Privacy Policy
Effective 4 November 2026

What data we collect, why, who else processes it, how long we keep it, and your rights over it. This policy follows Indonesia’s Personal Data Protection Law, Law No. 27 of 2022 (UU PDP).
1. Who we are
The controller of personal data for this service is rapislide.com. Questions and requests about personal data go through the Support page under the topic Account & data.
2. Data we collect
- Account data: your WhatsApp number, the email address and name from your Google account if you sign in with Google, and your password as a hash.
- Order contacts: the WhatsApp number, email, and invoice name you enter when ordering or paying.
- Order content: the files you upload, your brief, logo, style choices, and the deck we produce.
- Payments: amount, status, method, and transaction number from the payment provider. We never receive card or bank details.
- Complaints: the messages, attachments, and contacts you write in a ticket.
- Technical data: IP address, browser type, and a random device identifier in a cookie, for security and usage limits.
- Analytics and advertising data, only if you allow it in cookie settings. Details are in the Cookie Policy.
3. What we use data for
- Making and delivering your deck. Uploaded files are stored privately and used only for that order, including its revisions and complaints.
- Processing payments, issuing invoices, and refunding when needed.
- Sending sign-in codes and order updates by WhatsApp or email.
- Answering your complaints and requests.
- Keeping the service secure and preventing abuse, such as limiting free previews per device.
- Measuring visits and ads, only with your consent.
We do not sell your files or deck content, and we do not use them as examples on the site without your written permission. We do not send promotions by WhatsApp or email without your consent.
The legal bases are: performing our agreement with you (orders, payments, complaints), legal obligations (financial records), legitimate interest (service security), and your consent (analytics and advertising cookies).
4. Who else processes data
We use a few service providers. Each one only receives the data it needs for its job:
- Anthropic: AI processing. Our system sends the content of your files and brief to Anthropic’s AI models to write the deck content.
- Magnific: image generation. Magnific receives short image descriptions our system writes from the deck topic, not your files.
- Fonnte: WhatsApp messages (sign-in codes, order updates, invoice links). Fonnte receives the destination number and the message.
- Our email provider (Resend), once enabled: sending invoices and complaint replies to your email.
- The payment provider: processing your payment.
- Google: sign-in with Google. If you allow it, also Google Analytics and Google Ads.
- Meta: Meta Pixel and the Conversions API, only if you allow marketing cookies.
Some of these providers process data outside Indonesia. When data is sent abroad, we follow the requirements of the UU PDP. We do not sell your personal data to anyone.
5. How long we keep data
- Files you upload for an order, including our working copies: 30 days after the order is finished or cancelled.
- Result files (PPTX, PDF, preview images): 90 days after the deck is finished or the order is cancelled. Download your deck before then.
- Logos you save to your account: until you delete them or your account is deleted.
- Complaint tickets and their attachments: 365 days after the ticket is closed.
- Order, bill, invoice, and refund records: 10 years, because of financial record-keeping duties.
- Account data: while your account is active, or until you ask us to delete it.
- Usage-limit records (IP address, device identifier): a few days, then deleted automatically.
Orders that are not paid or do not continue for 30 days are cancelled automatically, and the periods above then apply.
Deletion runs automatically several times a day. You can ask us to delete your files and deck sooner through the Support page.
6. Security
Files and decks are kept in private storage. They can only be opened through short-lived links made for the order owner. Access to our systems is limited to people who need it.
If a personal data breach happens, we will notify you and the data protection authority within 3 x 24 hours of finding out, as the UU PDP requires.
7. Your rights
Under the UU PDP you have the right to:
- be told how your data is processed and get a copy of it;
- correct data that is wrong or incomplete;
- have your data deleted, except data we must keep by law (such as payment records);
- withdraw consent, for example for analytics and advertising cookies;
- object to processing or ask for it to be restricted.
How to ask: open the Support page, choose the topic Account & data, and write your request. Send it from the account or device you ordered with, or give the WhatsApp number or email used for the order, so we can confirm the data is yours. We respond within 3 x 24 hours after your identity is confirmed.
You can change your cookie consent yourself at any time through Cookie settings at the bottom of every page.
8. Changes to this policy
If this policy changes, the effective date above changes too. We announce important changes on the site before they apply.