slide.garden

Privacy Policy

Last updated: August 10, 2026

1. Who we are

slide.garden (“we”, “us”, or “our”) operates the slide.garden web application (the “Service”). The Service helps creators design TikTok slideshows, prepare slide assets, schedule drafts, and upload finished carousels to their TikTok inbox for review and publishing in TikTok.

For privacy questions or requests, contact us at privacy@slide.garden.

2. Data we collect

  • Account data: name, email address, and a hashed password. Authentication is handled by our own app (Better Auth); we do not use a separate third-party auth vendor.
  • Session data: session cookies and related technical details (such as IP address and user agent when recorded) to keep you signed in and secure the Service.
  • TikTok connection data: if you connect TikTok via OAuth, we store your TikTok open ID, username, display name, profile avatar URL, profile link, and encrypted access/refresh tokens needed to call TikTok APIs on your behalf (currently basic/profile info and draft upload).
  • Content you create: templates, characters, styles, prompts, captions, schedules, slide images, and related post records associated with your account.
  • Operational logs: limited server logs (for example request timing and errors) needed to run, debug, and protect the Service. We do not run third-party advertising or product-analytics trackers.

3. How we use data

  • Create and secure your account and sessions.
  • Store and display the content and settings in your workspace.
  • Create and prepare slideshow text and images based on the settings and inputs you provide.
  • Upload finished slideshow images to your TikTok inbox as drafts using TikTok’s Content Posting API. We do not publish live to TikTok; you review and publish in TikTok.
  • Prevent abuse, maintain reliability, and comply with applicable law.

4. Where data is processed

We use a small set of service providers to operate the Service. We do not sell personal data.

  • Vercel: hosts the application and serves media assets from the app.
  • Railway: hosts our PostgreSQL database where account, session, TikTok token, and content records are stored.
  • TikTok: when you connect an account or push a draft, we exchange data with TikTok under TikTok’s terms and developer policies for the scopes you authorize.

5. Cookies

We use essential cookies and similar technologies for authentication and session management. These are required for the Service to function. We do not use advertising cookies or third-party marketing pixels.

6. Retention

We keep account and content data while your account is active. Encrypted TikTok tokens are removed when you disconnect TikTok or delete the linked profile. If you request account deletion, we delete or anonymize personal data associated with your account except where we must retain limited information for security, dispute resolution, or legal compliance. Infrastructure backups may persist for a short period before rotation.

7. Security

We use HTTPS in production, store passwords hashed, and encrypt TikTok tokens at rest. No method of transmission or storage is perfectly secure. Use a strong, unique password and keep your credentials confidential.

8. Your choices

You can update account details, disconnect TikTok, and delete profiles or content in the product. To request access, correction, or deletion of your personal data, email privacy@slide.garden. We will respond within a reasonable time.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us and we will delete it.

10. International users

The Service is hosted on infrastructure that may process data in the United States or other countries where our providers operate. By using the Service, you understand that your information may be transferred to and processed in those locations.

11. Changes

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.