Privacy Policy
Effective Date: January 1, 2026 • Last updated: August 2026
Your slide content, uploaded files, and AI prompts are never used to train public foundation models.
All presentation workspaces, database records, and assets are encrypted at rest and in transit via TLS 1.3.
Custom user API keys are stored purely client-side in browser local storage and never logged to persistent databases.
1Introduction & Scope
DeckCraft AI (“DeckCraft”, “we”, “our”, or “us”) operates the Next-Gen AI Presentation Studio and visual formatting platform accessible via deckcraft.ai and related subdomains. This Privacy Policy outlines our strict protocols regarding the collection, use, storage, and safeguarding of your personal data, presentation decks, raw text inputs, and enterprise assets.
By accessing our platform, using the Visual Presentation Editor, invoking the AI slide synthesis pipeline, or exporting presentations, you acknowledge the terms outlined in this Privacy Policy.
2Information We Collect
We only collect data strictly necessary to provide and optimize our slide design and rendering services:
- Account Credentials: Name, email address, cryptographically hashed passwords, and verified single sign-on profile tokens.
- Presentation Data & User Content: Presentation outlines, slide copy, custom visual blocks, uploaded presentation (.pptx) layouts, color palettes, speaker notes, and presentation titles.
- Payment & Subscription Records: Transaction identifiers, billing status, currency, and credit balances. Payment transactions are processed directly by certified, PCI-DSS Level 1 compliant payment gateways. We never store raw credit card numbers on our servers.
- Technical Telemetry & Usage Logs: IP address (anonymized), browser user-agent, operating system, generation latency, error logs, and session activity to diagnose engine performance and prevent abusive automated scraping.
3AI Processing Guarantee: Zero Model Training & Data Isolation
- Zero Model Training: Your business plans, financial projections, medical case studies, pitch decks, and prompts are never used to train, retrain, or fine-tune public or third-party foundation AI models.
- Ephemeral Inference: AI slide generation prompts and structured outputs are processed dynamically in memory during API requests and are not retained by model providers for secondary analysis.
- BYOK (Bring Your Own Key) Security: When you provide a custom API key via the Key Manager modal, the key is securely saved only in your client browser's local storage. API requests using BYOK route directly with your designated credentials and are never logged to our persistent server databases.
- Exact Content Preservation Mode: For regulated industries (pharmaceutical, financial, legal), our Exact Mode ensures slide textual data is preserved verbatim with SHA-256 deterministic checksum verification to guarantee zero AI alteration or hallucination.
4How We Use Your Data
- To synthesize slide layouts, color palettes, and presentation designs requested by you.
- To authenticate your session and protect your multi-tenant presentation workspace via Row-Level Security (RLS).
- To manage your presentation credit balance, subscription lifecycle, and top-up refills.
- To transmit essential transactional updates (account verification, password reset, payment receipts).
- To detect and prevent fraudulent use, DDoS attacks, and security vulnerabilities.
5Data Storage, Multi-Tenant Security & Encryption
We enforce enterprise security benchmarks across every layer of our platform:
- Encryption in Transit: All HTTP communications and WebSocket channels are secured using TLS 1.3 with HSTS enforcement.
- Encryption at Rest: Database records, slide structured data, and static assets are protected with AES-256 bit encryption.
- Multi-Tenant Row-Level Security (RLS): Every presentation query applies cryptographic tenant boundaries ensuring no user can access another customer's presentation decks.
6Third-Party Subprocessors
We collaborate exclusively with vetted, ISO 27001 / SOC 2 Type II certified service providers to deliver the DeckCraft AI service:
| Category | Purpose | Location |
|---|---|---|
| Encrypted Cloud Database & Auth Infrastructure | Secure account authentication, data persistence & row-level isolation | United States / Global |
| AI Compute & Language Model Infrastructure | Generative slide synthesis & multimodal layout analysis | United States / Global |
| PCI-DSS Payment Gateways | Level 1 certified billing, card processing & subscription management | Global |
| Edge Network & Security Services | Global CDN delivery, SSL termination & DDoS mitigation | Global Edge Network |
7Your Rights & GDPR / CCPA Compliance
Regardless of your geographic location, we extend full global privacy rights:
- Access, rectify, export, or permanently delete your personal data
- Opt-out of non-essential marketing communications at any time
Depending on your jurisdiction, you may exercise these rights directly within your DeckCraft AI Profile page or by contacting our Data Protection Officer.
8Cookies & Local Storage
We use essential cookies and browser LocalStorage to maintain user authentication states, credit balance caches, and active presentation editor preferences.
9Compliance Contact & Data Protection Officer
If you have any questions, compliance audit inquiries, or data deletion requests, please contact our Data Protection Officer:
DeckCraft AI Privacy & Security Office
Email: impactdynamics.biz@gmail.com
Response SLA: Within 24 Business Hours