Legal

Privacy Policy

Last updated September 2026

This policy describes how Ploonu LLC (“Ploonu,” “we”) handles personal data when you use Decksify. It is written to satisfy the disclosures in our product spec and to give you a clear picture of what we store.

What we collect

Account: name, email, password hash, email-verification status.
Billing: Stripe customer / subscription IDs and plan status. Card numbers never touch our servers.
Product data: deck titles, slide JSON (headlines, bullets, speaker notes, image queries), share tokens, view counts.
Optional BYOK keys: provider name, AES-256-GCM ciphertext, last four characters for display.
Operational logs: request errors without decrypted keys or full prompts where we can avoid them.

Encrypted API key handling

If you save a provider key, it is encrypted at rest with AES-256-GCM using a server-side secret (KEY_ENCRYPTION_SECRET) that is not committed to the repository. The key is decrypted only in memory on the server at the moment of a generation call. We never return the raw key to the browser after save — only a masked preview showing only the final four characters. We do not log decrypted keys, even in error traces. The ciphertext is never sent to any third party other than the AI provider that key belongs to (as the Authorization credential for that call).

Who data is sent to

Your chosen AI provider (Anthropic, OpenAI, or Google): the system prompt plus your topic/slide context. Not your stored raw key except as that provider’s API credential.
Stripe: email and subscription events for checkout, trials, and invoices.
Unsplash: image search queries if you use image suggestions.
Resend (or our mail provider): verification and password-reset emails.
Cloudflare: Workers (app hosting), D1 (database), and related Cloudflare services for the live site.

We do not sell personal data. We do not send your raw prompt or deck content to undisclosed analytics products.

Retention and deletion

Account and deck data persist while the account exists, including after you cancel a subscription (so you can still open old decks). Stored API keys persist until you remove them or delete the account. Use Settings → Delete account to erase your user row, decks, and keys. Public share links then stop working. Backups may retain residual copies for a limited operational window. Privacy requests: privacy@decksify.com.

Cookies and tracking

We use session cookies required for Auth.js login. We do not currently run a separate advertising or analytics pixel. If we add analytics later, this policy will be updated before that ships.

Your rights

Depending on where you live (including GDPR/CCPA contexts), you may request access, correction, or deletion of personal data we hold. Account deletion in Settings is the self-serve path for erasure of decks and keys. Contact privacy@decksify.com for any request we cannot fulfill in-product.