Privacy Policy
How Slapeo collects, uses and protects your data: the account and content we store, where it lives, who processes it, how long we keep it, and the rights you have.
Who we are
Slapeo is a video automation platform operated by 414 Aptitudes, a société par actions simplifiée with a share capital of 1,000 euros, registered with the Paris trade and companies register under number 948 518 287, whose registered office is at 6 rue d’Armaille, 75017 Paris, France. We are the controller of the personal data described here. For any question, or to exercise your rights, write to privacy@slapeo.ai.
What this policy covers
This policy covers the slapeo.ai website, the Slapeo application and its mobile app, and our documentation. It describes what data we collect, why, who we share it with, and the rights you have.
What we collect
Waitlist. When you join the waitlist we store the email address you submit, the date you joined, and the language of the page. That is all: no name, no phone number, no profiling. Your IP address is used at that moment to throttle abusive sign-ups, and is not kept.
Your account. When you create an account we store your email address, your name, your profile picture if you add one, and a password that is never stored in clear text. If you turn on two-factor authentication, we keep the secret and backup codes it needs to work. If you sign in with Google, we receive your email, name and picture from Google, along with the technical tokens that let us recognise you.
Your sessions. Every sign-in session records your IP address and your browser. This lets us show you your active sessions and spot unusual access.
What you hand us to process. When you submit a video, by link or by file, we keep that link or file, its title, thumbnail and duration, the transcript of its audio, the analysis of the moments we picked, the shorts we produced, and your editing settings. If your video contains personal data, it is handled like the rest of that content: we use it for nothing other than producing what you asked for.
Mobile app. If you allow notifications, we keep your device's notification identifier and its language.
Technical logs. Our infrastructure keeps short-lived logs (IP address, browser, requested URL) and error reports, for security and debugging.
Payment. Payments are not open yet. When they are, they will go through Stripe: we will never see or store your card number.
What we use it for
Your waitlist email serves exactly one purpose: telling you when your access is ready, and the occasional meaningful product update before that. Every email includes a way to opt out.
Account and session data is used to authenticate you, secure access and contact you about the service. The content you submit is used to produce your shorts and nothing else: we do not use it to train any model, we do not resell it, we do not share it with advertisers. Usage analytics and logs let us understand what works and fix what breaks.
Our legal bases are the performance of our contract with you when you use the service, your consent for the waitlist and notifications, and our legitimate interest in securing the platform and measuring its use in aggregate.
Cookies and local storage
We run no advertising cookies and no third-party trackers, which is why you do not see a consent banner.
One cookie remembers the language you chose, for a year. One session cookie keeps you signed in to the application. Your light or dark theme choice is kept in your browser's local storage, not in a cookie, and never leaves your device. The waitlist form is protected by Cloudflare Turnstile, which checks that you are not a bot without tracking you across sites.
Our audience measurement is aggregated and cookieless: it cannot be used to identify you.
Where your data lives
Our database is hosted in the European Union, in Frankfurt, Germany, and the servers running the site and the application are in a European region too. Your video and audio files are stored with Cloudflare R2, in Western Europe. The video and audio processing that needs graphics cards runs at our compute provider RunPod, which may operate outside the European Union: those transfers rely on the European Commission's standard contractual clauses.
Our processors
We rely on a small number of providers, who process data on our behalf and under their own contractual commitments: Vercel for hosting and aggregated analytics, Neon for the database, Cloudflare for file storage and bot protection, Upstash for the processing queue and cache, RunPod for the compute behind transcription, analysis and rendering, Resend for our emails, Google only if you choose to sign in with Google, Stripe for payments once they open, Sentry and Better Stack for error reports and technical logs, and Expo for mobile notifications.
How long we keep it
Waitlist emails are kept until you get access to the product or ask us to delete them, whichever comes first.
Your account data and the content you entrust to us are kept for as long as your account exists. You can delete your account at any time from the application: deletion is confirmed by email, then erases your account data, your videos and the shorts produced from them.
Technical logs and error reports are kept for a few weeks at most.
Your rights
Under the GDPR you can ask us at any time to access, correct, export, delete or restrict the processing of your data, to object to it, and to withdraw a consent you gave us. Write to privacy@slapeo.ai and we will answer within a month. You can also lodge a complaint with your data-protection authority, in France the CNIL.
Security
Traffic to our servers is encrypted. Passwords are never stored in clear text, the files you entrust to us are not publicly accessible, and our team's access to customer content is logged.
Minors
Slapeo is not intended for people under 16 and we do not knowingly collect their data.
Changes to this policy
If this policy changes in a way that matters, we will note it here with a new "last updated" date before the change takes effect.