Privacy Policy
Last Updated: August 20, 2026
Deckgist ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy ("Policy") explains how we collect, use, store, and share your personal information when you use Deckgist (the "Service"), and the rights available to you.
Please read this Policy carefully before using the Service. By using the Service, you agree to this Policy. We may update this Policy periodically and will notify you of material changes via your registered email address or an in-product notice.
1. Data Controller
The data controller for this Service is:
- Company Name: Deckgist
- Privacy Email: support@deckgist.com
- Data Protection Officer (DPO): Not applicable
2. Personal Information We Collect
2.1 Information You Provide Directly
- Account Information: your name, email address, hashed password, profile image, and authentication account details.
- Payment Information: transaction amounts, payment status, and subscription identifiers. Full payment card numbers are not stored by us; card data is processed by our payment processor as described in Section 5.
- Communications: emails, support requests, feedback, and other communications you send us.
- Service Content: prompts, presentation topics, uploaded reference files, images, presentation content, templates, and other materials you submit, create, or store through the Service.
2.2 Information We Collect Automatically
- Device and Network Information: IP address, device type or model, operating system, browser type, and time zone.
- Usage Data: pages visited, features used, activity records, and session duration.
- Log Data: request timestamps, error logs, security events, and performance metrics.
- Third-Party Login: basic profile information shared by Google when you choose to sign in through that service.
We do not collect precise location data.
3. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Service delivery and maintenance | Contract performance |
| AI-powered content and presentation generation | Contract performance |
| Billing and payment processing | Contract performance |
| Customer support | Contract / Legitimate interests |
| Service notifications, including billing and security | Legitimate interests |
| Security and fraud prevention | Legitimate interests |
| Product analytics and improvement | Legitimate interests |
| Legal compliance | Legal obligation |
| Marketing communications | Your consent |
We may aggregate or anonymize data for statistical purposes. Such data cannot reasonably be linked to an individual.
4. Cookies and Tracking Technologies
| Type | Purpose | Disableable |
|---|---|---|
| Strictly necessary | Login sessions and core functionality | No |
| Functional | Language preferences and personalization | Yes |
| Analytics | Usage statistics, performance, and product optimization | Yes |
We use Ahrefs Analytics, Vercel Analytics, and Vercel Speed Insights. You can manage or disable non-essential cookies and similar technologies through your browser settings. Disabling them may affect certain features of the Service.
5. Sharing and Disclosure
We do not sell your personal information, including as "sale" may be defined under applicable laws such as the California Consumer Privacy Act (CCPA). We share information only in the following circumstances:
- Service Providers: cloud hosting and storage, email, payment, support, security, and analytics vendors that process data on our behalf and are subject to appropriate confidentiality and data-protection obligations.
- Payment Processing: payment card data is processed exclusively by Waffo Pancake and is not stored on our servers.
- AI Service Providers: prompts, reference materials, and presentation content may be transmitted to AI providers, including Google, OpenAI, and model providers available through OpenRouter, when necessary to provide the AI features you request.
- Authentication Providers: when you choose a third-party sign-in method, relevant authentication data is shared with Google.
- Legal Requirements: where disclosure is required by law, court order, or a lawful regulatory request.
- Business Transactions: in connection with a merger, acquisition, financing, reorganization, or similar event, subject to appropriate notice and continued protections.
- With Your Consent: for any other purpose disclosed to you and authorized by your explicit prior consent.
6. Data Security
- Data is encrypted in transit using TLS / HTTPS.
- Passwords are securely hashed, and sensitive data is protected using appropriate technical and organizational safeguards.
- Access to personal information is restricted according to the least-privilege principle.
- We conduct periodic security reviews and vulnerability assessments.
In the event of a security incident affecting your rights, we will notify you and the relevant authorities within 72 hours of discovery where required by applicable law. Please keep your credentials secure and do not share them.
7. Data Retention
| Data Type | Retention Period | Upon Expiry |
|---|---|---|
| Account information | While active and for 3 years after account deletion | Delete or anonymize |
| Transaction records | 3 years from the transaction date | Secure deletion |
| Support and communication records | 3 years | Secure deletion |
| Security and audit logs | 3 years | Secure deletion |
| Service content and uploaded files | While active and for 3 years after account deletion | Delete or anonymize |
We may retain information longer where required by law, necessary to resolve disputes, or needed to enforce our agreements.
8. Your Data Rights
Depending on where you live, you may have the rights listed below. To exercise a right, contact us at support@deckgist.com. We will respond within 30 calendar days, subject to any different timeframe required by applicable law.
| Right | Description |
|---|---|
| Right to be informed | Know what data we collect and how we use it |
| Right of access | Obtain a copy of your personal information |
| Right to rectification | Correct inaccurate or incomplete data |
| Right to erasure | Request deletion under certain conditions |
| Right to restrict processing | Temporarily suspend processing in certain cases |
| Right to data portability | Receive your data in a machine-readable format |
| Right to object | Object to processing based on legitimate interests or for marketing |
| Right to withdraw consent | Withdraw consent for consent-based processing |
You may also lodge a complaint with your local data protection authority.
9. Marketing and Opt-Out
With your consent, we may send marketing communications about Deckgist products, features, offers, and updates by email or in-product notification. You can opt out at any time by clicking "Unsubscribe" in an email, changing available account settings, or contacting us. Opting out does not affect essential service notifications, such as billing messages or security alerts.
10. International Data Transfers
Our servers and service providers may be located in the United States. Your personal information may therefore be transferred to and processed in a country different from the country where you live. Where required, we safeguard international transfers through:
- Data processing agreements incorporating the European Commission's Standard Contractual Clauses (SCCs).
- Transfers to recipients subject to an adequacy decision or an equivalent level of data protection.
- Other safeguards permitted under applicable data protection law.
11. Children's Privacy
The Service is a general-audience service and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take appropriate steps to delete it. Users who have not reached the age of legal majority in their jurisdiction should use the Service only with the permission of a parent or legal guardian.
12. Third-Party Links and Services
The Service may include links to, or integrations with, third-party services. This Policy applies only to personal information we directly collect. We are not responsible for third-party privacy practices and encourage you to review their privacy policies before using those services.
13. Policy Changes
For material changes, we will provide at least 15 days' advance notice through an in-product announcement or your registered email address and update the "Last Updated" date at the top of this page. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.
14. Contact Us
- Privacy Email: support@deckgist.com
- Support Email: support@deckgist.com
- Company Name: Deckgist
Deckgist · https://deckgist.com