Back to the home page
Trust & confidentiality

Trust & confidentiality

decks.studio turns your briefs, proposals and documents into decks. This page explains, plainly, how we keep that work confidential.

HTTPSEncrypted in transitSHA-256Sent versions are sealedHosted in the European UnionPDPL · GDPR

Your decks are yours.

Every deck you create is tied to your account. It is not listed publicly, not indexed, and not visible to other users.

Sharing is your choice.

Each deck has a private editing view and a separate share link built on an unguessable identifier. A deck is reachable by anyone else only if you give them that link.

SHA-256

Sent versions are sealed.

When you send a deck or document, that version is preserved as an immutable snapshot with a SHA-256 fingerprint — so your recipient can verify they are seeing exactly what was shared. Your drafts and unsent edits are never visible to recipients. Deleting a deck or document deletes its sealed versions with it, within the same 30-day window described below.

Viewing activity is visible to the sender.

When you open a shared deck or document, the sender can see viewing activity — opens, time spent, and how far you read. This needs no cookie: we store only a salted, per-item IP hash to count a device once, and it is anonymised after 90 days.

What we store.

Your account email; the text, links and files you submit to generate a deck; the generated deck and its rendered PDF; the sealed versions of anything you send; and any logo or images you add.

AI processing.

To generate, refine and translate decks, and to transcribe voice notes, your content is processed by our AI providers under API terms that keep it out of their model training. The providers are named in the privacy policy.

HTTPS

Encrypted in transit.

All traffic between you and decks.studio is encrypted over HTTPS.

Hosted in the European Union.

Your account, the content you submit, and the files we generate are stored on infrastructure in Frankfurt, Germany (European Union).

Encrypted at rest.

Beyond HTTPS in transit, the databases and file storage that hold your content are encrypted at rest by the hosting infrastructure.

PDPL · GDPR

PDPL & GDPR rights.

You can request a copy of your personal data, or its erasure, at any time. Saudi PDPL and EU GDPR data-subject rights — access, export, and deletion — are supported.

30

Deletion within 30 days.

When you delete a deck or your account, it is permanently removed within 30 days. Share links you already distributed are handled separately, as described in the Terms.

Questions or removal.

To ask a privacy question, or to have a deck or your account removed, contact decks.studio support and we will help you.

Decks Studio