This policy describes what Beem Slide stores when you use the service, what we deliberately do not store, who processes data on our behalf, and how you can take your data out or delete it.
What we store
- Account: name, email, avatar, a salted password hash if you set a password, and the identity from any OAuth provider you connect.
- Your work: decks and their version snapshots, themes, attachments, and your copilot conversation history — stored server-side so your workspace survives devices.
- Usage accounting: per-turn AI usage counts, kept to enforce the monthly allowance your plan includes. The usage panel shows you the same numbers.
- Access tokens: if you use the CLI, we store a hash of each token — never the token itself — with its creation and last-use times, so you can review and revoke them.
What we deliberately don’t store
Analytics on your published decks are designed to answer “is anyone reading this?” without profiling readers. Per visit we keep: a random visitor id scoped to that one publication, country (from the network edge), browser family, pages read and time on page. We do not store visitor IP addresses, full user agents, or referrers, and visitor ids from two different decks cannot be joined — not even by us. Crawler hits are discarded.
Cookies
- A session cookie to keep you signed in.
- A scoped pass cookie when you unlock a password-protected deck, so you don’t retype the password per page.
- Product analytics (PostHog) on this website and in the studio, to understand which features get used. We don’t run third-party ad trackers.
AI processing
Copilot turns are processed by third-party model providers (such as Alibaba Cloud’s US DashScope endpoints, Anthropic, or OpenAI, depending on the model serving your turn). We use API terms under which providers do not train on your content by default. Your deck content is sent to a provider only to serve your own requests.
Who processes data for us
Infrastructure subprocessors: Vercel (web hosting), Neon (database), Cloudflare (object storage and CDN), Fly.io (agent worker), E2B (workspace sandboxes), Resend (sign-in emails), PostHog (product analytics), and the AI model providers above. Payments for paid plans are handled by our merchant of record, who is the data controller for billing details — card numbers never reach our servers.
Where data lives
The service runs in the United States. If you use it from elsewhere, your data is processed in the US.
Your rights
- Export: the account panel has a one-click export — account metadata, every deck’s current snapshot, themes, and conversation history.
- Delete: deleting your account takes publications offline immediately and permanently removes your data after a 30-day grace window (log back in within the window to cancel). Purge covers decks, snapshots, themes, avatars and tokens.
- GDPR/CCPA requests that the panel doesn’t cover: support@beem-ai.dev.
Changes
If this policy changes materially, we’ll say so in the product or by email before the change applies.