Data controller
KAIRIA, a French SAS registered with the Versailles Trade and Companies Register under number 101 193 027, is responsible for the processing described here. Contact us at contact@kairia.fr or KAIRIA, 86 rue Michel Giraux, 78670 Villennes-sur-Seine, France.
Local application and cloud activation
Without an account or cloud feature, your .deck files and resources remain in the locations you choose on your Mac. KAIRIA does not automatically receive their contents.
Content is sent to Decktype Cloud or an AI provider only when you sign in and explicitly use a relevant feature, such as cloud storage, sharing, collaboration, the assistant, image generation or theme generation.
Website, account and communications
- Technical logs needed to deliver and secure the website and APIs may include IP address, date, requested URL, request ID and browser or device information.
- Account data includes your email address, your name when provided, sessions, authorized installations, workspaces, memberships, roles and preferences needed for the service.
- Sign-in, welcome, security, billing and service emails use your email address and the metadata strictly needed for delivery.
- If you contact KAIRIA, we process your contact details and the exchange to respond and follow up.
Cloud decks, sharing and collaboration
- Cloud storage processes the .deck bundles, resources, cover images, sizes, technical fingerprints, versions and revision history that you choose to upload.
- Sharing processes links and their settings, access rights, expiry dates and the technical access records needed for security.
- Comments include their text, author, target slide, status and dates. Collaboration processes participant identity, ephemeral presence, live changes and persisted checkpoints.
- Themes, images and other assets accepted into a workspace become durable cloud content until you delete them or the relevant workspace.
Assistant and managed generation
- The assistant sends Anthropic the message, deck, catalogue and history that you attach to a turn. Decktype does not persist the conversation on its server after the response, but Anthropic applies its own contractual retention.
- Image generation sends OpenAI the prompt, settings and, for an edit, the source image. Decktype stores the temporary output until you accept, delete or let it expire.
- Theme generation may process a website URL, captures, images, visual evidence and instructions with Anthropic. Temporary sources and drafts expire; an accepted theme remains in your cloud library.
- Do not submit secrets, sensitive data or material unless you have the required rights and permissions. The interface discloses use of a provider before the first relevant transfer.
Billing
Stripe processes billing identity, address, any VAT number, payment method, fraud checks and transactions. KAIRIA receives Stripe identifiers, plan, status, amounts and invoice references, but not the full card number or security code.
Usage measurement
- Each download request increments a first-party technical counter containing the version, platform and website source. This counter uses no cookie, email address or presentation content.
- Google Analytics loads on decktype.com only after you consent. It then measures visited pages and a limited set of product actions, with advertising signals disabled.
- Your audience-measurement choice is kept in browser local storage for no longer than six months.
- When product telemetry is authorized, Decktype records only a closed event taxonomy and technical metadata; deck bodies, comments, prompts and images are not permitted in it.
Purposes and legal bases
- Creating the account, supplying requested cloud and AI features, enabling collaboration, supporting the user and managing the subscription: contract performance or pre-contractual steps.
- Distributing, securing, diagnosing and improving the service, preventing abuse and keeping minimized logs: KAIRIA’s legitimate interest in operating a reliable and secure service.
- Issuing and retaining billing records: contract performance and legal accounting and tax duties.
- Delivering transactional communications: contract performance or legitimate interest depending on the message.
- Audience measurement with Google Analytics: your consent, withdrawable at any time through Cookie settings in the footer.
Providers and transfers
Data is available only to authorized KAIRIA staff and, depending on the feature, these providers: OVHcloud for the main infrastructure operated by KAIRIA with Dokploy; Contabo for the release channel and encrypted off-site backups; Microsoft 365 and Resend for email; Stripe for billing; OpenAI for images; Anthropic for the assistant and themes; and Google only after Analytics consent.
Some providers may process data outside the European Economic Area. KAIRIA then relies on GDPR safeguards and the applicable contracts, including an adequacy decision or Standard Contractual Clauses depending on the provider.
Retention periods
- Account, membership and cloud content data is retained for the service relationship, then deleted when the account is closed or on request, except for a team workspace that must remain available to its other members.
- A share link remains active until revoked or expired. Comments and versions remain attached to the deck until deleted through the available controls.
- Deck upload capabilities expire after 15 minutes. Temporary prompts, sources, image previews, theme evidence and drafts normally expire after 24 hours; an accepted result becomes durable.
- Assistant conversations are not stored in the Decktype database after the turn. First-party usage metadata expires after 24 months.
- The Analytics choice is retained for six months and Google Analytics events for two months. Contact exchanges are retained while handled and, where needed, for three years after the last contact.
- Billing data required for accounting is archived for 10 years. Deleted data may remain in encrypted, access-restricted recovery backups until their rotation expires, for no longer than 12 months.
- Technical logs are retained for the operational period needed for security. AI, payment and email providers also apply their own contractual or legal retention periods.
Your rights
You may request access, correction, deletion, restriction or portability, withdraw consent and object to processing based on legitimate interest. Email contact@kairia.fr. We may request only the evidence needed to verify identity. You may also lodge a complaint with the French data protection authority, CNIL.