Privacy Policy | Fyslide

Short version: Fyslide runs on your computer and keeps your library, designs and slideshows there. We store only what we need to sell and check licenses. The app has no tracking or advertising analytics. There are two exceptions. Once a day it sends anonymous usage totals (slideposts, views, likes, comments and shares) together with your license ID; this is on by default and you can turn it off in the app’s Settings (see below). And, only if you connect one or more TikTok accounts, the TikTok features work as described below. This website counts visits with Vemetric, a cookieless analytics service in the EU, and sets no tracking cookies.

The app

The app sends our license server license data when you activate and when it re-checks: your license key, a hashed machine ID (not the hardware ID itself) and your computer’s name. Besides that, only the anonymous usage totals below are sent, unless you turn them off. Your images, designs, slideshows and API keys stay on your computer (on a Mac in ~/Library/Application Support/Fyslide, on Windows in %APPDATA%\Fyslide); API keys are stored encrypted.

When you use AI features, your topics, texts and, for vision features, images go directly from your computer to the AI provider you chose (for example Anthropic, OpenAI or Google, including through their CLIs), not through us. With Ollama they stay on your computer. Openverse and, if you turn it on, Pinterest (in a separate Chrome window, inside your own account) are also contacted directly from your computer. These providers are third parties chosen by you; their privacy policies apply.

Anonymous usage totals (on by default)

This is on by default, with no popup, and you can turn it off at any time in the app under Settings → Privacy, where the app also shows you the exact data it sends. While it is on, the app sends our server, at most once a day, the anonymous usage totals together with your license ID:

your license ID (a hash of your license key, not the key itself) and a machine hash (the same hashed machine ID the license check uses);
the date (UTC) and the app version;
five cumulative counts (the totals): slideposts exported, views, likes, comments and shares. The last four are numbers you typed into the Analytics page of the app (later, if you connect TikTok, taken from TikTok). Posts you add in Analytics by their link count the same way: the app reads the post id from the link on your computer and sends no request to TikTok; only the numbers you type in (or, once you connect TikTok, the ones TikTok reports for your own posts) go into the totals, never the links.

Not sent: your content, captions, images, file names, account names or email address. The request is signed with a key derived from your license key; the license key itself is not sent.

Because the license id can be linked to your purchase, these counts are pseudonymous personal data, not anonymous data. We call them “anonymous usage totals” because only totals across several people are ever shown.

Purpose: to show aggregate numbers (for example slideposts, views and likes of the last 60 days) on the home page. They are shown only as totals across at least 5 users; until then the page shows a figure entered by hand and says so. We never publish an individual’s numbers.

Legal basis: our legitimate interest in showing honest aggregate usage numbers, which you can object to at any time simply by turning the setting off. Retention: the daily snapshots are deleted after 400 days.

Turning it off: switch it off in Settings → Privacy. The app then stops sending immediately, and you can switch it back on whenever you like. Snapshots already stored stay until they are deleted after 400 days; to have them deleted sooner, write to support@fyslide.com.

TikTok (optional)

The TikTok features of the app are off until you connect a TikTok account in the app under Settings → Connections. You can connect several of your own accounts; each one is authorized and stored separately, and every post goes to the one account you choose. They are only available in app versions where TikTok has enabled them for Fyslide. This section says what is sent, when, and what we keep.

Connecting. The app opens TikTok’s own login page in your web browser. After you approve, TikTok sends a one-time authorization code to a temporary address that exists only on your computer. The app passes this code to our server, which adds the credentials of the Fyslide app at TikTok (kept secret on our server) and forwards the request to TikTok. TikTok answers with your access tokens, which our server hands straight back to your computer. Our server does not store or log the code or the tokens. The request is signed with a key derived from your license key, like the usage totals, so only licensed apps can use it; it carries your license id and machine hash for that check.
Where your tokens live. Only on your computer, encrypted with the system’s secure storage (the macOS Keychain on a Mac, Windows DPAPI on Windows). We never have a copy. The app renews them when they expire through the same forwarding step.
Posting. Nothing leaves your computer until you press Post and confirm. If you schedule a post instead, you fill in and confirm the same form for that one post, and the app sends it at the planned time from your computer, only while the app is open and only if TikTok still offers the settings you chose; nothing about a scheduled post is stored on our server before that time. TikTok accepts photos only from a web address it has verified with us, so the app converts your slides to JPEG and uploads them to our server for a short time. Each slide sits behind a long random web address that TikTok downloads from. We delete the slides as soon as TikTok has fetched them, the post fails or you cancel it, and in every case automatically after 2 hours at the latest. During that time anyone who knows the exact web address could open the image; the address is random and is not published. We do not look at, copy or reuse the images. Your title, caption, privacy and comment settings go from your computer straight to TikTok, not through us.
Statistics. If you use the TikTok statistics in the Analytics page, your computer asks TikTok directly for the view, like, comment and share counts of your public posts and keeps them on your computer. We receive them only as part of the optional anonymous usage totals above, if you turned those on.
Disconnecting. Settings → Connections → Disconnect (per account) asks TikTok (through our server, which does not keep the request) to revoke the access and deletes that account’s tokens from your computer. You can also remove Fyslide in the app permissions of your TikTok account at any time.

TikTok itself processes what you post and your account data as described in TikTok’s Privacy Policy; we are not TikTok’s processor and TikTok is not ours. Legal basis: your request and consent, which you can withdraw by disconnecting. Retention: staged slides at most 2 hours; nothing else about TikTok is kept on our servers.

This website

We set no tracking cookies and use no advertising trackers. The only cookie is a strictly necessary one: when you start a checkout, your browser gets a random code (httpOnly, 2 hours, only sent to our license server) that lets the thank-you page show your e-mail address to you and to nobody who merely has the link. Visits are counted with Vemetric (see Website analytics below).
When you buy, Stripe processes your payment. We receive and store your purchase email, the order (amount, currency, Stripe references), the time you accepted the Terms, EULA and Privacy Policy with the version you accepted, and the license record (key, activation with hashed machine ID and computer name, deactivations). We never see or store your card number.
We send your license key and related messages by email via Resend.
Standard server logs (such as IP address and time) are kept by our hosting provider for security and operation. The license server also uses short-lived rate-limit records to prevent abuse.

Bug reports

If you send a bug report, from the form on this website or from the app, we receive what you wrote (your message and, if you add them, the steps), your e-mail address, the platform (Mac or Windows), the app, system and processor details you or the app give, and, if you add your license key or the app sends its activation token, we look up the e-mail address and status of that license on our server. The report reaches our support mailbox as an e-mail through Resend. We do not store reports in our own database or server logs; they stay in the mailbox. We use them only to answer you and to fix the problem, and keep them no longer than that needs. Do not put passwords or API keys in a report.

Website analytics

To see which pages help people and where they get stuck, fyslide.com uses Vemetric, a web analytics service hosted in the EU. It works without cookies.

What is recorded: the page address (without the checkout reference of the purchase confirmation page, which is removed before anything is measured), the referring page, a few clicks (download buttons together with the build chosen, Apple Silicon, Intel or Windows; pricing and buy buttons; links to other sites), and the purchase confirmation itself, together with browser, operating system, device type and the country derived from your IP address.
No cookies and no profile across days: Vemetric recognises a returning visitor on the same day only, through a hash that changes daily. We never send your name, email, license key or payment details to Vemetric.
The script and the data go through fyslide.com (no request from your browser to another analytics domain).
If your browser sends the Global Privacy Control signal, nothing is measured.

Download counter

When you download the app, our server adds one to a counter that holds only the date, the platform (Apple Silicon, Intel or Windows) and the number of downloads. We do not store your IP address, device, browser, a cookie or anything that identifies you with it.

Purposes and legal basis

To deliver and manage your license and to answer support requests (performance of contract), to prevent fraud and abuse (legitimate interest), and to meet accounting duties (legal obligation). The cookieless website analytics serve our legitimate interest in understanding and improving this website. The anonymous usage totals rest on our legitimate interest and can be switched off at any time; the TikTok features are processed only at your request and with your consent (see above).

Processors

Stripe: payments.
Resend: sending license emails and delivering bug reports to our support mailbox.
Neon: database for license records.
Vercel: website hosting.
Vemetric: cookieless website analytics (servers in the EU).

Some of them process data outside Switzerland and the EU, under standard contractual clauses or equivalent safeguards.

Retention

Purchase and license records are kept as long as the license exists and as long as accounting law requires. Usage-total snapshots are kept for 400 days. Slides staged for a TikTok post are kept for at most 2 hours. Website analytics data is kept by Vemetric for the retention period of our plan (at most 5 years) and then deleted.

Your rights

You can ask for access, correction or deletion of your data, or object to processing, by writing to support@fyslide.com. You may also complain to your data protection authority. Who is responsible: see the imprint.