Draft pending counsel review — last updated 2026-09-29. This is a working draft published for transparency. It is not final legal advice and will change after review.
California privacy notice
This notice supplements the privacy notice for California residents. It describes our planned collection design at launch, not a completed record of a preceding 12 months. Whether the California Consumer Privacy Act applies to us is under legal assessment; we intend to honour these rights regardless.
Notice at collection
We collect the categories of personal information below for the purposes listed, from you, your device and the service itself. We keep each category only for the period shown and then delete or de-identify it. We do not sell personal information or share it for cross-context behavioural advertising.
Categories we collect
| Category | Collection and source | Purpose and recipients | Retention | Sale / share |
|---|---|---|---|---|
| Identifiers | Email, account ID, IP address, from you and your device | Authentication and security; infrastructure, authentication and email providers | Account and security schedules | No sale; no cross-context advertising sharing |
| Customer records | Account and contact details you supply | Service and support; support systems | Account and support schedules | Same |
| Commercial information | Purchases, plan, invoice references | Billing, tax, entitlements; payment and accounting providers | Statutory financial schedule | Same |
| Internet or network activity | Necessary requests and feature errors; optional analytics only after your choice | Operations and security; opted-in analytics | Short operational schedule | No advertising pixels |
| Audio and electronic content | Microphone stream you start, uploaded or opted-in recordings | Transcription and coaching; speech and model providers | Privacy notice retention schedule | No sale or sharing |
| Education or professional information | Only content or rubrics you provide | The presentation preparation you request | Project schedule | No enrolment or employment profiling |
| Inferences | Explainable practice observations and scores | Private coaching and progress you request | Report schedule | No ad targeting or consequential ranking |
| Sensitive personal information | Account credentials and session tokens | Account access and security | Credential and session schedule | Restricted access; no secondary use |
| Precise location, government ID, biometric identification | Not requested or intentionally processed | Not a product feature | Incidental uploads handled under the source policy | Not collected for profiling |
| Protected characteristics, health data | Not requested; may appear incidentally in your content | Only the source processing you request | Minimised | Never used for grading |
We reconcile this table with our actual data inventory, software components, logs and vendor contracts at launch and periodically after.
No sale or sharing
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We don’t use advertising pixels or third-party advertising cookies. We have no actual knowledge of selling or sharing personal information of consumers under 16.
Sensitive personal information
We use sensitive personal information (account credentials and tokens) only to provide the service and keep it secure, which are permitted purposes. We don’t use it to infer characteristics about you.
Your rights
- Know and access the personal information we hold and how we use it.
- Delete personal information, subject to legal exceptions.
- Correct inaccurate personal information.
- Opt out of sale or sharing. We don’t sell or share, but you may still submit a request.
- Limit use of sensitive personal information. We already limit it to permitted purposes.
- Non-discrimination: we won’t deny service, charge different prices or provide a different quality of service because you exercised a right.
How to make a request
- Online: privacy requests (signed in), or delete your account.
- Email: privacy@slidedeck.my.
We verify requests by confirming control of the email address on the account. An authorised agent may submit a request with your signed permission; we may ask you to verify your identity directly. We aim to respond within the time the law requires.
Global Privacy Control
We honour the Global Privacy Control (GPC) browser signal as a valid request to opt out of sale and sharing for that browser, and for your account if you are signed in. Because we don’t sell or share, the signal doesn’t change how the service works for you.