewhere (portability),
- withdraw consent you gave, for example for logs you attached. This doesn't affect what we did before.
How: email hello@slideeasy.app or use the contact form. Write from the email you bought with if you can, so we can confirm it's you. It's free. We answer within 30 days. If a request is complex, we may need up to 2 more months, and we'll tell you so within the first 30 days.
Someone else can make a request for you if you authorise them.
Complaints
Grievance Officer: Sumant Tirkey, founder, hello@slideeasy.app. We acknowledge complaints within 48 hours and resolve them within 1 month.
You can also complain to a regulator at any time:
- EU/EEA: the data protection authority where you live or work (list of authorities).
- UK: the Information Commissioner's Office (ico.org.uk).
- India: the Data Protection Board of India.
Where you live
EU, EEA and UK (GDPR, UK GDPR). The legal bases, rights and complaint routes above apply.
India (IT Act SPDI Rules 2011, DPDP Act 2023). In short: we collect the purchase, activation and message data listed above and use it only for the purposes listed. You can withdraw consent, access, correct and erase your data, have a grievance addressed, and nominate someone to act for you if you die or can't act. Email us for any of these; we answer within 30 days. You can complain to the Data Protection Board of India.
United States, including California (CalOPPA). The kinds of data and the companies that receive them are listed above. You can review and correct your data by emailing us. We don't track you across sites, so we don't respond differently to Do Not Track signals. No other party tracks you across sites through us.
Brazil (LGPD). Our contact channel for data subjects is hello@slideeasy.app. You have the rights in LGPD Article 18, including confirmation, access, correction, anonymisation or deletion, portability and information about sharing.
Canada (PIPEDA). The founder is accountable for your personal information. It's processed in India and the United States (Cloudflare, Resend, Polar). You can access it and challenge our compliance by emailing us.
Age
Slide-Easy is for people 18 and over and isn't directed at children. If we learn a buyer is under 18, we'll refund them and delete their records.
For your Meta app
To post to Instagram from Slide-Easy, you create your own Meta developer app. You may use this section (/privacy#meta) as that app's privacy policy URL, and /data-deletion as its data deletion instructions URL. Or use your own.
- Who runs the app: the person who created it in the Meta App Dashboard. Slide-Easy is software that runs on that person's Mac.
- What it uses: the Instagram account's ID, username, access token and the results of its own posts, only to publish posts the account owner approves and to show how those posts did.
- Where it's kept: only on the owner's Mac. The token is in the macOS Keychain. None of it goes to the maker of Slide-Easy or anyone else, apart from Instagram itself and the brief Cloudflare tunnel that lets Instagram fetch a post's images.
- What it never does: sell the data, use it for advertising or profiling, or share it.
- How long: until the owner disconnects Instagram in the app or deletes the app's data.
- Deleting it: follow the data deletion instructions.
Changes
When this policy changes, we update the date at the top and post a note on this page before the change takes effect. If a change affects data you've already given us, we'll also email buyers. Earlier versions are available on request.