Privacy Policy

What we collect

• Account information: If you create an account, we store your email address and a securely hashed password (managed by Supabase Auth).
• Payment information: Processed and stored by Stripe. We never see or store your credit card number.
• Usage data: We track how many materials you generate to manage plan limits.
• Saved materials: For logged-in users, we store your prompts and generated materials so you can access them in your saved materials history. You can delete individual materials at any time.

What we do not collect

• Student data: We do not knowingly collect, store, or process any student names, health records, or personally identifiable information about your students. Do not enter student PII into the generator.

How we use your data

• To provide and improve the SlickSessions service.
• To process payments and manage your subscription.
• To communicate with you about your account or important updates.
• We do not sell your data to anyone. Ever.

Third-party services

• Anthropic (Claude AI): Powers material generation. Your prompts are processed by their API. See Anthropic's privacy policy.
• Stripe: Handles payment processing. See Stripe's privacy policy.
• Supabase: Manages user authentication. See Supabase's privacy policy.
• Vercel: Hosts the application. See Vercel's privacy policy.

FERPA and student privacy

SlickSessions is not a FERPA-covered entity. We do not have direct relationships with students or access to education records. Educators are responsible for ensuring they do not disclose protected student information when using our service. Prompts sent via our API are processed by Anthropic and are not used to train AI models.

HIPAA notice

SlickSessions is not HIPAA-compliant. Do not enter protected health information (PHI) — including student names, dates of birth, diagnosis codes, or other identifying details — into the generator. Use generic descriptions only (e.g., "7-year-old working on /r/" instead of a student's name).

Data security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication (Supabase Auth with bcrypt), and PCI-compliant payment processing (Stripe).

Your rights

You can delete your account and all associated data at any time by contacting us. We will remove your information within 30 days of your request.

Contact

Questions about your privacy? Email us at hello@slicksessions.com.