Privacy notice

1. Who is responsible for your data

The controller of your personal data is the individual residing in Mexico who operates Deckly (decklyai.com).

Contact for anything about your data: soporte@decklyai.com.

2. What we collect

• Account: your email address. If you sign in with Google, Google shares your email, name and profile picture with our authentication provider; Deckly only uses the email.
• Profile details you enter: name, company, what you will use Deckly for, and language.
• Your content: the instructions and messages you write to the agent, the decks and landing pages you create, the images and files you upload and the text we extract from them, the web pages you ask the agent to read, and your comments on shared decks.
• Usage: our own product events (for example, that you created, opened, saved, shared or exported a deck) without their content; your credit balance and transactions; a technical record of each AI model call (provider, model, tokens, cost and timing, without the text); and error logs.
• Billing: your Stripe customer and subscription IDs, your plan status, and your payment history (amount, currency, date and status). Your card details go to Stripe; Deckly never sees them.
• Reports you send: a problem report includes what you write, the page address, your browser, the window size and, unless you untick the box, a screenshot of what is on screen.
• Email: a log of the emails we send you (recipient, subject and status), deleted after 90 days.

We do not store your IP address in our database; our hosting providers may record it in their technical logs. We do not ask for sensitive data; please do not include it in your instructions or files.

3. Why we use it (and legal bases)

• To provide the service you signed up for (performance of a contract): your account and sign-in; generating, saving, sharing and exporting your work, which includes sending your instructions and content to the AI models that produce it; billing and credits; service emails; support.
• To meet legal obligations: tax and accounting records of payments, and requests from authorities.
• Legitimate interests: preventing fraud and abuse, keeping the service secure, and internal usage statistics and problem reports to improve Deckly. You can object to the statistics and product-improvement uses by writing to soporte@decklyai.com.

We do not sell your personal information, do not "share" it for cross-context behavioral advertising, do not use it for advertising, and do not train our own AI models on your content.

4. Who processes it

We use service providers that process data on our behalf, each receiving only what it needs:

• Supabase: authentication, database and file storage.
• Stripe: payments, subscriptions and the billing portal.
• Render and Vercel: hosting.
• AI model providers: OpenRouter and the model providers it routes to, plus Mistral, NVIDIA, OpenCode Zen, TokenRouter and typesafe.ai. They receive your instructions and the content needed to generate text, review images and create images. Some of them, especially free models, may keep or use what they receive under their own policies.
• Image generation: NVIDIA and Pollinations receive the description of the image to create.
• Tavily: receives the agent's web searches about your topic.
• Resend: sends email.
• Image libraries (Wikimedia Commons, Wikipedia, Openverse and Pexels): receive photo searches for your slides.

Decks and landing pages load fonts from Google Fonts, and videos or designs you embed (YouTube, Vimeo, Loom, Figma) load from those services, which may receive the viewer's IP address.

International transfers: these providers are mainly in the United States, so your data is transferred to and stored outside your country. We make these transfers because they are necessary to provide the service you asked for.

When you share a deck by link, anyone with the link can view it without an account; search engines are told not to index it. You can turn the link off at any time.

5. How long we keep it

• Your account and content: while your account exists.
• Items in the trash: 7 days, then permanently deleted with their images, comments and agent conversations.
• Email log: 90 days.
• When you ask us to delete your account, we cancel your subscription and delete your profile, content, files, reports and usage data. We keep only what law or security requires: payment history (tax obligations), the technical record of AI calls without their content, the log of administrative actions, and a record of the deletion with your email.

6. Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your data, object to or restrict some uses, and withdraw consent. Write to soporte@decklyai.com from your account's email address. We answer within 20 business days, free of charge, and we will not treat you differently for exercising your rights. You can also complain to your local data protection authority.

7. Cookies and browser storage

Deckly uses no advertising cookies and no third-party analytics. It stores: the session cookies of our authentication provider (needed to keep you signed in), a "lang" cookie with your language for one year, and interface preferences in local storage (light or dark theme, sidebar, slide strip view, editor guides and the agent session for each deck). Embedded videos and designs may set their own cookies.

8. Children

Deckly is not meant for children under 13 and we do not knowingly collect their data. People aged 13 to 17 may use it only with the consent of a parent or legal guardian, who can exercise their data rights on their behalf by writing to soporte@decklyai.com. If you believe a child under 13, or a minor without that consent, gave us data, write to us and we will delete it.

9. Changes

We may update this notice. We will publish the current version on this page with its date, and tell you by email or inside Deckly if the change is significant.