Privacy Policy

Last updated: July 1, 2026 · ScriptAssist is a product of SlideSource, Inc.

This policy explains what information ScriptAssist collects, how we use it, and the choices you have. ScriptAssist is a desktop application; most of your work (slides, notes, and scripts) stays on your computer unless you explicitly use a feature that sends it to us.

1. Who we are

SlideSource, Inc. (“we,” “us”) is the controller of personal data processed through ScriptAssist. Contact: privacy@slidesource.com.

2. Information we collect

Account information

When you create an account, we collect your email address and a securely hashed password. We do not store your password in readable form.

Payment information

Payments are processed by our reseller and Merchant of Record, Paddle.com. We do not collect or store your full card details. We receive limited billing information (such as your subscription plan, status, and country) needed to provide the Services.

AI script feature data

When you choose to generate a script with AI, ScriptAssist sends the relevant slide’s title, on-slide text, and your speaker notes to our service over an encrypted (HTTPS) connection, where it is processed by Microsoft Azure OpenAI to produce a suggested script. This happens only when you click to generate — nothing is sent automatically. We do not use this content to build advertising profiles, and our AI provider does not use it to train its foundation models.

Usage and diagnostic data

We may collect limited, privacy-respecting usage and diagnostic data (such as feature usage and error reports) to improve the product. This does not include your slide content, and you can opt out in the app’s settings.

Support communications

If you contact us, we keep your messages and contact details to respond and improve support.

Website cookies & analytics

On our website (separate from the desktop app), we use Google Analytics and Microsoft Clarity — the latter produces anonymized heatmaps and session replays of how visitors navigate the site, with text and form inputs automatically masked — to understand how the site is used so we can improve it. These analytics cookies are off by default — they are only set if you choose Accept on our cookie banner, and you can decline. This data isn’t used to identify you personally, and we never sell or share it. Your on-device app features (such as VoiceSync) are unaffected and never send your audio or slide content anywhere.

3. How we use information

To provide, maintain, and secure the Services and your account;
To process subscriptions, trials, and entitlements;
To generate AI scripts when you request them;
To provide support and send service-related communications;
To improve features and fix problems;
To comply with legal obligations.

4. Service providers we share data with

Paddle.com — payments, billing, and tax as Merchant of Record.
Microsoft Azure / Azure OpenAI — cloud hosting of our service and AI script generation, under Microsoft’s enterprise terms. Your content is processed to fulfill your request and is not used to train AI models.
Google Analytics — website usage analytics, and only with your cookie consent; not used to identify you.
Microsoft Clarity — website heatmaps and session-replay analytics, and only with your cookie consent; text and inputs are masked, and it isn’t used to identify you.
Other infrastructure and email providers strictly as needed to operate the Services.

We do not sell your personal data.

5. Data retention

We keep different categories of data for different periods, retaining each only as long as needed for the purposes in this policy or as required by law:

Account and profile data — for the life of your account; deleted or anonymized within 30 days of account closure or a verified deletion request.
Billing and tax records — retained for approximately 7 years to meet tax, accounting, and audit obligations. Your card/payment records are held by our Merchant of Record, Paddle; we keep only limited billing metadata.
AI script requests — your slide content is processed only to generate the requested script and is not retained beyond fulfilling that request; we keep only limited operational metadata such as usage and cost counts.
Usage and diagnostic data — retained for up to 24 months, then aggregated or anonymized.
Support communications — retained for up to 3 years.
Backups — residual copies of deleted data are purged within the backup rotation cycle, generally within 90 days.

Where we are legally required to keep data longer (for example for tax, fraud-prevention, or legal-claim purposes), we retain it for the required period. Our AI provider (Microsoft Azure OpenAI) may also retain prompts briefly for abuse monitoring under its own terms, separate from our retention.

6. Security

We use industry-standard measures including encryption in transit (HTTPS), hashed passwords, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights

Depending on where you live (for example, under the GDPR or CCPA/CPRA), you may have rights to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact privacy@slidesource.com. You may also have the right to complain to your local data-protection authority.

8. International transfers

We are based in the United States and process data there and in other countries where our providers operate. Where required, we rely on appropriate safeguards for international transfers.

9. Children

ScriptAssist is not directed to children under 16, and we do not knowingly collect their personal data.

10. Changes

We may update this policy from time to time. Material changes will be posted here with a new “last updated” date.

11. Contact

SlideSource, Inc. · P.O. Box 110581, Research Triangle Park, NC 27709 · privacy@slidesource.com