Privacy Policy

What we collect

• Account: your email address and name from sign-in, and your plan.
• Your content: brand kits, logos, photos, deck text you or your AI assistant create, and rendered files.
• Privacy Vault: only encrypted documents, the key wrapped with your passphrase and recovery key, and the manifest you approved (structure, and in Masked mode anonymised text). Never your passphrase, recovery key or document plaintext.
• Billing: subscription status and a customer id from our payment provider. Card details go directly to them; we never see or store them.
• Usage and feedback: counts (decks, renders, clips) for plan limits, ratings and notes you give on decks, and technical logs (IP address, errors) kept briefly for security.
• Waitlist: your email and where you joined from, if you sign up.

Why we use it

To provide and secure the Service, enforce plan limits, take payments, answer support requests, improve the product from aggregate usage and feedback, and send service emails (and, if you joined the waitlist, your invite). Our legal bases are performing our contract with you, our legitimate interests in running a secure product, and your consent where we ask for it.

Your AI assistant

When you connect OpenGamma to an AI assistant, content you or the assistant send through the connector (deck text, brand kit details, approved vault manifests) is shared with that assistant under its own terms and privacy policy. Vault plaintext is never sent; it is filled in only in your browser.

Who processes data for us

• Oracle Cloud Infrastructure: hosting and encrypted backups (Mumbai, India).
• Clerk: sign-in and account security.
• Dodo Payments: payments, tax and invoicing, as merchant of record.
• Google Fonts: fonts for brand kits that use them (your browser requests them directly).
• Openverse: stock image search, when a deck asks for stock photos (search terms only, no personal data).

Some of these providers process data outside your country; they are bound by contracts and safeguards appropriate to that transfer.

Cookies

We use only essential cookies: sign-in session cookies (ours and Clerk's) and a browser-stored vault session while it is unlocked. No advertising or third-party analytics cookies.

How long we keep it

Account data and content for as long as your account exists. Deleting your account removes your decks, brand kits, photos, vault documents and usage from our live systems at once, and from backups within 30 days. Billing records are kept as long as tax law requires (by our payment provider and us). Server logs are rotated automatically and kept only briefly, for security and debugging.

Your rights

You can access, correct, export or delete your data, object to or restrict certain processing, and withdraw consent. Most of this is self-serve in the app (Account → Delete account); for anything else email shoumikgoswami@gmail.com. You may also complain to your local data-protection authority.

Security

Data is encrypted in transit (TLS) and backups are encrypted. The Privacy Vault encrypts documents in your browser before upload; see how the vault works.

Children

The Service is not for anyone under 18, and we don't knowingly collect their data.

Changes

We'll post updates here and notify you of material changes by email or in the app.