Privacy

Privacy policy

This page explains the current operating privacy position for the marketing funnel and the signed-in DidiDecks workflow.

It is still an implementation-stage policy page, but it now reflects the real handling rules used in the product build.

Lead intake Structured and explicit

API keys Encrypted before storage

Raw secret return Never returned

Product data Deck workflow artifacts

Current handling

What the platform currently stores and protects

Public-site information

The public site may collect lead-intake data such as email, company name, role, use case, and message when someone submits the Show Interest form.

Workspace credential handling

All AI API keys provided by users are encrypted in storage, used only to connect the workspace to approved AI services, and are never returned to the browser after save.

Operational product data

Uploaded decks, extracted slide blocks, findings, suggestions, and export records are part of the working product artifact graph and are treated as application data.