Privacy Policy

Last updated April 2026

This policy explains what data SlydeMe collects, how it's used, and the controls you have. We try to keep it short and direct.

What we collect

• Account data: email and password hash. That's it on signup.
• Lecture content you submit: the URL you paste, or the file you upload. Stored in encrypted S3 buckets in AWS us-west-2.
• Generated artifacts: the study guide, AnKing tag list, gap-fill deck, and slides PDF we produce from your lecture. Tied to your account.
• Usage telemetry: which features you use, how often, and basic timing. Used to improve the product, not to profile you.
• Billing data: handled by Stripe. We see your subscription tier and status; we do not see card numbers.

What we do not collect

• We do not sell your data.
• We do not use your lecture content or generated artifacts to train AI models.
• We do not show ads or share data with ad networks.
• We do not look at your AnKi card stats unless you opt in via AnkiConnect, which runs locally on your machine and never sends to us.

How long we keep things

• Source videos: deleted within 24 hours of processing.
• Output files (study guide, deck, etc.): kept until you delete them, or 90 days after you cancel your account.
• Account record: kept until you delete the account.
• Logs / telemetry: 30 days, then aggregated.

Content fingerprints

We retain a one-way cryptographic fingerprint (a SHA-256 hash) of each lecture transcript so that when other students upload the same lecture recording, we can deliver matching study materials instantly instead of re-processing the same content. The hash is mathematically irreversible: it cannot be turned back into the lecture text. The transcript itself is still deleted within 24 hours per our copyright policy. We never share, sell, or publish these fingerprints; they exist solely to enable deduplication of identical-content processing.

Subprocessors

The third parties SlydeMe passes data to in order to deliver the service:

• AWS: hosting and storage
• Stripe: billing
• xAI: AI processing
• Google Cloud: AI processing
• OpenAI: AI processing
• Pinecone: search infrastructure
• Resend: transactional email delivery (account verification, completion notifications, password reset)

None of these subprocessors retain your content beyond what's required to deliver their service.

Your controls

• Delete any individual lecture and its artifacts from the dashboard.
• Delete your entire account from settings (wipes all data within 24 hours).
• Email slydeme@proformaconcepts.com with any data request and we'll respond within 30 days.

Children

SlydeMe is built for medical students. We don't knowingly accept accounts from anyone under 13.

Changes to this policy

We'll post material changes here and email account holders. The "Last updated" date at the top reflects the latest revision.