Privacy Policy

This policy explains what personal data DeckSlide collects, why we process it, who we share it with, and the rights you have. DeckSlide is a browser-based motion-design deck editor and live-presentation runtime operated by 4cs BV. We wrote this in plain language and we mean every word of it: we do not sell your data, we do not run advertising trackers, and we do not use your content to train any AI model.

01Who we are

DeckSlide is operated by 4cs BV, a private limited company (besloten vennootschap) incorporated under Belgian law. 4cs BV is the data controller responsible for the personal data described in this policy.

• Legal entity: 4cs BV
• Registered address: Lindekensweg 3, 2160 Wommelgem, Belgium
• Enterprise number: BE 1014.832.509
• Service: deckslide.com
• Data-protection contact: [email protected]

Where this policy refers to “we”, “us” or “DeckSlide”, it means 4cs BV.

02Scope of this policy

This policy covers personal data we process when you visit deckslide.com, create or use a DeckSlide account, build decks in the editor, upload media, host a live session, or join someone else’s live session as a guest. It applies to both halves of the product: the motion-design editor (layers, keyframes, shape morphing, transitions, text effects and multi-track audio) and the live audience runtime, where a host goes live and an audience joins by join code or QR to view the deck rendered live in their own browser.

This policy does not cover third-party websites or services that we link to but do not operate. When you follow a link away from DeckSlide, the privacy practices of that destination apply. If you are a guest participant in a live session, please also read the Guest participants section, which describes the limited data we collect from people who join without an account.

03Data we collect

We collect only the data we need to run the service. The categories below describe what we hold and where it comes from.

Account and profile data

When you register, we collect your email address and, if you sign in with Google, the basic profile information Google returns (typically your name, email address and profile picture). If you register with email and password, we store your email and a securely hashed version of your password — we never store passwords in readable form. You may add a display name and other profile details, which are optional.

Deck content you create

We store the decks you build: slides, layers, keyframes, shapes, text, timing and every other element of your motion design. This content is stored so you can return to it, edit it, and present it live.

Media you upload

Images, video and audio files you add to a deck are stored in our object storage so they can be rendered in the editor and streamed to attendees during a live session.

Live-session data

When you host or join a live session, we process data generated by that session, including: which sessions you hosted or joined and when; public chat messages; private one-to-one direct messages, including those routed to a staff inbox; raise-hand queue activity; live-caption transcripts, which are saved for the session; and presence and roster information (who is in the room and their connection state). If a participant turns on their microphone or camera, the corresponding audio and/or video stream is transmitted through our real-time infrastructure for the duration of the session. DeckSlide does not record live sessions; audio and video streams are not stored after the session ends.

Usage and device data

Like any online service, we automatically collect technical data when you use DeckSlide: pages and features you use, your IP address, browser and device type, approximate location derived from your IP, and product events (for example, opening a deck or starting a session). We use this to operate, secure and improve the service.

Billing references

DeckSlide is currently free while in preview and no payment is required. If and when paid plans are introduced, payments will be handled by our payment processors (Stripe and Mollie). We would then store billing references — such as a customer or subscription identifier, plan, and invoice records — but we do not receive or store your full card number, which stays with the payment processor.

04Guest participants

A defining feature of DeckSlide is that anyone can join a live session by join code or QR, with no account and nothing to install. If you join a session this way, we deliberately keep the data we collect to a minimum.

For a guest participant, we may process:

• the display name you choose for the session (you are free to enter any name);
• connection metadata needed to deliver the live experience — your IP address, browser and device type, and presence/connection state;
• anything you type into public chat or a private direct message during the session; and
• your microphone and/or camera stream, only if you choose to turn them on. These streams are transmitted live and are not recorded by DeckSlide.

The host of a live session controls the room — the deck being presented, who may speak, and the conduct of participants. For personal data generated within a session that a host organises for their own purposes, the host may act as a separate controller. DeckSlide provides the platform; the host is responsible for what happens in their room and for informing their attendees as required. If you have a concern about a specific session, contact the host first; you can also reach us at [email protected].

05Why we process your data

Under the EU General Data Protection Regulation (GDPR), we must have a lawful basis for each processing activity. Ours are as follows.

• To perform our contract with you (Art. 6(1)(b)). Creating and managing your account, storing and rendering your decks and media, running the editor, and hosting or joining live sessions.
• Our legitimate interests (Art. 6(1)(f)). Securing the service against abuse and fraud, diagnosing errors, understanding how features are used so we can improve them, and communicating with you about the service. We balance these interests against your rights and only rely on this basis where that balance is fair.
• Your consent (Art. 6(1)(a)). For any optional processing that requires it — for example, turning on your microphone or camera in a session. You can withdraw consent at any time.
• Legal obligations (Art. 6(1)(c)). Keeping accounting and tax records, and responding to lawful requests from competent authorities.

06No AI, no training on your content

DeckSlide has no artificial-intelligence features of any kind. There is no AI generation, no large-language-model processing, and no automated profiling of your content. Because there is no AI in the product, there are no AI sub-processors. We never use your decks, uploads, messages, captions or any other content to train any AI model, and we never sell or share your content for that purpose.

07Sub-processors

We use a small number of trusted service providers (“sub-processors”) to run DeckSlide. They process personal data only on our instructions and under contract. We prefer EU-based providers wherever practical.

We do not sell personal data, and DeckSlide contains no advertising trackers. None of the providers above receive your data for advertising or resale.

We may update this list as our infrastructure evolves. Where a change is material, we will update this policy and, where required, notify you. You can request the current list of sub-processors at [email protected].

08International transfers

We host and process personal data in the European Union wherever we can. Some of our sub-processors are established in the United States (for example, certain payment and infrastructure services). Where personal data is transferred outside the European Economic Area, we ensure an adequate level of protection by relying on one or more of the following safeguards:

• the EU–US Data Privacy Framework, where the provider is certified under it; and/or
• the European Commission’s Standard Contractual Clauses (Implementing Decision (EU) 2021/914), together with supplementary technical and organisational measures where appropriate.

You can ask us for more information about a specific transfer or a copy of the relevant safeguards by writing to [email protected].

09How long we keep data

We keep personal data only for as long as we need it for the purposes described in this policy, then delete or anonymise it. In practice:

• Account data: retained while your account is open and for up to 12 months after you close it, after which it is deleted or anonymised (subject to any longer legal retention below).
• Decks and uploaded media: retained while your account is active. Deleting a deck removes it, subject to backup rotation described below.
• Live-session records and caption transcripts: retained with the host’s account. (Note: DeckSlide does not record the audio or video of sessions; this refers to session metadata, chat, direct messages and saved caption transcripts.)
• Billing records: retained for 7 years as required by Belgian accounting and tax law.
• Authentication and security logs: retained for up to 12 months.
• Backups: retained on a rolling cycle of approximately 35 days, after which older backups are overwritten. Deleted content may persist in backups until it rotates out.

10Your rights

If you are in the European Economic Area, the GDPR gives you the following rights over your personal data:

• Access (Art. 15) — obtain a copy of the data we hold about you.
• Rectification (Art. 16) — correct data that is inaccurate or incomplete.
• Erasure (Art. 17) — ask us to delete your data, subject to legal retention obligations.
• Restriction (Art. 18) — ask us to limit how we process your data in certain circumstances.
• Portability (Art. 20) — receive certain data in a structured, machine-readable format.
• Objection (Art. 21) — object to processing based on our legitimate interests.
• Automated decisions (Art. 22) — DeckSlide does not make decisions about you by solely automated means that produce legal or similarly significant effects.

To exercise any of these rights, email [email protected]. Requests to close an account or to withdraw from a paid plan can also be sent to [email protected]. We will respond within the time limits set by the GDPR (normally one month). We may need to verify your identity before acting on a request.

If you believe we have not handled your data lawfully, you have the right to lodge a complaint with a supervisory authority. In Belgium, this is the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Rue de la Presse 35, 1000 Brussels. You may also complain to the authority in your own country of residence. We would, of course, appreciate the chance to address your concern first.

11Cookies and local storage

DeckSlide uses cookies and similar browser storage (such as local storage) only for purposes that are strictly necessary to run the service. We do not use advertising or cross-site tracking cookies.

• Essential cookies keep you signed in, maintain your session, and protect against security threats such as cross-site request forgery.
• Local storage is used to remember interface preferences and to hold working state for the editor and live runtime so the app performs well in your browser.

Because these are strictly necessary for a service you have asked to use, they do not require consent under the ePrivacy rules. If we ever introduce non-essential cookies, we will ask for your consent first and update this section. You can clear cookies and local storage through your browser settings at any time, though doing so will sign you out and may reset your preferences.

12Security

We take the security of your data seriously and apply technical and organisational measures appropriate to the risk. These include encryption of data in transit (TLS), hashing of passwords, access controls and least-privilege principles for our staff and systems, network isolation, and continuous error and anomaly monitoring. We host with reputable EU providers and keep our infrastructure patched and maintained.

No online service can promise perfect security. You also play a part: use a strong, unique password, keep your Google account secure if you sign in with it, and do not share access to your account. If you believe your account has been compromised, contact us immediately at [email protected].

13Data breaches

If we become aware of a personal-data breach that is likely to result in a risk to your rights and freedoms, we will notify the Belgian Data Protection Authority without undue delay and, where feasible, within 72 hours, as required by Articles 33 and 34 of the GDPR. Where the breach is likely to result in a high risk to you, we will also inform you directly and without undue delay, and describe the steps we are taking and any action you can take to protect yourself.

14Children

DeckSlide is a professional tool and is not directed at children. You must be at least 16 years old to create an account (or the minimum age for digital consent in your country, if that is higher). We do not knowingly collect personal data from children below this age. If you believe a child has provided us with personal data, contact [email protected] and we will delete it.

15Changes to this policy

We may update this policy from time to time to reflect changes in the service, our practices, or the law. When we make a material change, we will update the effective date at the top of this page and, where appropriate, notify you by email or through the service. We encourage you to review this page periodically. Your continued use of DeckSlide after an update means you accept the revised policy.

16Contact us

If you have any question about this policy or how we handle your data, please get in touch.

• Privacy and data protection: [email protected]
• General support: [email protected]
• Account and withdrawal requests: [email protected]
• Postal address: 4cs BV, Lindekensweg 3, 2160 Wommelgem, Belgium