Privacy Policy | Slatefront

Slatefront turns topics, images, and drawings into educational animations for students and educators. This policy explains how Slatefront handles information when you visit our websites, create an account, or use the service. For privacy questions or requests, contact legal@slatefront.app.

Information we collect

Account and sign-in information: your email address, name, account identifiers, and basic profile information provided through the sign-in method you choose. Our authentication provider, Clerk, also processes the information needed to authenticate you and manage sessions.
Onboarding and profile information: whether you identify as a student, educator, or another user type; your university status; a university name if you provide one; and when onboarding was completed. You can update your profile, and the onboarding flow offers a choice not to share university information.
Content and generation records: your prompts, uploaded images, whiteboard drawings, generated animations, narration text, explanations, quizzes, generation settings, timestamps, results, and credit usage. Generated code and diagnostic logs may also contain information from your requests.
Technical information: information needed to deliver and protect the service, such as IP addresses, browser and session information, request timestamps, and error records. Hosting, authentication, and network providers also process technical information as part of their services.
Billing and support: account and billing features process relevant customer, subscription, transaction, package, and credit records. Opening account features can create a billing-provider customer record even if you do not make a purchase. If you contact us, we receive your message and the details you include.

How we use information

We use information to create and maintain your account, generate the content you request, show your generation history, manage credits and purchases, answer support requests, diagnose errors, and protect the service against misuse. Profile information helps us understand who uses Slatefront and support students' and educators' needs.

Where applicable data-protection law requires a legal basis, we rely on providing the service you request, our legitimate interests in running a reliable and secure service and supporting users, and compliance with legal obligations. Where consent is required for a particular activity, we will ask for it; you can withdraw that consent without affecting earlier lawful processing.

If you choose Google sign-in, we request basic identity permissions: OpenID, email, and profile. These provide an account identifier, email address, and basic profile details such as your name and profile picture. We use this information to authenticate you, connect you to your Slatefront account, and operate your account profile. We do not request access to your Gmail messages, Google Drive files, contacts, or calendar.

Clerk handles the sign-in connection. Account information is stored in Clerk and relevant account identifiers, name, and email are stored in Slatefront's application database. Our hosting and authentication providers process this information to operate the service. Google sign-in does not give Slatefront your Google password.

Other sign-in providers you choose may supply similar identity information, subject to the permissions shown during sign-in. You can remove Slatefront's connection in your identity provider's account settings. Removing a connection stops that connection's access but does not automatically delete information already held by Slatefront; contact us to request deletion.

Slatefront uses service providers to operate its features:

Clerk provides authentication, account management, and related session services.
Amazon Web Services (AWS) hosts the application and stored content. Relevant prompts and supplied images or drawings are processed through its content-generation services to create the animations and explanations you request.
Microsoft Azure Speech processes narration text to generate voiceovers when that feature is used.
Cloudflare provides website delivery, DNS, and network services, including hosting these legal pages.
Stripe supports billing, subscriptions, and related account records. It may receive your email address and account identifiers when you use account or billing features, even before a purchase. Payment details entered into Stripe's payment interface are handled by Stripe.

Only submit material you are entitled to share with the services needed to process it. Information may also be accessed when necessary to investigate a support request, diagnose an error, prevent abuse, or comply with legal obligations. We may disclose information when legally required or when necessary to protect users and the service.

Our providers operate internationally, so information may be processed in countries other than your own, where privacy laws may differ. Contact us if you need more information about processing relevant to your account.

Stored content and links

Slatefront stores account and usage records in its application database and generated media and processing artifacts in its hosting environment. Generated videos and uploaded drawing files may be accessible to anyone who has their direct media URL. Treat these URLs as shareable links, and do not use Slatefront to store confidential material or sensitive student records.

Removing an item from your generation history currently removes its history entry; it does not necessarily remove the underlying media, processing files, or logs. To request removal of those files or all information associated with your account, contact us.

Cookies and browser storage

Slatefront and its authentication provider use cookies and similar storage to keep you signed in, protect requests, and remember relevant session state. The application can temporarily keep a text prompt and generation options in your browser's session storage so they can be restored after sign-in. Images are not included in that saved draft.

Pages may load third-party fonts, scripts, or embedded media, including resources from Google Fonts, Cloudflare, Clerk, Stripe, and YouTube where those resources are present. These providers receive technical information, such as your IP address and browser details, when your browser requests their resources. Embedded content may also use its provider's cookies. Your browser lets you clear or block cookies and site storage, although blocking essential storage can stop sign-in or other features from working.

Retention and deletion

We retain information for the purposes described in this policy, taking into account your account's use, the need to provide saved content, support and security needs, and legal obligations. There is no single fixed retention period for all account records, media, and logs.

You can request account closure or deletion by emailing legal@slatefront.app, preferably from your account's email address. Please identify the account or content involved without sending passwords or unnecessary sensitive information. We may need to verify your identity before fulfilling a request. Some information may need to be retained for legal obligations, transaction records, fraud prevention, or resolving disputes. Deletion from backups and provider systems may take additional time.

Your choices and rights

You can update available profile information, choose what you submit, and disconnect social sign-in through the relevant provider. Depending on the law that applies to you, you may have rights to access, correct, delete, or receive a copy of your personal information, restrict or object to processing, and withdraw consent where processing depends on consent. Contact us to exercise these rights. You may also complain to the data-protection authority responsible for your location.

Students and age requirements

Slatefront is intended for people aged 13 or older, or a higher minimum age where required by local law. It is not intended for children under 13. Users under the age of legal adulthood need a parent or guardian's permission. Educators are responsible for obtaining any permissions required for information they submit and should avoid uploading identifiable student records. If you believe a child below the applicable minimum age has provided personal information, contact us so we can investigate and arrange appropriate removal.

Changes and contact

We may update this policy as Slatefront changes. We will update the effective date and provide appropriate notice of material changes. If a new use of information requires consent, we will request it before that use.

For questions about this policy or your information, email legal@slatefront.app. You can also read our Terms of Service.