Slate

Privacy Policy

Last updated: September 23, 2026

1. Information We Collect

Account Information

When you create an account, we collect your email address and password (stored securely using industry-standard hashing). You may also provide profile information such as your name, bio, and creator context to personalize your experience.

Content You Create

We store the content you create within Slate, including projects, scripts, ideas, thumbnails, visual assets, chat messages, AI conversations, clip metadata, and annotations.

Media & Files

We process uploaded images (such as thumbnails and creator face images), audio and video files you upload or select through connected Dropbox and Google Drive folders, and their metadata. Processing can include downloading selected media, extracting frames and audio, generating transcripts and clip descriptions, and preparing previews and edits.

Third-Party Integration Data

When you connect external services, we may access YouTube channel data, video metadata, and analytics; Dropbox and Google Drive folder structure, file paths, metadata, and the contents of media you select for processing; and OAuth tokens (stored encrypted). Linking a media folder allows Slate to process supported media in that folder and its included subfolders for syncing, search, transcription, and video production.

Usage Data

We collect feature usage metrics, AI usage records, and subscription status to operate and improve our services.

Product & Acquisition Analytics

Until you make a choice, PostHog measures our ad funnel and sign-up pages without cookies and without session replay: it counts the steps of those flows and keeps nothing on your device. With your permission, we then load DataFast, OpenAI Ads, Meta Pixel, HeyCatch, and Sled and add cookies and session replay to PostHog, to collect page views, attribution, interaction events, and product milestones. DataFast uses first-party cookies to connect visits with onboarding and purchase outcomes. Meta receives page visits and confirmed registration, checkout, trial-start, and paid-purchase events through the Pixel and Conversions API, along with cookie identifiers, browser information, and hashed account identifiers, to measure and improve Facebook and Instagram advertising. We do not enable automatic advanced matching in Meta or automatic page-content collection. PostHog receives the same PII-free milestone names and provides session replay with all text and inputs masked and images, video, canvas, and editable content blocked. HeyCatch provides browser identity and autocapture only; it does not record session replays, form-input contents, or server-side business events. If you decline, no measurement tools are loaded and PostHog stops too.

2. How We Use Your Information

  • Provide, maintain, and improve our services
  • Generate AI content (thumbnails, scripts, suggestions)
  • Process payments and manage subscriptions
  • Enforce usage limits per your plan
  • Communicate important updates about your account or our services
  • Respond to support requests

3. Google API Services User Data (Data Accessed, Usage, Storage, and Sharing)

Slate's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Accessed

  • Google account identity data needed for sign-in and account linking (for example, email address and basic profile details)
  • Google Drive metadata for folders/files you connect (for example, names, IDs, paths, MIME types, and modified timestamps), and the contents of media you select for processing
  • YouTube account/channel/video metadata and analytics you authorize through Google OAuth
  • OAuth access and refresh tokens required to maintain your connected integrations

Data Usage

  • Authenticate your account and maintain requested Google integrations
  • Show connected Drive/YouTube resources inside Slate features you explicitly use
  • Sync selected media and metadata and power requested workflows, including transcription, visual analysis, footage search, and edit preparation
  • Provide customer support and investigate reliability or security incidents

Data Storage, Retention, and Sharing

  • Google user data and tokens are stored using encrypted infrastructure; tokens are encrypted at rest and data is transmitted over HTTPS
  • Google user data is retained only as long as needed to provide the requested features or until you disconnect the integration or delete your account
  • We do not sell Google user data, we do not use it for advertising, and we do not share it except to operate the service, comply with law, or with your explicit direction
  • We do not use Google Workspace API data to develop, improve, or train generalized AI/ML models

4. AI Processing & Third-Party Services

To provide AI-powered features, we send certain content to third-party AI providers:

  • OpenAI — GPT models and image generation
  • Anthropic — Claude models
  • Google — Gemini models
  • Perplexity — Search capabilities
  • FAL — Image generation

Data sent to these providers may include script content, briefs, thumbnail descriptions, chat messages, video metadata, selected audio and video content, extracted frames, and transcripts. For example, selected footage may be sent to Google Gemini for visual analysis so Slate can describe clips and make them searchable. This data is processed according to each provider's terms of service and privacy policies. When using API-tier access, providers generally do not train on your data.

5. Third-Party Integrations

  • YouTube — OAuth connection for channel and video data access
  • Dropbox — Folder access for media syncing
  • Google Drive — Folder access for media syncing
  • Polar — Payment processing (we do not store card details)
  • DataFast — Cookie-based acquisition and purchase attribution, loaded with your permission
  • PostHog — Product analytics; cookieless on the ad funnel and sign-up pages until you choose, with cookies and privacy-masked session replay added with your permission
  • OpenAI Ads — Conversion measurement, loaded with your permission
  • Meta Pixel and Conversions API — Facebook and Instagram advertising measurement, used with your permission
  • HeyCatch — Browser product and growth analytics, loaded with your permission
  • Sled — Affiliate attribution, loaded with your permission
  • Supabase — Database and authentication infrastructure

6. Data Storage & Security

Your data is stored using Supabase infrastructure with encryption at rest. OAuth tokens (including Google OAuth tokens) are encrypted in our database. We implement row-level security to ensure users can only access their own data. All data transmission uses HTTPS.

7. Your Rights & Controls

  • Access — You can request a copy of your data
  • Deletion — You can delete your account, which permanently removes all associated data
  • Integration Disconnection — Revoke any third-party connection at any time
  • YouTube Opt-out — Specific controls for YouTube data collection

Change your optional measurement choice at any time:

8. Data Retention

  • Active accounts — Data retained until you request deletion
  • Account deletion — All data permanently deleted (cascading deletion)
  • AI providers — Retention per their policies (typically 30 days or less)

9. Children's Privacy

Slate is not intended for users under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

10. International Data Transfers

Your data may be processed in the United States through our infrastructure providers (Supabase, AI providers). We use appropriate safeguards such as standard contractual clauses where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Fontecha Creative Studios LLC
Email: support@useslate.app