Privacy Policy

1. Introduction

This Privacy Policy explains how Treatdeck ("we", "us", "our") collects and processes personal data when you use the Service at treatdeck.link. We comply with the UK General Data Protection Regulation (UK GDPR).

2. Data We Collect

• Account Data: name, email address, password hash.
• Billing Data: processed by Stripe; we do not store full card details.
• Usage Data: log data, device/browser info, session and analytics events.
• Collaboration Data: names and emails of collaborators you invite to Decks.
• Communication Data: messages or emails you send to us.

3. Purposes and Legal Bases

• Provide the Service: accounts, authentication, subscriptions, collaboration (contract necessity).
• Billing and tax: payments, invoices, compliance (legal obligation).
• Analytics and improvement: usage understanding, performance (legitimate interests).
• Communications: service messages; marketing only with consent (consent / legitimate interests).

4. Collaboration and Shared Access

When you invite collaborators to view or edit a Deck, we process their name and email address to deliver invitations and manage permissions. Collaborators can see limited project metadata (such as deck title and owner name). You remain responsible for the content you share and for ensuring you have permission to add each collaborator.

5. Embedded Content and Third-Party Services

Decks often embed content from third-party platforms like Google Slides, Canva, or Adobe InDesign. These services collect data under their own privacy policies. Treatdeck does not control or store the content of those embedded files beyond the link you provide.

6. Sharing with Service Providers

• Stripe (payments and invoicing)
• Firebase / Vercel (hosting, auth / session)
• Resend or SendGrid (transactional email)
• Analytics tools (e.g. Google Analytics or an equivalent)

We require processors to protect personal data and act only on our instructions. We do not sell personal data.

7. International Transfers

Where data is transferred outside the UK, we use lawful safeguards such as Standard Contractual Clauses or equivalent protections.

8. Data Retention and Exports

We retain personal data for as long as necessary to provide the Service, maintain security backups, and meet legal obligations. When you delete your account, we remove your Decks and personal data after a short retention period used for backup and fraud prevention. Non-personal link metadata and aggregated analytics may be kept for statistical purposes. You can export a CSV record of your projects before closing your account.

9. Your Rights

• Access, rectification, erasure
• Restriction or objection to processing
• Data portability
• Withdraw consent (where processing is based on consent)

To exercise rights, contact hello@treatdeck.link. You may also complain to the UK ICO.

10. Security

We use technical and organisational measures (e.g. HTTPS, secure hosting). No online service can guarantee absolute security, but we take reasonable steps to protect your data against unauthorised access or loss.

11. Cookies

We use essential cookies and, with consent where required, analytics cookies. For details and choices, see our Cookie Notice.

12. Changes to this Policy

We may update this policy from time to time. The latest version will always appear at treatdeck.link/privacy.

13. Legal Entity

Treatdeck is a service operated by Hollywood Secret Service Ltd (Company No. 14292158, VAT GB451215331). Registered address: 15–17 Middle Street, Brighton BN1 1AL, United Kingdom.

14. Controller and Contact

The data controller is Hollywood Secret Service Ltd trading as Treatdeck.

To contact the controller or ask about data rights, email hello@treatdeck.link.