HeySlide

Legal

Privacy Policy

Last updated: November 1, 2026

This Privacy Policy explains how Cogent AI (“Cogent AI,” “we,” “us,” or “our”) collects, uses, and shares information when you use HeySlide, including the public website at heyslide.io and the app at app.heyslide.io.

HeySlide lets a creator publish a deck that other people, and the AI assistants they use, can ask questions. In this policy, a creator is someone who publishes decks, and a viewer is someone who opens a deck’s link and asks it questions.

Information We Collect

  • Account details: your email address and name. If you choose Continue with Google, Google tells us your name, email address, whether Google has verified it and, for a Google Workspace account, its company domain. We never receive your Google password or access to your Google files. HeySlide has no passwords: you sign in with a link or a one-time code sent to your email.
  • What creators upload: decks (PDF or PowerPoint) and supporting documents, the slide and page images we make from them, and what our AI providers read from them (text, facts, table and chart data, and topics). Also the topics, rules and saved answers a creator sets up.
  • Questions and answers: each question asked about a deck, the answer given, the slides and sources it came from, and how it was decided. When a question is sent to a creator, we keep it, any message with it, and the creator’s reply, including replies sent by email.
  • Voice questions: the recording is sent for transcription and deleted as soon as the text comes back. We never store the audio; we keep only the text, as the question.
  • Viewing activity: which slides of a deck were viewed, and for how long.
  • Assistants: when you use HeySlide in ChatGPT, Claude or another AI assistant, we receive only what the assistant sends to HeySlide (for example, your question and the deck it’s about), plus a conversation reference if the assistant provides one. We never receive the rest of your conversation.
  • Emails to us: messages you send to our support address.
  • Payments: handled by Stripe. We keep your Stripe customer and subscription identifiers, your plan and its status. We never see or store card numbers.
  • Technical information: IP addresses, kept as one-way hashes to enforce limits and prevent abuse; server logs, which can include IP addresses; and records of how requests were handled, which leave out the text of questions and answers.

Cookies and Similar Technologies

We use only the cookies HeySlide needs to work. There are no advertising cookies, no third-party tracking, and no analytics tools.

  • hs_session keeps you signed in, for up to 30 days.
  • hs_recipient lets you see your own questions and answers on a deck without an account, for up to a year.
  • hs_draft lets you come back to a deck you dropped before making an account, for 7 days.
  • hs_human remembers that a bot check passed, for 12 hours.
  • hs_oauth is used for 10 minutes during Continue with Google.

Your choice of light or dark mode is kept in your browser’s storage and never sent to us. Bot checks use Cloudflare Turnstile (see Service Providers).

How We Use Information

  • To read decks and answer questions about them, from the deck and its sources only.
  • To send a question to the creator when the deck can’t answer it, and the reply back.
  • To sign you in, and to send the emails the service needs or you ask for: sign-in links and codes, questions waiting for you, replies to your questions, an optional daily summary, and notices about limits and your plan.
  • To show creators what was asked and viewed on their own decks.
  • To manage subscriptions and payments.
  • To prevent abuse and keep HeySlide running: rate limits, bot checks, spending limits, and blocking throwaway email addresses.
  • To improve answers for each creator: a creator’s saved answers and corrections help HeySlide file and answer later questions on that creator’s own decks. They aren’t used for anyone else’s decks.
  • To troubleshoot problems, provide support, and comply with law.

We do not sell personal information, share it for advertising, or use it to train AI models.

Legal Bases

Where the law requires a legal basis, we rely on: providing the service you asked for (our contract with you); our legitimate interests in keeping HeySlide secure, preventing abuse and improving it, balanced against your rights; complying with legal obligations; and your consent where we ask for it, which you can withdraw at any time.

Who Sees What

  • A deck’s creator sees the questions asked on their decks, the answers given, and which slides were viewed. They see a viewer’s name and email only if the viewer signed in or opened a personal link the creator made for them; otherwise the viewer is shown as “Viewer 1”, “Viewer 2” and so on.
  • The person a question is sent to sees that question, the answer the viewer was shown, and any message with it.
  • Viewers see their own questions and answers. Other viewers never see them.
  • Creators hold the questions asked on their decks. For a question about what a creator did with yours, contact them, or us.

Uploaded Content

HeySlide is designed to work with presentation materials you upload or make available to the service. You are responsible for ensuring that you have the rights and permissions needed to submit that content. We process uploaded content to provide the product features you request.

Service Providers

We share information with these providers only to run HeySlide:

  • Amazon Web Services: hosting, storage and email, in the United States.
  • Anthropic: reading decks, and writing and checking answers (Claude).
  • OpenAI: making deck content searchable, and transcribing voice questions.
  • Stripe: payments.
  • Google: sign-in, if you choose Continue with Google.
  • Cloudflare: delivering the website, and bot checks with Cloudflare Turnstile. Turnstile looks at signals from your browser to tell people from automated traffic, as described in Cloudflare’s Turnstile Privacy Policy.

We use Anthropic and OpenAI through their business APIs. Under their terms, they don’t use what we send them to train their models, and they keep it only for a limited time (generally up to 30 days) to provide the service and monitor for misuse, unless the law requires longer.

When you use HeySlide in ChatGPT or Claude, OpenAI or Anthropic also handles your conversation under its own privacy policy, as the provider of that assistant.

Legal and Safety Disclosures

We may disclose information if we believe it is necessary to comply with law, enforce our terms, protect rights and safety, investigate misuse, prevent fraud or security issues, or respond to lawful requests. If Cogent AI is involved in a merger, acquisition or sale of assets, information may be transferred as part of it, under this policy.

Data Retention

  • Accounts, decks, questions, answers, emails to us and their text: kept until you ask us to delete them. We don’t yet delete them automatically after a set time; when we do, this policy will say so.
  • Voice recordings: deleted right after transcription, and never stored.
  • Decks dropped without an account: deleted after 7 days if nobody claims them.
  • Records used for rate limits: about two days.
  • Backups: up to 30 days, so deleted information can remain in backups for that long.

Your Choices and Rights

Email [email protected] to get a copy of your information, correct it, or delete your account and what you uploaded or asked. We’ll confirm when it’s done, within 30 days. You can turn off a deck’s link, cancel your plan, or stop using HeySlide at any time.

Depending on where you live, you may also have the right to object to or restrict how we use your information, to take it elsewhere, and to complain to your data protection authority. We don’t sell personal information or share it for targeted advertising, and we won’t treat you differently for using any of these rights.

Security

Information is encrypted in transit and at rest. Sign-in links, codes, and session and access tokens are stored only as one-way hashes. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

HeySlide is built for work and is not intended for anyone under 16. We do not knowingly collect personal information from children under 16.

International Use

Information is stored in the United States, and may be processed in other countries where our service providers operate. Those countries may have data protection laws different from the laws where you live.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the date above, email account holders before the changes take effect, and provide any other notice the law requires.

Contact

Questions about this Privacy Policy can be sent to Cogent AI at [email protected]. Our Terms of Service also apply to your use of HeySlide.