Privacy Policy

Data Controller / Business: Halil Furkan Kesler (sole proprietorship)

Address: Kavacık Mah. Fatih Sultan Mehmet Cad. Tonoğlu Plaza No:3 Kat:4, 34810 Beykoz/İstanbul

Contact: iletisim@slideninja.app

Application: Slide Ninja (slideninja.app)

Identity/contact: name and surname, e-mail address.

Account/transaction: authentication identifier (Clerk), linked company, credit and usage records, records of the presentations you generate.

User Content: the topics/text you enter and the documents and presentations you upload (processed for generation).

Technical: session cookies and basic log data.

Usage measurement: if you give consent in the cookie notice, page-view and interaction data via Google Analytics (events such as sign-up and presentation generation; device/browser information; the IP address is truncated by Google). If you do not consent, only a cookieless, anonymous aggregate measurement signal is sent.

Usage recording (session replay and heatmaps): only if you give consent in the cookie notice, via Microsoft Clarity; mouse movement, clicks, scrolling, the pages you visit, device/browser and screen information and the approximate location (country/city) derived from your IP address are recorded. The recording also covers the screens you see after signing in; your Clerk identifier (not your name or e-mail) is passed so that we can recognise your account. The topics/text you enter, the documents you upload, the generated presentation content and your account name, e-mail and company name are masked in your browser before the recording is captured; the text of these areas is never sent to Microsoft. If you do not consent, the Clarity script is not loaded at all and no recording takes place.

Campaign/source information: the address parameters of your first visit to our site (UTM, ad click ID), landing page and referrer are kept in your browser's local storage; they are associated with your account only if you sign up.

To provide the Service and generate presentations; to create and manage your account; to ensure security and prevent abuse; to improve the Service and to communicate with you.

To measure the use of the Service and the effectiveness of our marketing: to understand which channel brings users who sign up and use the Service, and to manage the advertising budget accordingly.

Under Article 5 of the Turkish Personal Data Protection Law (KVKK): formation/performance of a contract, legal obligation, legitimate interest and, where required, your explicit consent.

Under the GDPR (for users in the EU): performance of a contract (Art. 6(1)(b)), legitimate interest (Art. 6(1)(f)) and, where required, consent (Art. 6(1)(a)).

Measurement cookies (Google Analytics) and usage recording (Microsoft Clarity) rely solely on your explicit consent, which you can withdraw at any time using the button at the bottom of this page. Associating campaign/source information with your account relies on legitimate interest (measuring marketing effectiveness) and you retain the right to object.

In order to provide the Service, your data is shared with infrastructure/processor service providers, most of which are based in the USA:

• Clerk — authentication/sessions. • Airtable — account and usage records. • Anthropic (Claude) — generating presentations from User Content. • Netlify — hosting and storage of generated files. • Pexels — image search (only search terms are sent). • Google (Google Analytics 4) — usage measurement if you consent; cookieless and anonymous measurement otherwise. • Microsoft (Clarity) — usage recording and heatmaps only if you consent; no data is transferred otherwise.

Under its commercial API terms, Anthropic does not use your User Content or the generated output to train AI models; the content is processed solely to generate your presentation.

These transfers constitute international data transfers and are subject to Article 9 of the KVKK and Chapter V of the GDPR. For users in the EU/EEA and the United Kingdom, transfers rely on the European Commission's Standard Contractual Clauses (SCCs) contained in the data processing agreements with each provider (including Anthropic) and/or on the provider's certification under the EU-U.S. Data Privacy Framework (Clerk, Airtable, Netlify, Google, Microsoft).

We do not sell or rent your personal data and do not share it with third parties for advertising purposes. A GDPR Article 28 data processing agreement (DPA) is available to Corporate customers on request; the list above serves as our sub-processor list.

Your account and contact data are kept for as long as your account is active.

If you close your account or request deletion, your personal data, including the presentations you generated and your input content, is deleted or anonymised within a reasonable period (at the latest 6 months), subject to statutory retention obligations.

Accounts not used for 24 months may be deemed closed and deleted through the process above.

Technical/log records are kept for a maximum of 12 months.

Google Analytics measurement data is kept for a maximum of 14 months; aggregate (anonymous) reports are not limited to this period. The cookie preference and campaign/source information in your browser remain there until you delete them.

Microsoft Clarity usage recordings (session replays and heatmap data) are kept by Microsoft for 30 days and deleted at the end of that period.

Where required by applicable legislation, data is retained in a limited manner for the prescribed limitation/retention periods and is deleted or anonymised at the end of that period.

Under Article 11 of the KVKK and, where applicable, the GDPR, you have the right to access, rectify and erase your data, to restrict or object to processing, to data portability and to withdraw consent. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

You can submit your requests to iletisim@slideninja.app. We respond within 30 days at the latest.

If you are not satisfied with the outcome of your request, you have the right to lodge a complaint with the Turkish Personal Data Protection Authority (KVKK); if you are in the EU/EEA, with the data protection authority of your country; and if you are in the United Kingdom, with the ICO.

We take reasonable technical and organisational measures to protect your data. Please note, however, that no transmission over the internet is 100% secure.

Essential cookies: used to keep your session open (Clerk) and for your language preference. They are necessary for the Service to work and do not require consent.

Measurement cookies (Google Analytics 4): written only if you choose "Accept" in the cookie notice bar. If you choose "Decline" or make no choice, no measurement cookie is written; Google Analytics receives only a cookieless, anonymous, aggregate measurement signal that is not linked across sessions (Google Consent Mode).

Usage recording cookies (Microsoft Clarity — _clck, _clsk): written only if you choose "Accept". In that case the Clarity script is added to the page and cookies are used to recognise the visitor (_clck, up to one year) and to keep a session together (_clsk, one day). If you choose "Decline" or make no choice, the script is not loaded at all and not a single request is sent to Microsoft. If you withdraw your consent, the recording is stopped.

Browser storage: your cookie preference and the campaign/source information of your first visit (UTM parameters, ad click ID, landing page, referrer) are kept in your browser's local storage. This information is not sent to third parties; it is associated with your account only if you sign up. You can delete it by clearing your browser's site data.

You can change your cookie preference at any time using the button at the bottom of this page.

This policy may be updated. The current version is published on this page.