Privacy Policy

Effective date: November 1, 2026

At Slidyo, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, process, store, share, and protect personal data when you access or use our website, AI-powered content creation tools, presentation services, document sharing features, audience engagement analytics, Team Workspaces, and subscription services.

This policy applies to Slidyo users, website visitors, workspace members, and individuals who view or interact with content shared through Slidyo.

Information We Collect

We collect information necessary to provide, maintain, improve, and secure our Services.

2.1 Account and Registration Information

When you create or manage a Slidyo account, we may collect:

Full name.
Email address.
Profile picture.
Account identification information.
Authentication details.
Language and account preferences.
Subscription plan and account status.
Organization or workspace information.

If you register through a third-party authentication provider such as Google, we may receive basic profile information authorized through that provider. We do not receive your Google password.

2.2 Uploaded Documents and User Content

When you use Slidyo, we process content that you create, upload, edit, or share, including:

Presentations and slide decks.
CVs and resumes.
Portfolios.
Digital business cards.
Sales proposals.
Company profiles.
Business reports and other documents.
PDF, PPTX, DOCX, and other supported files.
Images, text, notes, and other content.
AI-generated documents, summaries, and presentation materials.

Uploaded documents may contain personal information about you or third parties. You are responsible for ensuring that you have the appropriate rights and lawful basis to provide and process that information.

We process uploaded content to deliver requested features, including creation, editing, conversion, AI assistance, presentation, sharing, and analytics.

2.3 Artificial Intelligence Processing

Slidyo uses artificial intelligence to help users create, improve, explain, and present digital content.

Depending on the features available and selected, AI processing may include:

Generating presentations from user instructions.
Improving and restructuring existing documents.
Adapting CVs and resumes to job descriptions.
Generating summaries and professional content.
Creating AI-powered presentation narration.
Explaining individual slides using AI-generated voice.
Answering questions about presentations.
Generating insights and recommendations based on document engagement.

To deliver these features, we may process user prompts, uploaded documents, extracted text, presentation content, and relevant contextual information through authorized third-party AI service providers.

AI Data Privacy and Model Training

Slidyo does not use customer content, including uploaded documents, presentations, CVs, personal information, or other private materials, to train or improve AI models.

Customer content is processed only as necessary to provide the AI-powered features requested by users and to support the secure operation of those features.

We require our third-party AI service providers to maintain appropriate contractual and security protections and prohibit the use of customer content for AI model training without authorization.

AI-generated output may contain inaccuracies or incomplete information. Users are responsible for reviewing generated content before relying on or distributing it.

2.4 Team Workspace Information

Slidyo offers Team Workspace functionality for eligible organizational subscriptions.

When you create, join, or manage a Team Workspace, we may collect:

Workspace name and identifier.
Organization information.
Team member names and email addresses.
Workspace invitations.
Membership and access status.
User roles and permissions.
Shared documents and presentations.
Collaboration and activity records.
Workspace usage information.
Subscription and team-seat information.
Shared-content engagement analytics.

Workspace administrators may manage members, assign permissions, control access to shared content, and view workspace information according to their roles.

Information stored in a Team Workspace may be accessible to authorized administrators and team members.

When a member leaves or is removed from a workspace, content belonging to the organization may remain accessible to authorized workspace members.

Workspace administrators and organizations are responsible for appropriate member permissions and lawful handling of personal information within their workspaces.

2.5 Link and Audience Engagement Information

Slidyo enables users to share digital documents through Links and provides audience engagement analytics to help users understand how recipients interact with shared content.

When someone opens or interacts with a Link, we may collect:

Document and Link identifiers.
Date and time of access.
Slides or document sections viewed.
Viewing duration and engagement activity.
Navigation and interaction events.
Browser, device, and operating system information.
IP address.
Approximate geographic location derived from IP address.
Questions or responses submitted through interactive features.
Other technical information necessary to provide analytics and maintain platform security.

Where supported, we may associate engagement information with an identified viewer when the viewer signs in, provides identifying information, or accesses content through an authorized identification method.

Not all viewers can be personally identified. For anonymous viewers, analytics may use anonymous or pseudonymous identifiers.

Document creators and authorized Team Workspace members may access engagement reports according to their subscription features and assigned permissions.

Engagement analytics reflect recorded technical activity and do not guarantee an accurate measurement of a viewer's attention, interest, understanding, or intent.

Viewer Privacy and Transparency

Slidyo processes engagement information to provide document analytics, improve service functionality, and maintain platform security.

Where permitted by applicable data protection laws, such processing may be based on the legitimate interests of Slidyo and its customers in understanding how shared content is accessed and used, provided these interests are not overridden by the rights and freedoms of individuals.

Where consent is required by applicable law, including for certain cookies or similar tracking technologies, Slidyo will obtain the necessary consent before activating the relevant tracking.

Document creators and organizations using Slidyo are responsible for providing appropriate privacy notices to their recipients and ensuring that their use of engagement analytics complies with applicable laws.

Slidyo provides information about its processing practices through this Privacy Policy and any applicable viewer-facing notices.

Viewers may exercise their applicable privacy rights, including the right to object to processing based on legitimate interests, by contacting support@slidyo.com.

2.6 Payment and Billing Information

Slidyo uses Paddle.com as its authorized online reseller and Merchant of Record for paid subscriptions.

For purchases processed through Paddle, Paddle handles payment transactions, applicable taxes, billing documentation, and related payment services.

When you purchase a Slidyo subscription, relevant information may include:

Customer name and email address.
Billing address and country.
Business or organization details.
Subscription plan.
Billing period.
Number of paid Team Workspace seats.
Transaction identifiers.
Payment and subscription status.
Renewal and cancellation information.
Invoice and refund records.
Limited payment method information supplied by Paddle.

Complete payment card details are collected and processed through Paddle’s payment infrastructure. Slidyo does not store complete card numbers or card security codes.

Paddle may act as an independent data controller for payment-related processing, including fraud prevention, tax compliance, transaction administration, and refunds.

Slidyo may receive billing and subscription records from Paddle to activate accounts, manage subscriptions, provide customer support, and maintain necessary financial records.

For details of Paddle’s processing practices, see:

Paddle Privacy Policy: https://www.paddle.com/legal/privacy
Paddle buyer support: https://paddle.net

2.7 Technical and Usage Information

We may automatically collect information about how you use Slidyo, including:

IP addresses.
Device and browser information.
Operating system.
Login timestamps.
Session and authentication events.
Feature usage.
Error reports and diagnostic information.
Security events.
Platform performance information.

This information helps us maintain reliability, prevent abuse, improve performance, and protect accounts.

2.8 Customer Support and Communications

When you contact us, we may collect your name, email address, message content, and information needed to respond to your request.

We may keep relevant communication records for customer support, dispute resolution, and legal compliance.

How We Use Personal Information

We process personal information for the following purposes:

Providing our Services: to create and manage accounts, process documents, generate presentations, deliver AI features, and operate the platform.
Content creation and AI processing: to process uploaded files, generate requested content, adapt documents, and provide AI-generated narration or explanations.
Team collaboration: to operate Team Workspaces, manage invitations, assign permissions, and facilitate shared document management.
Content sharing and analytics: to provide Links, record document interactions, generate engagement reports, and deliver available analytics.
Subscription and payment management: to activate paid subscriptions, administer plans, manage team seats, receive payment confirmations, and support cancellations or refunds.
Security and fraud prevention: to detect suspicious activity, protect accounts, prevent unauthorized access, and maintain service integrity.
Customer support: to respond to inquiries, resolve technical problems, and provide assistance.
Service improvement: to improve functionality, monitor performance, fix errors, and develop new features using information processed for lawful purposes.
Legal compliance: to meet applicable legal, regulatory, accounting, and tax obligations.
Communications: to send account notices, service information, security notifications, and, where permitted by law, optional marketing.

Legal Bases for Processing

Where GDPR applies, we process personal data on one or more of the following legal bases:

Performance of a contract: where processing is necessary to provide an account, deliver subscribed features, manage workspaces, or fulfil requested services.
Legal obligations: where processing is necessary to comply with tax, accounting, regulatory, or other legal requirements.
Legitimate interests: where processing is necessary for security, fraud prevention, operational improvement, or certain analytics, provided those interests are not overridden by your rights.
Consent: where required for optional cookies, marketing, viewer analytics, or other processing that requires consent.

Under Türkiye’s KVKK, processing is carried out in accordance with the conditions in Articles 5 and 6, including explicit consent where required.

Where sensitive personal data is involved, we apply the additional safeguards and conditions required by applicable law.

We do not sell personal data to data brokers.

We may share relevant personal information with the following recipients when necessary:

5.1 AI service providers: authorized providers that process content and instructions required for requested AI features.
5.2 Hosting and infrastructure providers: providers of hosting, storage, databases, content delivery, and infrastructure.
5.3 Paddle: Paddle may process payment, billing, transaction, subscription, and tax information as an independent Merchant of Record.
5.4 Authentication and communication providers: providers of authentication, email delivery, customer support, and notifications.
5.5 Team Workspace members: authorized administrators and members, according to workspace permissions and settings.
5.6 Link recipients: content shared through a Link is accessible to recipients according to the sharing settings you choose.
5.7 Legal and regulatory authorities: where required by law, legal process, or a valid request from a competent authority.
5.8 Business transactions: in connection with a merger, acquisition, restructuring, or transfer of business assets, subject to applicable legal requirements and safeguards.

Where service providers process personal data on our behalf, we require appropriate confidentiality, security, and data protection commitments.

Slidyo lets you share digital documents through Links.

Depending on product availability and subscription plan, you may be able to use controls such as restricted access, password protection, or link expiration. You are responsible for choosing suitable settings.

If a document is shared through an unrestricted link, anyone with that link may be able to access its contents.

We recommend applying appropriate access controls before sharing confidential or sensitive information.

Slidyo does not guarantee that shared documents cannot be copied, photographed, or otherwise retained by authorized viewers.

Team Workspace Privacy

7.1 Administration: workspace administrators may control membership, permissions, shared content, and subscription settings.
7.2 Shared information: files uploaded to a shared workspace may be available to authorized members according to their permissions.
7.3 Organizational responsibility: organizations are responsible for establishing lawful grounds and privacy notices when processing employee, applicant, customer, or third-party personal information.
7.4 Membership changes: when a user leaves a workspace, their access may be removed, while organizational content and relevant records may remain with the workspace.
7.5 Data processing: where Slidyo processes information on behalf of an organization, a Data Processing Agreement may govern that relationship.

Data Retention

We retain personal information only for as long as necessary to provide our Services, maintain security, comply with legal obligations, and resolve disputes.

Account Information: Retained while your account is active. When you or Slidyo delete your account, your account data is deleted immediately, including your presentations, CVs, uploaded files, and Team Workspaces that you solely own. If you share a Team Workspace with other members, ownership is transferred to another authorized member. We retain only a minimal record of the deletion, including your name, email address, and deletion date, in our security audit logs.

Uploaded Documents: Retained until you delete them or your account is deleted. Temporary files generated during processing are automatically deleted within a few hours, and temporary previews are deleted within 30 minutes.

Team Workspace Data: Retained while the workspace remains active. When the workspace owner deletes it, associated content is deleted immediately, subject to applicable legal obligations.

Engagement Analytics:

Detailed mouse movements and click interaction data are deleted after 90 days.
View summaries are retained until the associated shared Link, presentation, CV, or account is deleted. These summaries may include viewing duration, reading progress, approximate location, device type, and any name, email address, or message voluntarily provided by the viewer.

Notification Emails: Records of notification emails sent by Slidyo are deleted after 90 days.

Contact Form Messages: Retained as necessary to respond to inquiries and provide customer support. You may request deletion of your messages at any time, subject to applicable legal obligations.

Payment and Billing Records: Slidyo uses Paddle as its authorized reseller and Merchant of Record for paid subscriptions. Paddle handles payment processing, applicable transaction taxes, invoicing, refunds, and payment-related disputes in accordance with its own terms, Privacy Policy, and legal obligations.

Slidyo does not store complete payment card numbers or card security codes. We may receive and retain limited billing and transaction information from Paddle, including customer identifiers, billing contact details, subscription plans, transaction references, payment status, renewal dates, cancellation status, and refund information.

We retain this information as necessary to activate and manage subscriptions, provide customer support, maintain business records, comply with applicable tax and accounting requirements, and resolve disputes. Paddle independently determines the retention periods for payment information it controls as Merchant of Record.

For further information, please review Paddle's Privacy Policy.

Sign-in Sessions: Session information, including the IP address and browser type used to sign in, is retained with your account and deleted when your account is deleted, except where retention is legally required.

Security and Technical Logs: Security audit logs record administrative actions, associated accounts and IP addresses, and account deletion events. These logs are retained while the service operates where necessary to investigate security incidents and prevent abuse, subject to applicable data protection laws and periodic retention reviews.

AI usage records, including the AI model used, token counts, and associated costs, are retained for usage monitoring and cost accounting. These records do not contain the content of user documents or prompts.

Backups: Slidyo does not maintain separate long-term backup copies of personal data. Deleted information is not retained in a separate long-term backup system.

When retaining personal information is no longer necessary or legally justified, we delete, anonymize, or securely dispose of it in accordance with applicable law.

For privacy-related inquiries or data deletion requests, contact support@slidyo.com.

Account and Data Deletion

You may request deletion of your account and eligible personal information through account controls or by contacting us.

Deletion does not automatically remove information we must keep for legal, accounting, fraud-prevention, or dispute-resolution purposes.

If you belong to a Team Workspace, documents controlled by the organization may remain with the workspace.

Information already shared with recipients may remain in copies outside Slidyo’s control. Backup copies may persist until the applicable backup cycle expires.

International Data Transfers

Slidyo operates from Türkiye and may use service providers in other countries. Personal data may therefore be processed outside Türkiye or outside the country where you live.

Where international transfers occur, we use the transfer mechanisms and safeguards required by applicable law. Under GDPR, these may include adequacy decisions, Standard Contractual Clauses, or other lawful mechanisms. Under KVKK, transfers follow the applicable requirements of Law No. 6698, including the rules in force at the time of transfer.

You may contact us for more information about transfer arrangements.

Data Security

We take reasonable technical and organizational measures appropriate to the risks of our Services. These may include:

Authentication and access controls.
Role-based workspace permissions.
Encrypted network connections.
Restricted access to internal systems.
Security logging and monitoring.
Secure infrastructure configuration.
Backup and recovery procedures.
Security incident response practices.
Service provider security requirements.

No online platform can guarantee absolute security.

You are responsible for protecting your credentials, maintaining appropriate workspace permissions, and managing sharing settings.

Where required by law, we will notify affected individuals and relevant authorities of qualifying personal data breaches.

Cookies and Similar Technologies

Slidyo uses cookies and similar technologies to support essential website functionality, including authentication, session management, security, and user preferences.

When customers use Paddle's checkout services, Paddle may use cookies and similar technologies for secure payment processing, fraud prevention, and transaction management in accordance with its Privacy Policy.

Slidyo also collects Link engagement information to provide document analytics, including views, viewing duration, and interactions. Some analytics may be collected through server-side technologies without the use of tracking cookies.

Where cookies or similar technologies require consent under applicable data protection laws, Slidyo will request the necessary consent before using them.

Users can manage cookies through their browser settings and any available consent controls. Disabling essential cookies may affect certain platform features.

For more information, please review our Cookie Policy and Paddle Privacy Policy.

Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

Access personal information held about you.
Request correction of inaccurate information.
Request deletion of eligible personal information.
Request restriction of processing.
Object to certain processing.
Request portability of eligible data.
Withdraw consent where processing is based on consent.
Obtain information about recipients of your personal information.
Exercise applicable rights relating to automated decision-making.
Complain to the relevant supervisory authority.

Under KVKK, individuals have additional rights under Article 11 (see our KVKK Privacy Notice).

We may ask you to verify your identity before processing a request, and we will respond within the periods required by law.

To exercise your rights, contact us using the details in Section 18.

Children’s Privacy and Minors

Slidyo is intended for professional and business use. Users must meet the minimum age and legal-capacity requirements in our Terms of Use.

Link viewers may include people of any age. Our analytics are not intended to collect information from children. Senders should not share content with children where that would be inappropriate or unlawful.

If we become aware that we have collected personal information from a child unlawfully, we will take appropriate steps to delete it.

Third-Party Services

Slidyo may integrate with external providers for authentication, payment processing, AI, hosting, and other functions. Those providers may operate under their own terms and privacy policies.

Where a third party independently determines the purposes and means of processing, its own privacy notice governs that processing.

Marketing Communications

We may send service announcements, product notifications, security alerts, and other communications needed to operate your account.

Where legally permitted, we may also send promotional information about Slidyo. You can opt out of marketing using the unsubscribe link or by contacting us. Opting out of marketing does not stop essential service or billing messages.

Changes to This Privacy Policy

We may update this policy to reflect changes in our Services, technology, legal obligations, or business operations.

The revised policy will be published here with a new effective date. Where changes materially affect how we process personal data, we will give additional notice or request consent where required.

Contact Information

Slidyo Privacy Team

Legal Company Name: Vefactor Yazılım Sanayi ve Ticaret Limited Şirketi
Registered Address: Sırakapılar Mah. Saltak Cad. No: 59 İç Kapı No: 9, 20010 Merkezefendi/Denizli, Türkiye
Website: https://slidyo.com
Email: support@slidyo.com

You may also contact us through the contact form on the Slidyo website.

Terms of Use: Terms of Use
Cookie Policy: Cookie Policy
Refund and Cancellation Policy: Refund and Cancellation Policy
Paddle Privacy Policy: https://www.paddle.com/legal/privacy
Paddle Checkout Buyer Terms: https://paddle.com/legal/checkout-buyer-terms

Read the Terms of Use Back to top