okkslides

GDPR overview

okkslides publishes a substantial GDPR framework rather than a passing mention. A dedicated Notice to European Users covers the EEA and the United Kingdom, Autogent declares itself controller, and a table maps each processing purpose to a legal basis, with AI model training resting on legitimate interests. The seven data subject rights are listed and exercised by email, and complaint routes to the EDPB and the ICO are given. An Article 27 representative is named: Data Protection Representative Limited, trading as DataRep. That designation is defective in practice, since the postal address given for both the EU and the UK representative is in Abu Dhabi and the contact address is the vendor's own mailbox. The policy takes effect on 8 August 2025. The site never writes the words GDPR compliant anywhere.

Who owns the data?

The terms state plainly that Autogent does not claim ownership of user content. What it takes instead is a licence, and the licence is wide: fully paid, royalty-free, perpetual, irrevocable, worldwide, non-exclusive and fully sublicensable, moral rights included, to use, modify, adapt, distribute, publicly perform and publicly display anything uploaded or generated. Collaborators you invite receive a narrower, revocable licence. The account itself is not yours either, the terms assign all rights in it to Autogent, and they warn there is no expectation of privacy in transmitted content. Nothing obliges Autogent to store that content, and closing an account may delete it outright.

Reuse rights

Users keep full freedom over the decks they produce. Nothing in the terms restricts what they do with generated slides, and export to an editable .pptx file is a core feature rather than a paid extra, so material can be reworked in PowerPoint and reused commercially without asking permission. Two limits apply in the other direction. Anything published to the community gallery becomes visible to other users and to the public, and content pulled in from a linked third-party account stays governed by that service's own terms. The user also warrants that whatever they upload infringes nobody's rights, which places the entire licensing burden on them rather than on the vendor.

Data retention & training

Hosting summary

The privacy policy states that Autogent is based in the United States and that using the service necessarily means personal information is accessed and processed there. It adds that data may reach recipients in other countries outside Europe, without naming any of them. For European users the policy is unusually candid: it states that the United States is not covered by an adequacy decision and that its legal regime is therefore not regarded as offering protection equivalent to European law. Where data goes to third parties outside Europe, one of two mechanisms is said to apply, namely transfer to a territory holding an adequacy decision, or appropriate safeguards such as approved standard contractual clauses, with explicit consent as a limited fallback. No hosting provider is named, no data centre location is given, and no data residency option is offered. The domain resolves to a content delivery network edge node, which says nothing about where the data itself is kept.