How we handle your deck.

Plain-language summary of what happens when you upload a deck and where the data lives. Most of this is unsexy infra hygiene; a couple things are deliberate trade-offs.

Where your deck goes.

• Your PDF lands on our application server (Hostinger VPS, EU).
• Text + structure are extracted by a self-hosted pdf-parser (no third-party document AI).
• Extracted text is sent to Anthropic for analysis on the no-training tier — your content never feeds another model.
• The original PDF is stored encrypted (AES-256 at rest) on Minio, encrypted in transit (TLS 1.3).

Encryption.

TLS 1.3 in transit. AES-256 at rest. Keys rotated quarterly. The pdf-parser microservice talks to the app over a private mesh — not the public internet.

Data retention.

• Anonymous diagnostics (Phase 4, post-public-launch): 7 days, then deleted. Text and any extracted structure go with it.
• Authenticated decks: kept while your account is active. Delete one anytime from /dashboard. Account deletion erases everything within 30 days (GDPR-aligned).

Sub-processors.

• Anthropic — analysis (no-training tier, US).
• Clerk — authentication (US, EU data residency on enterprise plans).
• Stripe — payments (US, GDPR DPA).
• Resend — transactional email (EU).
• Hostinger — VPS hosting (EU, Germany).

Compliance.

• GDPR-aligned (EU data residency, right to deletion, sub-processor list above).
• ISO 27001 in plan for Q2 2026.
• No SOC 2 yet — happy to share questionnaires + sub-processor DPAs on request.

Security contact.

Vulnerability reports: security@deckstorm.ai. PGP key on request. We respond within 48h.