Privacy policy

Version prepared 6 October 2026

Your creative workspace belongs to your account. Connecting TikTok is optional and serves the features you choose to use.

Who is responsible

Very Interesting is responsible for the personal data used to operate Slides.win. This policy covers the website, creative workspace and optional TikTok integration. The ChatGPT and Codex integration notice provides additional details about data shared with those hosts.

What we use and why

• Account and sign-in data: account name, email address, protected authentication records and session cookies provide access, account verification and password recovery. These are needed to provide the account service.
• Creative workspace: product briefs, uploaded images, slide text, saved revisions, public-post links and exports are stored to provide the editing, import and download features you request. Only upload content you are authorized to use.
• Usage and operational records: generation and export receipts, allowance usage, request metadata and errors support service accounting, security and recovery. Security processing serves our legitimate interest in protecting the service and its users.
• Purchase records: checkout and entitlement references are used to provide purchased allowances and handle payment events. The payment provider handles checkout details under its own notices. Records that must be retained for legal obligations may be kept separately from the creative workspace.
• Written requests: messages you send to our contact address are used to answer and resolve your request. We may ask for the information necessary to verify that an account or record belongs to you.

Account-service processing is based on providing the service you request; legally required records are processed to meet those obligations. Optional TikTok access depends on the authorization you grant and can be withdrawn. Required sign-in details are needed to open an account; a TikTok connection is not required to edit uploaded slides.

Connecting your own TikTok account

TikTok handles login and permission approval on its own page. Slides.win does not ask for your TikTok password. With your authorization, Slides.win receives a TikTok account identifier, profile display information and dated account statistics such as follower, like and publication totals. Access to public publications supports their linked URLs and dated performance measurements. Missing metrics are shown as unknown.

We request only the permissions needed for the selected integration. TikTok connection credentials are encrypted on the server and are not exposed in the slide editor or MCP responses. Account permissions, the data returned by TikTok and API availability determine which measurements can be updated.

Optional recurring photo import is under development and requires TikTok approval. When available, it will request separate ongoing authorization for posts and profile data. Archive requests are limited to the posts category, rather than direct messages, activity or all available data. The current archive adapter keeps supported public photo-post titles, dates and slide counts, discarding profile/contact fields and signed download links. Complete automatic photo retrieval is not enabled yet.

The inspected archive is processed in memory and is not stored as a complete ZIP. Reviewed images and editable copies are saved in your workspace. OCR and image reconstruction can make mistakes; the original and the editable copy are separate records for your review. The own-account integration does not collect other people's accounts on your behalf.

Storage and service providers

Cloudflare provides application hosting, database and image storage, rendering and operational infrastructure. When you request AI work, the explicit prompt, necessary product context and selected image references may be sent to the configured provider, including OpenAI, Cerebras or Cloudflare Workers AI. A generation request can therefore disclose the content you selected to that provider. Importing files, reading saved work or making exact text edits does not by itself require an AI generation request.

Lemon Squeezy provides the configured payment checkout. TikTok processes its own authentication and API requests under its policies. Provider services may process data outside your country; their relevant processing locations and contractual protections must be considered when selecting content for the service. You can request information about the processing of your own records through our written contact.

We do not make private workspace content public merely because you connect an account or export files. You decide where to share downloaded content. A public TikTok post remains subject to TikTok's visibility controls.

Retention, cookies and connection controls

Saved creations, uploaded assets, revisions, measurements and exports remain available while retained in your workspace for later use, until removed through available controls or a resolved deletion request. Disconnecting a provider does not delete those independent records. Accounting, security or dispute records may be retained where still needed for their purpose or a legal obligation; deletion requests are assessed against those requirements. There is no promise of immediate erasure from infrastructure records or backups.

Sign-in uses a necessary session cookie. Slides.win account sessions expire after seven days unless renewed through continued use. A pending TikTok connection state expires after ten minutes. TikTok credential lifetime is determined by TikTok; the server refreshes access only while the connection remains authorized.

Use Disconnect in Results to stop future TikTok synchronization and remove local connection credentials. A disconnect also stops enabled local import discovery and cancels active local import work in the import implementation. You can additionally revoke Slides.win in TikTok's account settings. Files and historical metrics remain in Slides.win unless separately removed.

Your privacy rights

Depending on the applicable law, you may request access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interest. You may withdraw optional authorization without affecting the lawfulness of earlier processing.

Send a written request to social@veryint.com, preferably from your account's email address, stating the request and the relevant workspace or record. Do not include passwords, API keys, OAuth tokens, signed download links or unnecessary identity documents. We will verify ownership proportionately, clarify the request if needed, and respond within the applicable legal timeframe. Whole-account erasure currently requires a written request; it is not an automatic button in the TikTok integration.

If you believe your rights have not been respected, you may contact your data-protection authority. In France, you can submit a complaint to the CNIL.

We update this policy when relevant service practices change. The version date above identifies the text you are reading.