Privacy policy

1. Introduction

This Privacy Policy explains how Hekaton LLC ("Hekaton," "we," "us") collects, uses, shares, and protects personal data when you use DeckShift (the "Service"). It covers users in the United States and in the European Economic Area (EEA) and United Kingdom (UK). For most personal data, Hekaton is the controller. Where we process content a business customer uploads on behalf of its own end users, we may act as a processor for that customer under a separate data processing agreement.

2. Information we collect

• Account data: name, email, password, organization, billing details. Payment card data is handled by our payment processor and is not stored by us.
• Input content: the presentation files and materials you upload, which may contain personal data you choose to include.
• Generated output: the slides we produce for you.
• Usage and device data: log data, IP address, browser and device information, and interactions with the Service, collected through cookies and similar technologies.

3. How we use information

• To provide the Service: process your input content through AI models and return generated output to you.
• To operate, secure, troubleshoot, and improve the Service.
• To manage accounts, trials, subscriptions, and billing.
• To communicate with you about the Service.
• To develop and improve our models, insights engine, and sales-presentation trend analytics using de-identified and, where feasible, aggregated data, as described in Section 5.
• To comply with law and enforce our Terms.

4. Legal bases (EEA/UK users)

Where GDPR or UK GDPR applies, we rely on: performance of a contract, to provide the Service you request; legitimate interests, to secure and improve the Service and derive anonymized insights, balanced against your rights; consent, where required (for example certain cookies, or where local law requires consent for training uses); and legal obligation, where we must process data to comply with law. Where we rely on consent, you may withdraw it at any time.

5. Anonymized training and trend analytics

We analyze uploaded content to improve our models and to identify trends in how presentations are structured and how people sell. We design this use to protect your identity and your confidential information:

• Separation: your identity is separated from content before it enters our training and analytics environment.
• De-identification: we remove or mask direct and indirect identifiers, such as names of people and companies, logos, contact details, and figures tied to identifiable deals, before content is used for training or analytics.
• Aggregation: trend insights are produced across many users' content and are not derived from, and are not intended to reveal, any single user's content, customers, or deals.
• Purpose limits: our analytics concern presentation structure and selling techniques, never the identity of any person or company and never the substance of any specific transaction.
• Opt-out: you can opt out of having your content used for model training and trend analytics at any time in account settings. Opting out stops future training and analytics use and does not affect the processing needed to deliver your output. Anonymized or aggregated data already incorporated into models or trend datasets may be retained.

6. How we share information

We do not sell your personal data for money. Where "sale" or "share" has a broad meaning under U.S. state laws, we honor opt-out rights as described in Section 9. We share information with:

• AI model providers and infrastructure vendors that process content to deliver the Service, contractually barred from using your content to train their own models except as needed to provide their service to us. A current subprocessor list is available from privacy@deckshift.online.
• Service providers for hosting, analytics, payments, and support.
• Legal and safety disclosures where required by law or to protect rights and safety.
• Business transfers in connection with a merger, acquisition, or sale of assets, subject to this Policy.

7. International data transfers

We are based in the United States and process data there and in other countries where our providers operate. Where we transfer personal data from the EEA or UK to countries not deemed adequate, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK Addendum.

8. Data retention

We keep account data for as long as your account is active and as needed for legitimate business and legal purposes. We retain raw input content only as long as needed to deliver generated output to you and for a limited period thereafter, after which we delete it or reduce it to de-identified or aggregated form. De-identified and aggregated data used for training and trend analytics may be retained on an ongoing basis. Backups are cycled on a rolling basis.

9. Your rights

EEA/UK (GDPR): you have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local supervisory authority.

United States (including California): depending on your state, you may have the right to know, access, correct, and delete your personal data, to opt out of "sale" or "share" and certain profiling, and to be free from discrimination for exercising these rights. California residents may exercise these rights, including through an authorized agent.

To exercise your rights: manage your training and analytics preference in account settings. For other requests, contact privacy@deckshift.online. We verify and respond within the timeframes required by law.

10. Security

We use administrative, technical, and organizational measures designed to protect personal data, including encryption in transit, access controls, and separation of identity from content in our training environment. No system is perfectly secure, and we cannot guarantee absolute security.

11. Children

The Service is not intended for anyone under 16, and we do not knowingly collect personal data from children under 16. If we learn we have done so, we will delete it. If you believe a child has provided us personal data, contact privacy@deckshift.online.

12. Cookies

We use cookies and similar technologies to operate the Service, remember preferences, and measure usage. Where required, we obtain consent through a cookie banner and provide controls.

13. Changes to this policy

We may update this Policy from time to time. For material changes, we will provide notice, for example by email or in-app, before they take effect. We will not apply materially new uses of previously collected personal data retroactively without a lawful basis or, where required, your consent.

14. Contact us

Hekaton LLC, Minnesota, USA. Privacy questions: privacy@deckshift.online.