Privacy Policy

DeckTrue (“we,” “us,” or “our”) respects your privacy. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use the DeckTrue service (the “Service”) at decktrue.com.

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Password (stored in hashed form; we cannot access your plaintext password)
• Account creation date

We do not collect your name, phone number, or mailing address unless you voluntarily provide it.

1.2 Payment Information

When you subscribe to a paid plan, Stripe collects and processes your payment information, including credit card number, expiration date, and billing address. We do not receive, store, or have access to your full credit card number. We receive only a tokenized reference, card type, last four digits, and billing confirmation from Stripe.

1.3 Files You Upload

You may upload PowerPoint files (.pptx) to the Service for analysis and processing. These files may contain text, images, data, metadata, and other content created by you or your organization. We process these files solely to provide the Service and do not review, read, or access the substantive content of your presentations for any other purpose.

1.4 Usage Data

We automatically collect certain technical and usage data, including:

• IP address
• Browser type and version
• Pages visited and features used within the Service
• Timestamps of access and actions
• File metadata (file name, file size, number of slides, processing results)
• Copilot Readiness Scores and Brand Check results

We do not use third-party tracking pixels, social media trackers, or advertising cookies.

1.5 Cookies

We use essential cookies required for authentication and session management. We do not use advertising cookies, analytics cookies from third-party advertising networks, or cross-site tracking cookies.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your uploaded files and return analysis results
• Manage your account and subscription
• Process payments through Stripe
• Communicate with you about your account, service updates, or support requests
• Improve the Service based on aggregated, de-identified usage patterns
• Detect and prevent fraud, abuse, or security threats
• Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We do not use your uploaded files to train machine learning models.

3. Artificial Intelligence Processing

Certain features of the Service use artificial intelligence to analyze and process your PowerPoint files. This processing is performed solely to deliver the Service to you. Specifically:

• AI analysis is used for template structure evaluation, design pattern recognition, and content placement during file processing.
• Your files are sent to AI services (currently Anthropic Claude) via API for processing. These API calls are transient and are not used to train third-party AI models.
• We process only the structural and formatting elements of your files; we do not use AI to analyze, summarize, or extract the substantive business content of your presentations.

Our AI service providers are contractually prohibited from using your data for model training or any purpose other than processing the specific API request.

4. Data Sharing and Disclosure

We may share your information only in the following circumstances:

• Service Providers: We share data with third-party service providers that help us operate the Service (Stripe for payments, Supabase for infrastructure, Render for backend hosting, Anthropic for AI processing). These providers are contractually obligated to protect your data and use it only for the services they provide to us.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Protection of Rights: We may disclose information to protect the rights, property, or safety of DeckTrue, our users, or others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity. We will notify you of any such change.

We do not share your uploaded files or their contents with any third party except as described above for AI processing, and only to the extent necessary to provide the Service.

5. Data Storage and Security

Your data is stored on servers operated by Supabase (cloud infrastructure). Our backend processing runs on Render. Both services maintain industry-standard security practices including encryption in transit (TLS) and at rest.

We implement reasonable administrative, technical, and physical safeguards to protect your information. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

Your files are stored in isolated storage buckets associated with your account. Other users cannot access your files.

6. Data Retention

We retain your data as follows:

• Account Information: Retained for the duration of your active account, plus 30 days after account deletion.
• Uploaded Files and Processed Output: Retained for the duration of your active account. You may delete individual files at any time. All files are deleted within 30 days of account deletion.
• Payment Records: Retained as required by applicable tax and financial regulations (typically 7 years for transaction records).
• Usage Logs: Retained for up to 12 months for security, debugging, and service improvement purposes, then deleted or anonymized.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request correction of inaccurate personal information.
• Deletion: You may request deletion of your personal information and account. We will comply within 30 days, subject to legal retention requirements.
• Data Portability: You may request an export of your data in a commonly used format.
• Withdrawal of Consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, contact us at support@decktrue.com. We will respond within 30 days.

8. Canadian Privacy Law Compliance

DeckTrue is operated from Ontario, Canada. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

Under PIPEDA, you have the right to access your personal information, challenge its accuracy, and withdraw consent to its collection, use, or disclosure (subject to legal or contractual restrictions). Our Privacy Officer can be reached at support@decktrue.com.

9. International Data Transfers

Your data may be processed and stored in the United States and other jurisdictions where our service providers operate. When your data is transferred outside Canada, it is subject to the laws of those jurisdictions, which may differ from Canadian law. We ensure that our service providers maintain adequate data protection practices through contractual obligations.

10. Children’s Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or in-app notification. The “Effective Date” at the top of this policy indicates when it was last revised.

12. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us at:

DeckTrue
Privacy Officer
Email: support@decktrue.com
Website: https://decktrue.com