Privacy & security

What happens to your deck.

The short version: your file is not public, we delete the original after reviewing it, and you control when your saved report is deleted.

Who can see my files?

Your deck and report are stored privately. You must be signed in to access your reviews. Report download links stop working after 15 minutes, but you can create a new link from My Decks while the report is still saved.

How long do you keep them?

We delete the PowerPoint or PDF you uploaded after processing, even if the review fails. We keep the finished report and review information for up to 30 days. You can delete them sooner from My Decks.

How is AI involved?

We send slide images and deck text to OpenAI to create your review. Our requests use store: false, and OpenAI says API data is not used to train its models by default.

Is anything kept by OpenAI?

Possibly. We do not currently have OpenAI Zero Data Retention. Under OpenAI’s standard policies, API content may stay in security-monitoring logs for up to 30 days.

Who else helps run the service?

We use Supabase for private storage and accounts, Google Cloud to process decks, OpenAI to create reviews, Stripe for payments, and OpenAI Sites to deliver the website. Authorized Oak Cliff Consulting administrators may access information when needed to operate, secure, or support the service.

How do we use email services?

We use SendGrid to email finished PDF reviews and deliver messages submitted through the questions and feedback form. This creates a copy with the email service and in the recipient’s mailbox, where the recipient’s email provider policies also apply.

What website traffic do we track?

We record the page visited, referral website, campaign labels included in links, approximate location, and general device, browser, and operating-system information. We use random visitor and session IDs to understand repeat visits. We create a one-way identifier from the request’s IP address and then discard the raw address; the identifier cannot be converted back into the original IP. When someone signs in, we may connect that browsing session to their account so we can understand whether visits lead to signups, deck reviews, or subscriptions.

Please note: We do not currently claim SOC 2 certification, HIPAA compliance, malware scanning, or zero data retention. If your company has special legal, regulatory, or security requirements, check with Oak Cliff Consulting before uploading sensitive information.

Last updated: August 10, 2026.