1. Introduction
SEWPOINT ("we," "our," or "us") provides an AI-powered editing assistant for Google Slides, delivered as a web application and, where offered, API Integration that lets you invoke the same agentic editing workflows as the dashboard through our Native API, authenticated with API keys you create in your account (collectively, the "Service"). This Privacy Policy describes how we collect, use, store, and protect your information when you use the Service.
Note (as of the Last updated date above): API Integration is not yet generally available. Provisions in this Policy that mention API Integration describe how the feature will operate once and to the extent it is enabled for your account. Until enabled, those provisions do not apply to your use of the Service.
By accessing or using SEWPOINT, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with these practices, please do not use the Service.
2. Information We Collect
2.1 Account Information
When you sign in with Google, we receive your Google account email address, display name, and profile picture. We do not offer email-and-password registration; your Google account is your sign-in method.
2.2 Google Workspace Data
To provide core editing features, the Service accesses only the Google Workspace files you explicitly specify in SEWPOINT, under drive.file (per-file consent). Data accessed may include:
- File identifiers, page dimensions, and background settings
- Element layout and formatting (positions, sizes, fonts, colors, alignment)
- Text content, table structures, and chart data
- Thumbnails fetched temporarily for AI visual analysis
This data is processed transiently to fulfill your request and is not permanently stored as part of your account. Transient copies retained for processing or troubleshooting are kept for up to seven (7) days, unless a longer period is required by law. You may request earlier deletion by contacting admin@sewpoint.app.
2.3 Usage and Operational Logs
If you delete your Agent Studio chat history or an entire conversation in the app, we remove that conversational content from our databases and do not retain logs attributable to chats you have deleted.
Separately—and only for coarse operations analytics—we maintain rolling usage and operational logs including:
- Timestamps of API requests (UTC)
- Operation category (for example slide editing vs. template generation)
- Approximate model token footprint and indicative cost estimates
- Any credits accounted for against your account balance
Those logs serve billing integrity, abuse-resistant rate limiting, operational security, and product quality. By default they expire after seven (7) days unless a longer retention period is mandated by applicable law.
Each billable task run is assigned a Run ID (a random identifier) shown in your Dashboard → Logs (and on matching credit deductions). A Run ID is not a password; it helps us locate your run when you contact support. Please send Run IDs only through private email to admin@sewpoint.app from the email address associated with your SEWPOINT account—do not post Run IDs together with your email address on public forums or social media.
2.4 Templates and Saved Style Assets
Slide-derived templates store formatting intelligence only—page layout geometry, typography, palettes, sizing, anchors, plus summarized structural metadata about charts (how ranges and series are wired) so assistants can revisit the schematic. Those records exclude underlying numeric datasets, verbatim axis/body labels, prose, spreadsheet cell payloads, tables of figures, or any other substantive copy surfaced on your deck.
Intermediate Markdown previews are meant for review: you edit them freely in the dashboard and nothing is persisted to our relational database unless you expressly save. Deleting the template wipes every associated row and object—we leave no residual extracts.
Certain flows may propose copying raster assets such as logos clipped from your slides strictly to reuse placement and sizing for visual consistency in slides you subsequently generate. Such binaries are transmitted to SEWPOINT storage only after you explicitly opt in for that specific workflow run—opt-in is granted per operation and is never blanket or implicit. We retain those assets solely to recreate the styling scaffolding you approved, you may delete them at any time from your account settings, and they are never used to train or improve any AI/ML model, never repurposed beyond the workflow you initiated, and never shared outside the minimal processing path strictly required to deliver that workflow.
2.5 Technical and Device Information
Our hosting infrastructure may log your IP address, HTTP User-Agent string, referrer URL, and request timestamps. This information is used for rate limiting, security monitoring, and abuse prevention.
2.6 Payment Information
When you purchase credits through Dashboard → Credits, you are redirected to checkout hosted by our payment service provider, Stripe, Inc. and its affiliates ("Stripe"). Stripe processes your payment; SEWPOINT does not receive or store your card number, bank account details, or other raw payment credentials.
We receive from Stripe: confirmation of successful payment, amounts charged (including tax breakdown where applicable), checkout session and payment references, and other data needed to credit your account and maintain billing history.
What we store on our side:
- Payment order records (package, amounts, tax, status, timestamps, and payment references)
- Credit transaction records (amount, type, timestamp) — see §2.3
- Checkout consent timestamps where applicable (Terms and UK/EU immediate-delivery consent)
What we do not store: card numbers, CVV codes, bank account numbers, or any other raw payment credential.
Payment data you enter at checkout is collected and processed by Stripe. Stripe's Privacy Policy describes how Stripe processes payment data; Stripe's applicable Services Agreement may also apply. SEWPOINT remains responsible for the Service under our Terms & Conditions and this Privacy Policy.
You may contact us at admin@sewpoint.app with billing or refund questions. Deleting your SEWPOINT account removes your billing history on our side; any payment methods managed by Stripe are handled through Stripe's checkout flow on future purchases.
2.7 API Integration Data
Status: API Integration is in development and not yet generally available. The following describes how the feature will operate once enabled for your account.
If you use API Integration through our Native API (when offered), you authenticate with API keys you create in the dashboard. Requests are processed through SEWPOINT’s agentic workflows—the same class of slide-editing capabilities available in the web application. Data needed to fulfill each request may pass through SEWPOINT’s systems transiently during processing.
We maintain operational logs for API Integration consistent with Section 2.3 (for example timestamps, operation category, token footprint, and credit accounting). We do not use API Integration traffic for advertising or model training, as described elsewhere in this Policy.
You are responsible for keeping your API keys confidential, rotating or revoking keys you no longer need, and notifying us if you believe a key has been compromised.
3. How We Use Your Information
We use the information we collect to:
- Provide the Service: authenticate you, execute slide editing tasks, generate style templates, and manage your account
- Improve the Service: analyze aggregated, non-content usage patterns, diagnose issues, and develop new features
- Communicate with you: send account-related notifications and respond to support requests
- Ensure security: detect and prevent fraud, abuse, and unauthorized access
- Comply with legal obligations: respond to lawful requests from competent authorities
What we will not do with your data. We do not sell your personal information. We do not use your data—and in particular we do not use any data received from Google APIs—for advertising, retargeting, personalized advertising, user profiling, or assessing credit-worthiness. We do not use your Google Workspace content, slide thumbnails, or any other data received from Google APIs to develop, improve, or train generalized or foundational AI/ML models, and we contractually require our service providers (including AI inference providers) not to do so either. AI features within SEWPOINT operate per request to fulfill the workflow you initiate; the inputs and outputs of those requests are not retained by us or our providers for model training.
4. Google API Data Use Disclosure
SEWPOINT's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, we commit to the following with respect to all data received from Google APIs (including, but not limited to, content from files you specify, thumbnails, file metadata, and any embedded text, images, or chart data):
-
User-facing use only. We access, use, and process Google API data only to provide and improve user-facing features that are prominent in SEWPOINT's interface—specifically the slide editing assistant, the style-template generator, and the related workflows you directly invoke from the dashboard. We do not use Google API data for any other purpose.
-
No advertising or eligibility decisions. We do not use Google API data for serving advertisements of any kind, including retargeting, personalized, or interest-based advertising. We do not use Google API data to determine credit-worthiness or for any lending purpose.
-
No sale, restricted transfer. We do not sell Google API data. We transfer Google API data to third parties (including AI model providers) only to the minimum extent necessary to fulfill the specific request you initiate, to comply with applicable law, or with your explicit consent. Any such transfer is subject to written agreements imposing equivalent or stronger protections on the recipient.
-
No generalized AI/ML training. We do not, and our service providers (including AI inference providers) are contractually prohibited from, using your Google Workspace data—including file content, thumbnails, layout metadata, chart structures, and any embedded text or images—to develop, improve, or train generalized or foundational AI/ML models. AI features inside SEWPOINT operate per request to fulfill the workflow you initiate; inputs and outputs are not retained by us or our providers for model-training purposes.
-
No human reading by default. We do not allow our employees or contractors to read your Google API data, except: (a) with your explicit consent for specific data; (b) where strictly necessary for security purposes such as investigating abuse or fraud; (c) where required to comply with applicable law; or (d) in aggregated and anonymized form for internal operations (such as capacity planning) consistent with applicable law.
Google OAuth scope we request for Workspace editing:
https://www.googleapis.com/auth/drive.file— access only to files you explicitly specify in SEWPOINT or that SEWPOINT creates for you
What we do with authorized files: we read and update only those files to fulfill the instructions you submit. We do not request broad Drive access. We do not list or scan your Drive beyond files you explicitly specify per task.
We request only the minimum OAuth scopes necessary to operate the features you use. For a per-scope justification, the user-facing features that depend on each scope, the in-request data flow, and our security posture for Google API data, see our public Google OAuth Scopes & Data Access page.
Use of Google APIs is also governed by Google's API Terms of Service.
You may revoke these permissions at any time via your Google Account settings.
5. Third-Party Service Providers
We share data with the following categories of service providers solely to operate the Service. We do not sell your personal information, and no provider listed below is permitted to use your data—or any Google API data we transmit to them—to train, develop, or improve generalized or foundational AI/ML models.
| Service Category | Role | Data Shared | Trained on your data? |
|---|---|---|---|
| Authentication and database providers | Account management and data storage | Account data, usage logs, templates | No |
| Payment processor (Stripe, Inc. and its affiliates) | Hosted checkout, payment processing, tax calculation at checkout, refunds | Payment and billing data you provide at checkout (e.g., card details, billing address), transaction confirmations, and references needed to credit your account | No — see Stripe's Privacy Policy; Stripe's applicable Services Agreement may apply |
| Cloud hosting providers | Service delivery and security | HTTP request logs, IP addresses (transient) | No |
| AI processing providers | Language model inference and visual asset generation | Processed slide data, editing instructions, image prompts, reference images | No — engaged under no-training / zero-retention enterprise terms or equivalent contractual restrictions |
| Search providers | Web search for content enrichment | Search queries (never raw Google Workspace content) | No |
Service providers process data only as needed to operate the Service, only for the duration strictly required, and only under written agreements imposing confidentiality and security obligations. Where the provider offers a configuration that further restricts retention or training, we enable it by default.
6. Data Retention
| Data type | Retention period |
|---|---|
| Account data (email, profile, auth tokens) | Until you delete your account; removed immediately upon self-service deletion (see §8) |
| Usage and operational logs (aggregated instrumentation) | Seven (7) days, unless statute demands longer archiving |
| Agent Studio chats & stored messages | Deleted immediately when you erase the conversation inside the dashboard; afterward no conversational logs linger |
| Templates (explicitly saved style guides) | Remain accessible until you delete them—or until the parent account shuts down—as described in §2.4 |
| Transient Google Workspace data | Up to seven (7) days by default; you may request earlier deletion |
7. Data Security
We implement industry-standard security measures including:
- Encryption of data in transit (TLS 1.2+) and at rest
- Encrypted storage of OAuth tokens and other sensitive credentials
- Role-based access controls
- Secure HTTP-only session cookies
No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we will notify you in the event of a breach affecting your personal data as required by applicable law.
8. Your Privacy Rights
8.1 EEA and UK Residents (GDPR / UK GDPR)
If you are located in the European Economic Area or the United Kingdom, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your personal data ("right to be forgotten")
- Restrict processing of your data in certain circumstances
- Object to processing based on our legitimate interests
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with your national supervisory authority (e.g., the ICO in the UK, or your local DPA in the EU)
You may delete your account immediately from Dashboard → Account (self-service). Deletion is permanent and removes associated data as described in this Policy. For other privacy rights, email admin@sewpoint.app from the address associated with your account.
Our legal bases for processing are: contract performance (providing the Service), legitimate interests (security, service improvement), consent (where applicable), and legal obligation.
8.2 California Residents (CCPA / CPRA)
California residents have the right to:
- Know what personal information we collect, use, disclose, or sell
- Delete personal information we hold about you
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information — we do not sell your information
- Non-discrimination for exercising your privacy rights
You may delete your account immediately from Dashboard → Account (self-service). Deletion is permanent. For other rights under this section, email admin@sewpoint.app from the address associated with your account.
9. International Data Transfers
Your data may be processed in the United States or other countries where our service providers operate. When transferring personal data outside the EEA or UK, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent mechanisms, to ensure your data receives adequate protection consistent with this Privacy Policy.
10. Children's Privacy
SEWPOINT is not directed at individuals under the age of 16 (or 13 in jurisdictions where this is the minimum age of digital consent). We do not knowingly collect personal data from children. If we become aware that a child has registered, we will promptly delete their data. Parents or guardians may contact us to request deletion of a child's data.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The revised "Last updated" date at the top reflects the most recent version. We will notify registered users of material changes via email or in-app notification before they take effect. Continued use of the Service after notification constitutes acceptance of the updated policy.
13. Contact Us
For privacy inquiries, data access or deletion requests, or to exercise your rights under applicable law, please contact us:
Email: admin@sewpoint.app
LinkedIn: SEWPOINT on LinkedIn — message SEWPOINT on LinkedIn for business and technical support. You may also email us using the address above.
Mail: SEWPOINT 30 N Gould St Ste R Sheridan, WY 82801 United States
Google Sheets and Google Slides are trademarks of Google LLC.