Privacy Policy
What we collect when you use Slide Your App, why we collect it, and what you can ask us to do with it.
1. Who we are
Slide Your App is a platform for creating short-form video content and publishing it to social platforms. This policy explains what personal data we collect when you use our website and app, why we collect it, and what you can do about it.
Slide Your App is operated by No Limit Apps LLC, a Wyoming limited liability company, 30 N Gould St Ste R, Sheridan, WY 82801, USA. For the purposes of the EU and UK GDPR we are the data controller for the data described below. Privacy questions, and any request under section 10, go to support@slideyourapp.com. We answer within 30 days.
2. What we collect
| Category | Examples | Why | Legal basis (GDPR Art. 6) |
|---|---|---|---|
| Account data | Email address, password hash, workspace settings | To create and secure your account, sign you in, and send transactional email (password reset, email change, billing notices). Passwords are stored salted and hashed; we cannot read them, and accounts created with Google have none. | Contract — Art. 6(1)(b) |
| Google account identifier | Your Google user id and verified email address | Only if you use "Continue with Google", so we can recognise you on the next sign-in. We ask Google for nothing else — no contacts, no Drive, no profile browsing. | Contract — Art. 6(1)(b) |
| Content data | Your website or App Store URL, prompts, uploads, generated clips and slides, captions, schedules | To produce and publish the content you ask for, and to show it back to you. Visible only to your account. | Contract — Art. 6(1)(b) |
| Connected accounts | Username, display name, avatar, profile id and post performance from the TikTok / Instagram / YouTube accounts you link | To publish on your behalf and show your numbers. We never hold your social platform password or access tokens — those stay with Zernio (section 6). | Contract — Art. 6(1)(b) |
| Billing data | Stripe customer and subscription ids, plan, status, renewal date, credit balance, invoices | So the app knows what you may use and can show your plan in Settings, and so we can keep the records the law requires. Card numbers never reach our servers. | Contract — Art. 6(1)(b); tax and accounting records — Art. 6(1)(c) |
| Usage counters | Credits consumed, generations run, plan limits applied | To apply the allowances of your plan. | Contract — Art. 6(1)(b) |
| Support and feedback | Your message, the page you were on, and — if you use the in-app Feedback button — a screenshot of that page captured at the moment you press send (you see it before sending) | To answer you and fix what you reported. Feedback reaches our team through a private Telegram bot. | Legitimate interests — Art. 6(1)(f) |
| Server logs | IP address and request metadata | Kept short-term to keep the service up and to spot abuse. | Legitimate interests — Art. 6(1)(f) |
| Product usage | Pages viewed, actions taken (sign-up, generating content, opening the studio, hitting a plan limit, subscribing), device, browser, approximate location derived from your IP, and the campaign or link that brought you here. Tied to your account id once you sign in. | To understand what to fix and build next. | Legitimate interests — Art. 6(1)(f) |
We do not ask for and do not want government IDs, health data, or any other special category data. Please do not send it to us. We do not use your data for automated decision-making or profiling.
Full card numbers never reach our servers. Payments are handled by Stripe, which receives your card details directly.
3. How we use it
- To run the service: generate content, schedule it, publish it, and report back on it.
- To bill you and keep the financial records the law requires.
- To provide support and answer your messages.
- To keep accounts secure, detect abuse and enforce our Terms of Service.
- To improve the product through aggregated, non-identifying analysis.
- To send service emails. Marketing emails only where you opted in, and every one of them has an unsubscribe link.
Where GDPR applies, our legal bases are the ones named in the table above: performance of a contract (running the service), legal obligation (tax and accounting records), legitimate interests (security, abuse prevention, product improvement) and consent (marketing, non-essential cookies).
4. Connected social accounts
When you link a TikTok, Instagram or YouTube account, that platform issues an access token scoped to the permissions you approved. The token is held by our publishing processor Zernio — it never reaches our servers, and neither does your social platform password. We use the connection only to publish the content you scheduled and to read back the performance of posts made through Slide Your App.
- We do not read your private messages.
- We do not post anything you did not schedule or approve.
- You can disconnect an account at any time in your workspace settings, which revokes the token and removes its mirror record here. You can also revoke access from the platform's own security settings.
Your use of each platform stays governed by that platform's own terms and privacy policy.
5. AI processing
Generating scripts, captions, slides, voice-over and video involves automated processing by third-party AI providers, which we reach through OpenRouter. Your prompts and source material are sent to those providers only to produce your output, and they act as our processors under contract. This is how the product works, and it means the material you submit leaves our servers for the model provider running that generation.
We pay for the model calls ourselves and bill you through your plan and its studio credits — you never supply an API key of your own.
We do not sell your content, we do not use it to train models, and we do not publish it anywhere you did not schedule it. You are responsible for reviewing what the model produces before it goes out, and for holding the rights to any material you upload.
6. Who we share it with
We use a small number of processors. Each receives only what it needs to do its job, and none of them may use your data for their own purposes.
| Processor | What it receives | Where |
|---|---|---|
| Hetzner Online GmbH | Hosting — everything stored by the platform sits on this server. | Nuremberg, Germany (EU) |
| Stripe | Your payment and billing details, and your subscription. We receive back your email, the plan and its status — never the card number. | USA / Ireland |
| Google (Sign-In) | Only if you choose "Continue with Google": Google authenticates you and returns your user id and verified email. Loading the button also tells Google your IP address and that you visited our sign-in page. | USA |
| Zernio | Only if you use publishing: the media and caption of each post, and the OAuth tokens of the social accounts you connect (held by Zernio, never by us). Zernio publishes to TikTok / Instagram / YouTube on your instruction. | USA |
| OpenRouter and the AI models it routes to | The prompts and source material your generations produce — product details, audience research, scripts, captions and creator imagery. | USA and the model provider's own regions |
| PostHog (product analytics) | The product-usage events in section 2: pages viewed, actions taken, device and browser, the campaign that referred you, and — once you sign in — your account id and email. We use PostHog's EU cloud. | Frankfurt, Germany (EU) |
| Resend | Your email address and the text of transactional emails (account set-up, password reset, billing notices). | USA |
| Telegram | Only if you press the Feedback button: your message, the page name and the screenshot are delivered to our private support chat through the Telegram Bot API. | Global (Telegram Messenger Inc.) |
| TikHub and Apple (iTunes Search API) | The public trend and app-listing data we fetch to build the feed. The link you submit is sent to fetch that public listing; no personal data of yours is. | USA |
Beyond those processors we share personal data only with authorities, where a valid legal request requires it or to protect our rights, users or the public; and with a successor, if the business is merged or acquired, under the same commitments as this policy.
7. What we never do
- We do not sell or share your personal data with advertisers, and we never have. We do not share it for cross-context behavioural advertising.
- We do not use your generated content to train models, or for any purpose other than providing the service to you.
- We do not store card numbers — payments are handled by Stripe.
- We do not run advertising trackers or third-party ad scripts. We do run our own product analytics (PostHog, EU cloud — section 6) to see which parts of the product work and which don't; it is never shared with advertisers.
8. Cookies
The platform uses a first-party session cookie to keep you signed in and the app secure — strictly necessary, and it cannot be turned off without breaking the service. The website and the platform also set a first-party analytics cookie for PostHog (section 6), which holds a random visitor id so repeat visits and, later, your account can be recognised as the same person; it carries no advertising identifier and is not read by anyone else.
Your browser's "Do Not Track" signal is respected, and setting it stops the analytics cookie and the events with it. We honour Global Privacy Control signals where your browser sends one, and you can clear or block cookies in your browser at any time.
Web fonts are loaded from Google Fonts, and the sign-in page loads Google's Sign-In script where that option is enabled, which means your browser's IP address reaches Google when those pages load. Stripe sets its own cookies on its hosted checkout and billing pages, governed by Stripe's privacy policy.
9. How long we keep it
- Account and content data — while your account is open, then up to 90 days after you delete it, so you can change your mind.
- Connected accounts — until you disconnect the account; disconnecting removes its mirror record here, and cancelling a subscription does not delete anything.
- Server logs — up to 30 days.
- Feedback messages — up to 12 months after the issue they describe is closed.
- Payment and subscription records — up to 7 years, where accounting, tax and fraud-prevention law requires it, and then deleted.
Email support@slideyourapp.com to delete your account and its content.
10. Your rights
If you are in the EEA or the UK, the GDPR gives you the right to:
- Access a copy of the personal data we hold about you;
- Rectify data that is wrong or incomplete;
- Erase your data ("right to be forgotten"), subject to records we must keep for tax and accounting;
- Restrict or object to processing carried out on the basis of our legitimate interests;
- Portability — receive your data in a machine-readable format;
- Withdraw consent where processing rests on consent, without affecting what came before.
Email support@slideyourapp.com from your account address and we will act within 30 days, free of charge. We may need to verify who you are first. You also have the right to lodge a complaint with your national data protection authority — in the EU, the supervisory authority of the country where you live or work; in the UK, the Information Commissioner's Office.
If you are in California or another US state with a privacy statute, you have equivalent rights to know, delete and correct your personal information, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of — the same email address handles any request, and we will not treat you differently for making one.
11. Security
Data is encrypted in transit, access to production systems is limited to staff who need it, and credentials are stored encrypted at rest. No system is perfect: if a breach affects your personal data, we will tell you and the relevant regulator without undue delay.
12. Where your data lives
The platform runs on a server in Nuremberg, Germany, so your account and content are stored in the EU. No Limit Apps LLC is a US company, and the processors in section 6 other than Hetzner and PostHog are based in the USA — so some data is transferred outside the EEA and the UK. Those transfers rely on the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant), which our processors incorporate in their data processing agreements.
13. Age requirement
Slide Your App is a business tool for adults. You must be at least 18 to use it. We do not knowingly collect data from anyone under 18, and we delete such data as soon as we learn of it. If you believe a child has given us data, write to us and we will remove it.
14. Changes
We update this policy when the product or the law changes. The date at the top always reflects the current version. Where a change materially affects how we handle your data, we will email account holders before it takes effect.
15. Contact us
Privacy questions, requests and complaints: support@slideyourapp.com.
No Limit Apps LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA.