Log in See it in action FR Security & data
Adapting a course to each learner means using information about them. Choose what each activity needs, see where it goes and decide how long SlideMind keeps it.
Where the data goes
Your LMS or web page
Sends the learner’s answer, the variables you connect and an identifier, usually supplied by your LMS.
Québec, Canada
Saves only the values you choose, encrypted, and prepares the request from your instructions.
The provider’s own locations
Generates the response under its own terms. SlideMind sends it back to your course.
A memory-only activity stops at SlideMind: it saves and retrieves values without any AI request.
Application & database
The SlideMind application and its database run on OVHcloud servers in Beauharnois, Québec. Backups are kept in the same region.
An AI request is processed by the provider, under its own terms and in its own locations.
Understand provider processingQuébec has one of the most demanding privacy laws in North America. Under Law 25, organisations must assess the risks before sending personal information outside the province, report serious confidentiality incidents to the Commission d’accès à l’information, and face penalties of up to 25 million dollars or 4% of worldwide revenue.
The European Union also recognises that Canada provides an adequate level of protection for data handled by businesses, a status it confirmed in 2024; the United Kingdom and Switzerland recognise it too. Personal data from these countries can be entrusted to SlideMind without an additional transfer mechanism. This applies to SlideMind’s hosting: AI requests follow the provider’s terms and locations.
Protection
Learner identifiers, saved learner values and provider API keys are encrypted with AES-256-GCM, using a separate key for each workspace. All connections use HTTPS.
The database is backed up every six hours. Each backup is encrypted before it leaves the server, and the key that decrypts it is not kept there. Copies are kept for 30 days.
Each workspace’s data is isolated in the database: one workspace can never read another’s. Courses only reuse the values you choose, and access is rate-limited and monitored.
Sign-in requires a verified email address. Two-factor authentication is available, you can review and close active sessions, and sensitive actions are recorded in a log the workspace owner can consult.
Your settings
Your learners
For a Q&A or Chat widget, turn on the AI notice. Before answering, learners see a short message, a link to your privacy policy and a button to continue.
Your organisation decides what learners are told and obtains any consent required. A few habits help:
AI processing
With SlideMind Credits
SlideMind sends them only to paid AI services whose terms exclude training on your inputs and outputs. DeepSeek and GLM models run on Together AI’s servers, not on DeepSeek’s or Z.ai’s.
Models from these providers are included with SlideMind Credits.
With your own API key · Pro and Agency
Your contract and data settings with that provider apply. The key is encrypted in SlideMind and used only to call that provider.
Supported providers.
OpenRouter 
AI requests are processed by external providers. For their handling of your inputs and outputs, review the terms that apply to the selected model, service and account.
A provider may keep records for abuse monitoring, service features or legal requirements, even when the data is excluded from general model training. Provider retention is separate from the memory and logging settings you choose in SlideMind.
We review provider policies when we update the models offered with SlideMind Credits. Providers can change their policies; SlideMind cannot guarantee them.
For your IT and privacy teams
No. Learners use the widget inside your course. When your LMS provides it, the widget identifies them automatically.
No. SlideMind does not train models. Requests made with SlideMind Credits go to paid AI services whose terms exclude training on your inputs and outputs. With your own API key, your provider account’s settings apply.
Your organisation decides what is collected and why, informs learners and obtains any consent required. SlideMind processes that information on your behalf, according to your workspace settings.
A deleted workspace or closed account has a 30-day recovery period, with read-only access and export. Everything is then permanently deleted, and the backups that contained it expire within 30 days.
If a confidentiality incident presents a risk of serious injury, we notify the people concerned and the Commission d’accès à l’information, as the law requires. When an incident involves learner information, we promptly inform the organisation responsible for it.
Write to our privacy officer at privacy@slidemind.app.
The privacy policy also lists our service providers, retention periods and your rights.
Read the privacy policyKeep the idea going.
Tell us what your organisation needs to know about security, privacy or data retention.
May we use Google Analytics cookies to understand visits and improve this site? Your demo answers are not sent. You can change your choice at any time.
Privacy policy