Privacy Policy

Summary

We collect the minimum needed to operate PresentFast: your email to identify your account, OAuth tokens to authenticate your AI client, and the deck content you publish. We do not sell your data, do not run third-party ad trackers, and you can delete your account at any time.

Data we collect

Account information

Email address provided at signup; the OAuth identity of any AI client you connect.

Deck content

The HTML or Markdown you publish, plus any media you attach. Public decks are accessible to anyone with the URL.

Authentication tokens

Session cookies (httpOnly) and OAuth refresh tokens needed to keep you signed in. Stored encrypted at rest.

Operational logs

Request logs (IP, user-agent, timestamp) retained for 30 days for abuse detection and debugging. No content body is logged.

How we use it

• To render and host the decks you publish.
• To authenticate you and the MCP clients you connect.
• To detect abuse (rate limiting, spam detection).
• To send transactional emails (password reset, security alerts), never marketing.

Sharing

We do not sell or rent your data. We share data only with infrastructure providers (hosting, database, email delivery) under contract. We will respond to lawful government requests as required by applicable law.

Your rights

You can export your data, request deletion of your account, or revoke any connected client's OAuth access from your settings page. Account deletion is permanent and removes published decks within 30 days.

EU/UK users: under GDPR / UK GDPR you have rights to access, rectify, port, and erase your data. Contact us via the contact page to exercise these rights.

Cookies

We use a single httpOnly session cookie (pf_session) to keep you signed in. We do not use third-party advertising cookies or cross-site tracking.

Changes

We'll post material changes here and notify active users by email. Continued use after a change indicates acceptance.

Contact

Privacy questions, complaints, or data-rights requests: see contact.