Privacy Policy
Last updated: February 6, 2026
1. Information We Collect
Account Information
When you create an account, we collect your email address and password (stored securely using industry-standard hashing). You may also provide profile information such as your name, bio, and creator context to personalize your experience.
Content You Create
We store the content you create within Slate, including projects, scripts, ideas, thumbnails, visual assets, chat messages, AI conversations, clip metadata, and annotations.
Media & Files
We process uploaded images (such as thumbnails and creator face images), file metadata from connected cloud storage services (Dropbox, Google Drive), and video transcriptions.
Third-Party Integration Data
When you connect external services, we may access: YouTube channel data, video metadata, and analytics; Dropbox and Google Drive folder structure and file paths (not file contents); and OAuth tokens (stored encrypted).
Usage Data
We collect feature usage metrics, AI token consumption, credits used, and subscription status to operate and improve our services.
Optional Analytics
With your consent, we may collect page views, feature engagement, and error events to improve the product. We respect the Do Not Track browser setting.
2. How We Use Your Information
- Provide, maintain, and improve our services
- Generate AI content (thumbnails, scripts, suggestions)
- Process payments and manage subscriptions
- Enforce usage limits per your plan
- Communicate important updates about your account or our services
- Respond to support requests
3. Google API Services User Data (Data Accessed, Usage, Storage, and Sharing)
Slate's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data Accessed
- Google account identity data needed for sign-in and account linking (for example, email address and basic profile details)
- Google Drive metadata for folders/files you connect (for example, names, IDs, paths, MIME types, and modified timestamps)
- YouTube account/channel/video metadata and analytics you authorize through Google OAuth
- OAuth access and refresh tokens required to maintain your connected integrations
Data Usage
- Authenticate your account and maintain requested Google integrations
- Show connected Drive/YouTube resources inside Slate features you explicitly use
- Sync metadata and power requested workflows (for example, script research, media organization, and project context)
- Provide customer support and investigate reliability or security incidents
Data Storage, Retention, and Sharing
- Google user data and tokens are stored using encrypted infrastructure; tokens are encrypted at rest and data is transmitted over HTTPS
- Google user data is retained only as long as needed to provide the requested features or until you disconnect the integration or delete your account
- We do not sell Google user data, we do not use it for advertising, and we do not share it except to operate the service, comply with law, or with your explicit direction
- We do not use Google Workspace API data to develop, improve, or train generalized AI/ML models
4. AI Processing & Third-Party Services
To provide AI-powered features, we send certain content to third-party AI providers:
- OpenAI — GPT models and image generation
- Anthropic — Claude models
- Google — Gemini models
- Perplexity — Search capabilities
- FAL — Image generation
Data sent to these providers may include script content, briefs, thumbnail descriptions, chat messages, and video metadata. This data is processed according to each provider's terms of service and privacy policies. When using API-tier access, providers generally do not train on your data.
5. Third-Party Integrations
- YouTube — OAuth connection for channel and video data access
- Dropbox — Folder access for media syncing
- Google Drive — Folder access for media syncing
- Polar — Payment processing (we do not store card details)
- PostHog — Optional analytics (you can opt out)
- Supabase — Database and authentication infrastructure
6. Data Storage & Security
Your data is stored using Supabase infrastructure with encryption at rest. OAuth tokens (including Google OAuth tokens) are encrypted in our database. We implement row-level security to ensure users can only access their own data. All data transmission uses HTTPS.
7. Your Rights & Controls
- Access — You can request a copy of your data
- Deletion — You can delete your account, which permanently removes all associated data
- Analytics Opt-out — Toggle analytics collection in Settings > Privacy
- Integration Disconnection — Revoke any third-party connection at any time
- YouTube Opt-out — Specific controls for YouTube data collection
8. Data Retention
- Active accounts — Data retained until you request deletion
- Account deletion — All data permanently deleted (cascading deletion)
- AI providers — Retention per their policies (typically 30 days or less)
9. Children's Privacy
Slate is not intended for users under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
10. International Data Transfers
Your data may be processed in the United States through our infrastructure providers (Supabase, AI providers). We use appropriate safeguards such as standard contractual clauses where required.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Fontecha Creative Studios LLC
Email: support@useslate.app