Your data, handled straight

No buried clauses. Here is exactly what we store, how we store it, and what happens when you delete it.

Last updated: June 2026

HTTPS everywhere

All traffic is encrypted in transit. No plain-HTTP fallback.

Isolated per account

Your projects and files are scoped to your user ID. Other accounts cannot read them.

Deletable on demand

Delete any file or project from your Dashboard. Gone from storage within 24 hours.

No training on your content

Your decks and uploads are never used to train AI models — ours or third-party providers'.

What we store and why

Account information

Name, email address, and hashed password. Used for authentication only. We do not store payment details — payments are processed by Stripe, who handles PCI compliance on their side.

Your projects and slides

Deck outlines, slide content, speaker notes, and generated files (PPTX, PDF, MP4) are stored in your account. These are private by default. You can share individual decks via a share link — only decks you explicitly share become accessible to others.

Uploaded files

PDFs, DOCX, and PPTX files you upload to build from are kept in your account storage so you can re-edit them. You can delete them any time from the Dashboard. Files are not scanned for resale or analysis beyond what the AI needs to generate your deck.

Usage data

We record which features you use (decks created, exports, narration minutes consumed) to enforce plan limits and help us understand what matters to users. We do not sell this data.

Where your files live

CloviDecks is hosted on a dedicated VPS in the US (Salt Lake City). Generated files — PPTX, PDF, MP4, and uploaded source documents — are stored in Amazon S3 in the US-East region. Files are served over HTTPS via a CDN (Cloudflare). We do not use shared hosting or consumer-grade storage.

All file transfers use HTTPS/TLS 1.2+
S3 bucket is private — files are not publicly browsable
Shared links use signed, time-limited tokens — not raw S3 URLs
Database (MySQL) is not publicly accessible — server-local only

What we send to AI providers

When you generate a deck, your prompt (the topic or outline you entered) is sent to a third-party AI model to produce slide copy. Your raw uploaded documents may also be sent for extraction and summarization.

What we send

  • Your text prompt or document content
  • Style and format instructions (slide count, style preference)

What we do NOT send

  • Your account email or name
  • Other users' data
  • Billing or payment information

AI providers process your content under their own terms of service. CloviDecks uses API access (not consumer products) which, under current provider terms, means your data is not used for model training. If you have questions about specific providers, email us.

Leaving CloviDecks

You can delete your account at any time from Account Settings. When you do:

All your projects, slides, and speaker notes are permanently deleted from the database
Uploaded files and generated exports (PPTX, PDF, MP4) are deleted from S3 within 24 hours
Any active subscription is cancelled immediately — no further charges
Basic billing records (invoices) may be retained for up to 7 years as required by tax law

To request manual data deletion or a full data export, email vitaly@clovitek.com.

Full legal documents

Security questions or concerns?

If you believe you've found a security vulnerability, or if you have a specific data handling question not answered here, email vitaly@clovitek.com directly. Please do not publish vulnerabilities before giving us a chance to address them.