Legal

Terms of Service

1Acceptance of Terms

By accessing and using ExpertSlides ("Service"), you accept and agree to be bound by the terms and provisions of this agreement. If you do not agree to these terms, you should not use this Service.

We reserve the right to modify these terms at any time. Your continued use of the Service following any changes indicates your acceptance of the new terms.

2Description of Service

ExpertSlides is an AI-powered presentation generation platform operated by ES Solutions GmbH. Our services include:

  • AI-generated presentation content and layouts.
  • Access to presentation templates.
  • Export capabilities — presentations can be exported in PowerPoint (.pptx) format. These files are compatible with, and can be used on, other platforms such as Google Slides or Canva.
  • Cloud storage for your presentations.

3User Accounts

To access certain features of the Service, you must register for an account. When you register:

  • You must provide accurate and complete information.
  • You are responsible for maintaining the security of your account and password.
  • You must notify us immediately of any unauthorized use of your account.
  • You may not use another person's account without permission.

4Subscription and Payments

ExpertSlides offers various subscription plans:

  • Starter Plan: limited access to templates and basic AI features.
  • Pro Plan: full access to features with a set monthly credit allocation.
  • Premium Plan: unlimited access with the highest monthly credit allocation and priority support.

Paid subscriptions are billed in advance on a monthly or annual basis. You can cancel at any time — you will retain access until the end of your current billing period. All fees are exclusive of taxes.

5Credits System

Our Service operates on a credits system:

  • Credits are used for AI generation and downloads.
  • Credits refresh monthly based on your subscription tier. Unused credits do not roll over.
  • Additional credits cannot be purchased separately. To obtain more credits, upgrade your subscription plan (e.g. from Pro to Premium).

6Intellectual Property & Usage Rights

Our Content: the Service, its original features and functionality are owned by ES Solutions GmbH.

Generated Content: you retain ownership of the presentations you create.

Commercial Resale Rights:

  • Premium Plans: you are permitted to resell a modified, finished presentation to one direct end customer.
  • Pro Plans: usage is limited to your own company projects or personal use.

Strict Prohibitions: it is strictly forbidden to sell the templates or generated presentations "as is", as an ad product, on an on-demand service, or as part of another software / platform.

7Acceptable Use

You agree not to use the Service to:

  • Violate any applicable laws or regulations.
  • Generate illegal, harmful, or offensive content.
  • Distribute malware or engage in hacking activities.
  • Resell or redistribute our services as your own software or as an automated service.
  • Use automated systems (bots) to access the Service without permission.

8AI-Generated Content Disclaimer

Our AI technology generates content based on your inputs. Please be aware that:

  • AI-generated content may not always be accurate, complete, or unique.
  • You are responsible for reviewing and verifying all generated content.
  • We do not guarantee that AI outputs will meet specific professional or legal requirements.

9Limitation of Liability

To the maximum extent permitted by law, ES Solutions GmbH shall not be liable for any indirect, incidental, or consequential damages resulting from your use of the Service, interruptions in service, or unauthorized access to your data.

10Termination

We may terminate or suspend your account immediately, without prior notice, for any reason — including breach of these Terms. You may terminate your account at any time via your account settings.

11Governing Law & Jurisdiction

These Terms shall be governed by and construed in accordance with the laws of the Federal Republic of Germany. Any disputes arising from these Terms shall be subject to the exclusive jurisdiction of the courts in Hanau, Germany.

12Contact Information

If you have any questions about these Terms, please reach out to our support team:

Contact Our Support Today
Legal · GDPR Art. 28

Data Processing Agreement (Part of the Terms of Use)

How ExpertSlides processes personal data on your behalf as a processor, the safeguards we apply, and the sub-processors we rely on.

1Parties and Scope

This Data Processing Agreement ("DPA") forms part of, and is subject to, the Terms of Service between you ("Controller") and ES Solutions GmbH ("Processor," "ExpertSlides," "we," "our," or "us"). It governs the processing of personal data carried out by the Processor on behalf of the Controller in connection with the ExpertSlides AI presentation services.

This DPA reflects the parties' agreement with respect to the processing of personal data in accordance with Article 28 of the General Data Protection Regulation (GDPR). Where the Controller acts on behalf of its own customers, it confirms it is authorized to instruct the Processor on their behalf.

ES Solutions GmbH
Am Rausch 2
63571 Gelnhausen, Germany

2Definitions

Terms such as "Personal Data," "Processing," "Controller," "Processor," "Sub-Processor," "Data Subject," and "Supervisory Authority" have the meanings given to them in the GDPR. "Applicable Data Protection Law" means the GDPR and any national implementing legislation, including the German Federal Data Protection Act (BDSG).

3Subject Matter and Duration

The subject matter of the processing is the provision of the ExpertSlides services as described in the Terms of Service. The Processor processes personal data only for the duration of the agreement and for as long as required to provide the services or to comply with legal retention obligations.

  • Duration: for the term of the underlying Terms of Service, plus any period required for return or deletion of data.
  • Frequency: continuous, for as long as the Controller uses the services.

4Nature, Purpose and Data Categories

The Processor processes personal data to generate, store, and export AI presentations and related content at the instruction of the Controller. The following categories apply:

Categories of Data Subjects

  • The Controller's account users and authorized team members.
  • Individuals whose personal data is contained in content the Controller submits for processing.

Categories of Personal Data

  • Account & Profile: name, email, and password.
  • User Content: any text, documents, or images submitted to generate presentations, which may contain personal data.
  • Technical Data: IP address, browser type, device information, and access times.

The Controller is responsible for ensuring that no special categories of personal data (Art. 9 GDPR) are submitted unless expressly agreed in writing.

5Obligations of the Processor

The Processor undertakes to:

  • Process personal data only on documented instructions from the Controller, including with regard to international transfers, unless required to do so by law.
  • Ensure that persons authorized to process personal data are bound by confidentiality.
  • Implement appropriate technical and organizational measures pursuant to Art. 32 GDPR.
  • Respect the conditions for engaging sub-processors set out in this DPA.
  • Assist the Controller in fulfilling its obligations to respond to data subject requests and to ensure security, breach notification, and data protection impact assessments.
  • At the Controller's choice, delete or return all personal data after the end of the provision of services.
  • Make available all information necessary to demonstrate compliance and allow for audits.

6Obligations of the Controller

The Controller is responsible for:

  • Ensuring it has a valid legal basis for the processing it instructs.
  • Providing instructions that comply with Applicable Data Protection Law.
  • Ensuring the accuracy and lawfulness of the personal data it submits.
  • Obtaining any necessary consents or notices from its own data subjects.

7Sub-Processors

The Controller grants the Processor general authorization to engage sub-processors to provide the services. The Processor remains fully liable for the performance of its sub-processors and ensures each is bound by data protection obligations equivalent to those in this DPA. We will inform the Controller of any intended changes and give an opportunity to object on reasonable grounds. Current sub-processors include:

Cloud Infrastructure

Hosting and storage providers such as Amazon Web Services and Google Cloud.

AI Model Providers

Providers that generate presentation content from anonymized or pseudonymized input data.

Payment Processing

Secure payment providers such as Stripe and PayPal. Full card details are not stored on our servers.

Communication

Email service providers used for transactional and marketing messages.

8Technical and Organizational Measures

In accordance with Art. 32 GDPR, the Processor maintains appropriate technical and organizational measures to protect personal data, including:

  • Encryption of data in transit and at rest where appropriate.
  • Access controls, role-based permissions, and authentication safeguards.
  • Network security, monitoring, and protection against unauthorized access.
  • Regular backups and resilience measures to ensure availability.
  • Recognized security and compliance standards, including ISO 27001, SOC 2, PCI DSS, HIPAA, GDPR, and CSA STAR.
  • Procedures for regularly testing and evaluating the effectiveness of these measures.

9Assistance and Data Subject Rights

Taking into account the nature of the processing, the Processor assists the Controller by appropriate technical and organizational measures, insofar as possible, in fulfilling its obligation to respond to requests from data subjects exercising their rights of access, rectification, erasure, restriction, portability, and objection. Where the Processor receives such a request directly, it will refer the data subject to the Controller.

10Personal Data Breaches

The Processor notifies the Controller without undue delay after becoming aware of a personal data breach affecting the Controller's data. The notification will describe, to the extent available, the nature of the breach, the likely consequences, and the measures taken or proposed to address it, so the Controller can meet its own notification obligations under Art. 33 and 34 GDPR.

11International Data Transfers

Where personal data is processed outside the European Economic Area (in particular in the USA), the Processor ensures an adequate level of protection through the EU-U.S. Data Privacy Framework or the Standard Contractual Clauses (SCCs) approved by the European Commission, together with any supplementary measures required.

12Audits and Inspections

The Processor makes available to the Controller all information necessary to demonstrate compliance with Art. 28 GDPR and allows for and contributes to audits, including inspections, conducted by the Controller or an auditor it mandates. Audits will be conducted with reasonable prior notice, during normal business hours, and in a manner that does not unreasonably disrupt the Processor's operations. Where available, certifications and audit reports may be provided to satisfy audit requests.

13Return and Deletion of Data

Upon termination of the services, and at the Controller's choice, the Processor will delete or return all personal data and delete existing copies, unless storage is required by Union or Member State law. Standard deletion follows the Processor's retention schedule, and payment-related data may be retained as required by German commercial and tax law (typically 6 to 10 years).

14Liability and Final Provisions

Each party's liability under this DPA is subject to the limitations and exclusions of liability set out in the Terms of Service. This DPA is governed by the laws of the Federal Republic of Germany, and the courts of Hanau, Germany, have exclusive jurisdiction over any disputes. If any provision of this DPA is found to be invalid, the remaining provisions remain in full force, and the parties will replace the invalid provision with a valid one that reflects its intent. In the event of a conflict between this DPA and the Terms of Service regarding data protection, this DPA prevails.

15Contact

For any questions regarding this Data Processing Agreement or to submit a signed copy, please reach out to our support team:

ES Solutions GmbH
Am Rausch 2, 63571 Gelnhausen, Germany
Contact Our Support Today