Privacy Policy

1. Introduction

At Deck AI Limited ("we," "us," or "our"), we respect your privacy and are committed to protecting the personal information you share when using our website (https://usedeck.ai) and related services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and retain your personal information, as well as your rights under applicable laws. By using or accessing our Services, you consent to the practices described in this Privacy Policy.

If you have any questions about this policy, please contact us at data@deck.team.

2. What this policy covers

This Policy applies to personal information we collect when you:

1. Create an account or otherwise register for our Services.
2. Use our Services or interact with us via email or support channels.
3. Visit our websites or engage with our marketing communications.

It does not apply to information collected by third-party websites, services, or applications that link to or are accessible from our Services.

3. Categories of personal information we collect

Below is a high-level summary of the categories of personal information we collect, examples of that information, sources, and our purposes for using it.

4. How we use your information

We use personal information for the following purposes, as permitted by law:

1. Service Delivery & Account Management: Create and maintain your account; authenticate you; provide requested features.
2. Billing & Payments: Process subscription or one-time payments via Stripe or PayPal; maintain records to comply with tax and accounting requirements.
3. Security & Fraud Prevention: Secure user accounts and detect or prevent fraudulent activity.
4. Product Improvement & Analytics: Analyze usage patterns, error logs, and performance metrics to enhance our Services.
5. AI-Driven Features: Use UGC and integration data to generate documents, search, insights, and automated content via AI platforms (e.g., OpenAI, Anthropic, Google Cloud AI, AWS AI).
6. Marketing & Communications: Send newsletters, promotional offers, and updates if you opt-in; personalize content based on preferences.
7. Customer Support: Respond to inquiries, troubleshoot issues using support tickets and communications.
8. Legal Compliance: Comply with legal obligations, enforce our Terms of Use, respond to lawful requests by public authorities.

5. How we share your information

We share personal information in the following limited circumstances:

• Service Providers:
  • Cloud Infrastructure & Hosting: Amazon Web Services (AWS), Google Cloud Platform (GCP).
  • AI/ML Platforms: OpenAI, Anthropic, Google Cloud AI, AWS AI.
  • Analytics & Tracking: Google Analytics, Mixpanel, Hotjar, Sentry, Datadog.
  • Payment Processors: Stripe, PayPal.
  • Email & Communications: SendGrid, Mailgun, Intercom.
  • Authentication & Identity: Auth0 (or Firebase Auth).
  • Customer Relationship Management (CRM): HubSpot, Salesforce.
• Legal & Regulatory Requests: To comply with laws, respond to court orders or subpoenas, or to protect rights, property, or safety.
• Business Transfers: If we merge, are acquired, or sell assets, personal information may be transferred to the successor entity, subject to this Privacy Policy.
• Affiliates & Partners: Shared with strategic partners only when necessary to fulfill user requests or joint-marketing activities (e.g., co-branded events).

All service providers must follow contractual obligations, including confidentiality and data-security requirements. We do not sell your personal information.

6. International data transfers

Our Services are hosted in the United States. If you are located outside the U.S., your data may be transferred to and stored on U.S. servers. We implement the following safeguards for international transfers for personal data originating in the European Economic Area (EEA) or United Kingdom (U.K.):

• EU Standard Contractual Clauses (SCCs): We rely on SCCs for transfers from the EEA/U.K. to the U.S.

7. Data retention

We retain personal data for as long as necessary to fulfill the purposes described in Section 4, unless a longer retention period is required by law:

After each retention period, data is securely deleted or anonymized in accordance with industry best practices.

8. Cookies & tracking technologies

We use cookies and similar tracking technologies on our website to provide, protect, and improve our Services.

Types of cookies and purpose:

Managing cookies:

• You can control cookie preferences via the "Cookie Settings" link in the website footer.
• To learn more about cookies and how to manage or delete them, visit allaboutcookies.org or ico.org.uk/for-the-public/online/cookies (for EEA).

9. Users' rights (applicable by jurisdiction)

9.1. California (CCPA/CPRA)

Your Rights (for CA residents):

• Right to Know: Request the categories and specific pieces of personal information we have collected or shared in the past 12 months.
• Right to Delete: Request deletion of personal information, subject to certain exceptions (e.g., legal obligations).
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell personal information; however, we do share data with service providers for advertising (considered a "sale" under CCPA). To opt-out, click the "Do Not Sell or Share My Personal Information" link in our footer or visit https://usedeck.ai/do-not-sell.
• Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA/CPRA right.

How to submit a request: Email data@deck.team. We will verify your request and respond within 45 days.

9.2. Other U.S. states (Colorado, Connecticut, Virginia, Utah)

Residents of these states have similar rights to California, including access, deletion, correction, and data portability. Submit a request via email: data@deck.team. We will verify your identity and respond within 45 days.

9.3. European Economic Area (EEA) & United Kingdom (U.K.)

If you are located in the EEA or U.K., you have the following rights under GDPR / U.K. GDPR:

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion, subject to legal exceptions.
• Right to Restrict Processing: Request limitation on processing under certain conditions.
• Right to Data Portability: Request data in a machine-readable format (e.g., JSON, CSV).
• Right to Object: Object to processing based on legitimate interests, including profiling.
• Right to Withdraw Consent: If processing is based on consent, you may withdraw at any time.

How to submit a request: Email data@deck.team. We will verify your identity and respond within one month (or two months for complex requests).

9.4. Canadian residents (PIPEDA)

If you are a Canadian resident, you have the right to access and correct personal information about you under PIPEDA. Submit a request via email: data@deck.team. We will verify your identity and respond within 30 days.

10. Children's privacy

Our Services are not intended for children under 13. We do not knowingly collect personal information from children under 13.

If we discover that we have collected personal information from a child under 13, we will promptly delete that data. If you believe that a child under 13 may have provided us with information, please contact us at data@deck.team.

11. Third-party links

Our Services may contain links to third-party websites or resources not operated by Deck AI. This Privacy Policy does not apply to those external sites. We recommend you review the privacy policies of any third-party site you visit.

12. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top.
• Provide notice via email or a prominent banner on our website at least 30 days before changes take effect.

Your continued use of the Services after the changes are posted constitutes your acceptance of the updated Privacy Policy.

13. Contact information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

Deck AI Limited
Email: data@deck.team
Address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

We will respond to inquiries in accordance with applicable laws and try to resolve any concerns promptly.