Privacy Policy

At Automagical Apps, we believe that education technology must be private by design. This Privacy Policy outlines how Slides Translator (the "Add-on") operates with a "Privacy-First" architecture to protect students, teachers, and businesses globally.

1. Information We Collect

Our philosophy is simple: we cannot lose data that we do not have. We have minimized data collection to the absolute technical minimum required to function.

A. Ephemeral Content Processing (No Storage)

When you use Slides Translator to translate text, speaker notes, or images:

• Your content is sent securely to our enterprise-grade translation engines and neural networks.
• This processing is stateless and ephemeral. The content exists in memory only for the duration of the translation request.
• We do not store your slide content, text, or images on our servers. Once the translation is returned to your Google Slide, the data is discarded from our processing environment immediately.

B. Account Information (Hashed & Salted)

To manage individual license purchases, we need to identify unique users. However, we do not store your actual email address in a readable format.

• Cryptographic Hashing: We hash and salt your email address before it ever reaches our database. This creates a unique identifier string (e.g., a3f9...) that allows us to count usage quotas without knowing who you are.
• Result: If our database were ever compromised, it would contain no readable email addresses and no PII (Personally Identifiable Information).

2. Student Safety & Education Compliance (FERPA & COPPA)

• No Student Profiles: We do not build profiles on students.
• No Targeted Advertising: We do not use any data collected for advertising purposes. There are no ads in the add-on.
• No Data Sale: We do not sell, trade, or rent user data to third parties.

3. GDPR & International Users

If you are accessing Slides Translator from the European Economic Area (EEA), the United Kingdom, or Switzerland, you have specific rights under the General Data Protection Regulation (GDPR).

A. Legal Basis for Processing

We process your data under the following legal bases:

• Contractual Necessity: Processing your inputs is necessary to fulfill the service you requested (i.e., translating the slide).
• Legitimate Interests: We use aggregated metadata to improve the stability and security of our application.

B. Your Rights

• Right to Access & Portability: You may request a copy of the hashed data we hold associated with your account.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete all hashed records associated with your account.

To exercise these rights, please contact our Data Protection Officer (see Section 8).

4. California Privacy Rights (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) and CPRA, California residents have specific rights regarding their personal information.

• No Sale of Personal Information: We do not sell your personal information. We have not sold any personal information in the preceding 12 months.
• Right to Non-Discrimination: We will not discriminate against you (e.g., by denying services or charging different rates) for exercising your privacy rights.

5. How We Use Neural Machine Translation

Slides Translator utilizes advanced state-of-the-art Neural Machine Translation (NMT) to provide translations.

• Zero Training Policy: Data submitted through Slides Translator is NOT used to train the AI models of our providers. We use enterprise-grade APIs with strict "No Training" data privacy agreements.

6. Data Storage and Security

Our infrastructure is built entirely on the Google Cloud Platform (GCP) and Google Apps Script environment.

• Encryption: All data transmission occurs over SSL/HTTPS (TLS 1.2+). Any minimal metadata stored is encrypted at rest using AES-256.
• Data Residency: Our primary processing servers are located in the United States. By using this service, you acknowledge that your data will be processed in the US.

7. Subprocessors

We leverage industry-leading cloud and AI partners to provide secure and accurate translation services. To protect our proprietary technology stack, we categorize our trusted subprocessors below.

A specific list of vendor names is available to educational institutions and enterprise customers in our Data Processing Agreement (DPA) upon request.

8. Contact Us & DPO

If you have questions about this policy, or if you are a school administrator requiring a signed Data Processing Agreement (DPA), please contact our team.