Privacy Policy

heydecks is operated by unscripted GmbH ("we", "us"). This policy explains what we collect when you use heydecks.com, the dashboard, the REST API, and the MCP server, and what we do with it.

Who we are

unscripted GmbH, Grienbachstrasse 17, 6300 Zug, Switzerland. For any privacy question or request, contact hello@unscripted.ch.

What we collect

• Account data. When you sign up, our authentication provider (Clerk) gives us your name and email address.
• Billing data. Payments are processed by Stripe. We do not store full card numbers; we keep your plan, subscription status, and billing metadata.
• Content. The decks, slides, brands, prompts, files, and URLs you create or submit through the dashboard, API, or MCP.
• Usage data. Basic, privacy-friendly analytics through our self-hosted analytics at c.heydecks.com, plus standard server logs such as IP address, user agent, and timestamps.
• Credentials. The API keys and MCP tokens you generate, stored hashed.

How we use it

We use this data to provide and operate the service, generate and render decks, process payments, prevent abuse, improve the product, and communicate with you about your account.

AI processing

To generate decks and images, content you submit is processed by AI models running on our infrastructure (Cloudflare Workers AI) and connected model providers. Over MCP, your connected assistant (for example Claude) writes the content; heydecks renders, brands, and exports it.

Service providers

We rely on a small set of processors that handle data on our behalf under their own terms: Clerk (authentication), Stripe (payments), and Cloudflare (hosting, storage, and AI inference), plus our self-hosted analytics. We do not sell your data.

Legal bases and your rights

For users in the EEA, the UK, and Switzerland, we process data under the EU GDPR and the Swiss Federal Act on Data Protection (FADP), on the bases of performing our contract with you, our legitimate interests in running and securing the service, your consent where required, and legal obligations. You have the right to access, correct, delete, port, restrict, and object to the processing of your data. To exercise any of these, email hello@unscripted.ch.

International transfers

We are based in Switzerland. Some of our providers process data outside your country under appropriate safeguards such as standard contractual clauses.

Data retention

We keep your account and content data while your account is active and as needed to meet legal obligations. You can ask us to delete your account and associated content at any time.

Security

We use encryption in transit, hashed credentials, and access controls to protect your data. No method of storage or transmission is perfectly secure, so we cannot guarantee absolute security.

Cookies

We use a session cookie for authentication and minimal first-party analytics. We do not use third-party advertising cookies.

Children

heydecks is not directed at children under 16.

Changes

We may update this policy. Material changes will be posted here with a new date at the top.