Privacy policy

How CarouselDraft uses account, source, project, and payment information.

Information we process

CarouselDraft processes your email address, account identifiers, sign-in sessions, and, if you choose Google sign-in, the name and profile image supplied by Google. Google access is limited to basic sign-in identity: email, profile, and OpenID. We do not request Gmail, contacts, Drive files, or social publishing permissions.

Projects contain the source text you submit or extract from an article or text-based PDF, slide content, source references, brand settings, reusable images, task results, and generated files. Text extracted from a PDF is saved with the project; the uploaded PDF is not retained as an original file. Support requests may contain the information you choose to send.

How we use information

We use information to sign you in, keep projects available, generate and export slides, manage allowances and subscriptions, respond to support requests, and protect the service against misuse. Authentication cookies are necessary for sign-in. Browser storage also saves editor preferences and local recovery drafts. We do not sell account or project data or use Google sign-in data for advertising or AI training.

Service providers

• Google provides optional sign-in and receives the normal sign-in request and connection information. CarouselDraft uses the returned basic identity to create or link your account.
• Resend delivers sign-in codes from auth.carouseldraft.com and receives the destination email and message content.
• KIE processes the source passages and slide text needed for AI generation and rewriting through its Claude model service. Sign-in tokens, payment details, and the uploaded PDF file are not included in these model requests. Avoid submitting secrets or sensitive personal information in source material.
• Stripe hosts checkout and the billing portal. It processes payment information and receives your account email and the identifiers needed to connect a payment to your account. CarouselDraft stores customer, subscription, and billing-event identifiers and status; full card details are entered on Stripe and are not stored by CarouselDraft.
• Hostinger hosts the application, database, and private files. Cloudflare provides DNS, encrypted traffic delivery, and security filtering, and processes connection information such as IP addresses and request metadata. Spaceship forwards support mail to the support mailbox.

These providers may process information outside your home country and apply their own privacy and record-retention terms. The current processor policies are available at policies.google.com/privacy, resend.com/legal/privacy-policy, kie.ai/privacy-policy, stripe.com/privacy, hostinger.com/privacy-policy, cloudflare.com/privacypolicy, and spaceship.com/legal/privacy-policy. We do not promise a separate no-retention or no-training arrangement with an AI provider unless expressly stated.

Security and access

Projects and private downloads require the signed-in owner. Access controls, encrypted website connections, protected service credentials, and abuse limits help protect information. Authorized service administration and infrastructure providers may access data as needed to operate or support the service. No system can guarantee absolute security.

Your choices and requests

Use Account to download your data or request deletion, and delete individual projects or unused reusable images from the workspace. You can revoke Google access in your Google account; revoking access does not automatically delete your CarouselDraft account. For access, correction, deletion, restriction, portability, or other privacy requests available under applicable law, email [email protected] from your account email. We may need to verify ownership and may retain records where required by law.

Retention and policy updates

The Data retention policy explains active data, export-file expiry, and backup copies. Payment providers retain their own records independently. CarouselDraft is intended for people legally able to use the service; do not submit children’s personal information. Changes to this policy are published with an updated date; changes to the use of Google data require the applicable notice and consent before that new use begins.