Privacy Policy

Effective date: March 15, 2026

1. Introduction

Welcome to Slideparty.app (“Slideparty”, “we”, “us”, or “our”), operated by Lab 37, Entrepreneur individuel, operated by William BRISA, registered under SIREN 988 777 744 (France). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the “Service”). We are committed to protecting your personal data and respecting your privacy rights, including those granted by the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679.

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

For the purposes of the GDPR, the data controller is:

Lab 37 — Entrepreneur individuel
Operated by William BRISA
SIREN: 988 777 744
Contact: contact@williambrisa.fr
Slideparty contact: hey@slideparty.app

3. Information We Collect

We may collect the following types of personal data:

  • Account Information: When you register for an account (via Clerk, our authentication provider), we collect your email address and profile information provided during sign-up.
  • Usage Data: Information about how you access and use the Service, including pages visited, features used, session duration, and interactions within party rooms.
  • Analytics Data: We use PostHog for product analytics and session replays. PostHog may collect your IP address (anonymized), browser type, device information, pages visited, and user interactions.
  • User-Generated Content: Slides, topics, text, and images you create within the Service. This content is stored in our database (Convex) and on our storage provider (Vercel Blob).
  • Cookies and Tracking Data: Information collected via cookies and similar technologies, as detailed in Section 5.

Voice Chat: Slideparty's voice chat uses peer-to-peer (P2P) WebRTC connections. Voice data travels directly between participants' browsers and is not routed through, recorded, or stored by Slideparty. We only act as a signaling server to establish the connection.

4. How We Use Your Information & Legal Basis (GDPR)

We use the information we collect for the following purposes, with corresponding legal bases under Article 6 GDPR:

  • To provide and maintain the Service: Processing account information, user-generated content, and necessary cookies to operate the platform, manage accounts, and facilitate party sessions. Legal basis: Performance of a contract (Art. 6(1)(b)).
  • To improve and analyze the Service: Using PostHog analytics to understand how our Service is used, monitor performance, and make improvements. Legal basis: Consent (Art. 6(1)(a)) for non-essential analytics cookies, or legitimate interest (Art. 6(1)(f)) for aggregated, anonymized analysis.
  • For security and authentication: Using Clerk authentication cookies and Convex auth tokens to secure accounts and prevent fraud. Legal basis: Legitimate interest (Art. 6(1)(f)) and performance of a contract (Art. 6(1)(b)).
  • To communicate with you: Responding to inquiries, providing support, and sending service-related notices. Legal basis: Performance of a contract (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)).
  • For public display (AI-generated topics): Generated topics may be displayed publicly or used in marketing. Legal basis: Legitimate interest (Art. 6(1)(f)).
  • To comply with legal obligations: Processing data when required by law. Legal basis: Legal obligation (Art. 6(1)(c)).

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies. Non-essential cookies are only activated after you provide explicit consent.

Necessary Cookies (no consent required):

  • Clerk Authentication: Manages user login sessions.
  • Convex Auth Token (JWT): Authenticates requests to the backend.

Analytics Cookies (consent required):

  • PostHog: Collects product analytics data including page views, feature usage, and session replays to help us improve the Service.
  • Vercel Analytics: Collects anonymous data about website traffic and performance.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with the following categories of recipients:

  • Service Providers: Third-party vendors who perform services on our behalf — Vercel (hosting and storage), Clerk (authentication), Convex (database and real-time backend), PostHog (analytics), Unsplash (image search API), and Klipy (GIF/sticker search API). These providers access your information only to perform their services and are contractually obligated not to use it for other purposes.
  • Administrators: Authorized Slideparty administrators have access to user email addresses, user feedback, and user-generated content for operational, support, and moderation purposes.
  • Publicly Shared Information: AI-generated topics may be made publicly available. User-created content is only visible to participants in the same party room and to administrators.
  • Legal Requirements: If required by law or in response to valid requests by public authorities.
  • Business Transfers: In the event of a merger, acquisition, or asset sale, personal data may be transferred. We will provide notice before such transfer.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this Privacy Policy, including to satisfy any legal, accounting, or reporting requirements. Account information is generally retained until you request deletion. You can request the removal of your data at any time by contacting us at hey@slideparty.app.

8. Data Security

We use administrative, technical, and physical security measures to help protect your personal data. However, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against interception or misuse. Content created within the Service should not be considered secure — users should not input any PII or confidential information.

9. International Data Transfers

Your information, including personal data, may be transferred to and maintained on servers located outside of your jurisdiction (notably in the United States, where Vercel, Clerk, Convex, and PostHog may operate). If you are located in the European Economic Area (EEA) or the United Kingdom, we ensure that transfers of personal data are protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission (Decision 2021/914), in accordance with Chapter V of the GDPR.

10. Your Data Protection Rights (GDPR)

If you are a resident of the EEA or the United Kingdom, you have the following rights under the GDPR:

  • Right of Access (Art. 15): Request copies of your personal data.
  • Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
  • Right to Erasure (Art. 17): Request deletion of your personal data, under certain conditions.
  • Right to Restrict Processing (Art. 18): Request restriction of processing, under certain conditions.
  • Right to Object (Art. 21): Object to processing based on legitimate interests.
  • Right to Data Portability (Art. 20): Request transfer of your data in a structured, commonly used, machine-readable format.
  • Right to Withdraw Consent (Art. 7(3)): Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at hey@slideparty.app. We will respond within one month, as required by Article 12(3) GDPR. You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) or your local Data Protection Authority.

11. Children's Privacy

Our Service is not intended for use by children under the age of 16. We do not knowingly collect personally identifiable information from children. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to remove that information in accordance with Article 8 GDPR.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the updated policy on this page and updating the effective date. You are advised to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, contact us at:

hey@slideparty.app
Lab 37 — William BRISA
contact@williambrisa.fr