Last updated: September 2025
Our Commitment to Your Privacy
At DoodleToSlide (operated by nxioai), we take your privacy seriously. We built our service with privacy-first principles, ensuring your creative work remains yours alone.
Privacy by Design
- ✓All images are automatically deleted after 5 minutes
- ✓No permanent storage of your drawings
- ✓No training on your data
- ✓End-to-end secure processing
Information We Collect
1. Account Information
When you create an account using Google OAuth, we collect:
- Your email address
- Your name (as provided by Google)
- A unique user identifier
2. Images You Upload
Memory-Only Processing: Images are processed entirely in server memory and never stored to disk. We do not:
- Store images to any database or file system
- Use your images for AI training
- Share your images with third parties beyond AI processing
- Create backups or copies of your images
3. Usage Information
We collect basic usage metrics to improve our service:
- Number of conversions performed
- Processing time statistics
- Error rates (without image content)
- Feature usage patterns
How We Use Your Information
Image Processing
Your uploaded images are processed in server memory and sent to Google's Gemini AI for conversion to professional drawings. Images are never written to disk and exist only in memory during processing.
Service Provision
We use your account information to provide you with access to the service, manage your credits, and communicate important updates about your account.
Service Improvement
Anonymous usage statistics help us identify and fix issues, optimize performance, and develop new features based on actual usage patterns.
Data Security
We implement multiple layers of security to protect your data:
- Encryption in Transit: All data transfers use HTTPS with TLS 1.3 encryption
- Secure Authentication: OAuth 2.0 with Google for secure sign-in
- Automatic Deletion: 5-minute automatic deletion ensures minimal data retention
- Access Controls: Strict server access limited to essential personnel
- Infrastructure Security: Hosted on secure cloud infrastructure with regular security updates
Sub-processors
In accordance with GDPR, we maintain this list of sub-processors who process personal data on our behalf to deliver DoodleToSlide services:
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Cloudflare | CDN, DDoS protection, SSL/TLS | IP addresses, usage data | Global (US-based) |
| OAuth authentication, AI processing | Email, name, temporary images | United States | |
| OpenRouter.ai | AI model routing | Temporary images for processing | United States |
| Polar.sh | Payment processing (Merchant of Record) | Payment information, email | United States |
| Supabase | Database and authentication | User accounts, usage data | EU (Frankfurt) |
| Hetzner | Server infrastructure | Temporary in-memory image processing | Germany |
| Resend | Transactional emails | Email addresses | United States |
| Simple Analytics | Privacy-focused analytics | Anonymous usage data | Netherlands |
| Statsig | Feature flags | User ID, feature usage | United States |
Sub-processor Commitments
- • All sub-processors are bound by Data Processing Agreements (DPAs)
- • Each sub-processor commits to GDPR compliance where applicable
- • We will notify users of any changes to this sub-processor list
- • Images are processed temporarily and never stored permanently by AI sub-processors
Your Rights
You have the following rights regarding your personal data:
Right to Access
You can request a copy of the personal data we hold about you.
Right to Deletion
You can request that we delete your account and all associated data. Images are automatically deleted after 5 minutes.
Right to Correction
You can update your account information at any time through your account settings.
Right to Data Portability
You can request your data in a machine-readable format.
Data Retention
Our Data Retention Policy
Images: 5 Minutes
All uploaded and generated images are automatically deleted after 5 minutes.
Account Data: Until Deletion
Your account information is retained until you request deletion or close your account.
Usage Logs: 30 Days
Anonymous usage statistics are retained for 30 days for service improvement.
Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy.
Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
nxioai
Email: [email protected]
Website: nxio.ai
© 2025 nxioai. All rights reserved. DoodleToSlide is a product of nxioai.