Privacy policy

1. Who we are

[Company name], [Address, City, Country], VAT [VAT number] ("Dekvia", "we") provides the Dekvia add-in for Microsoft PowerPoint, the website dekvia.com and the related services (the "Service"). We are the data controller for the personal data described in this policy. Contact: [email protected].

2. What data we collect

• Account data: name, email address, organisation, user profile and licence, when you create an account or your organisation assigns you a seat.
• Library content: the templates, themes and example content you or your organisation store in the Dekvia library.
• AI requests: the text you type into Fill with AI, Propose, Make slide or Make the deck, and what Keep my data private allows: with Off, the current texts and numbers of the slide (up to 20 rows); with Structure only, the column headers, the number of rows and the number formats, never the values; with Masked, codes and proportions instead of names and figures. In a deck, the titles of the slides already made are sent too. The details are on the security page.
• Usage and diagnostic data: which features are used, errors, PowerPoint and add-in version, anonymised where possible.
• Website data: technical request data (IP address, browser, pages visited) processed by our hosting provider, and the emails you send us, including those prepared by the early-access and tester forms. The forms themselves send nothing to a server: they open your email app.

3. Why we process it and on what basis

• To provide the Service and your licence (performance of a contract, art. 6(1)(b) GDPR).
• To operate Fill with AI and Propose (performance of a contract).
• To keep the Service secure, fix errors and improve it (legitimate interest, art. 6(1)(f)).
• To answer your requests and send service communications (contract and legitimate interest).
• To send product news, only with your consent, which you can withdraw at any time (art. 6(1)(a)).

4. AI features

Fill with AI, Propose, Make slide and Make the deck use the OpenAI API, called by our API. What the AI receives depends on the position of Keep my data private chosen by you or required by your organisation (Off, Structure only, Masked), as listed on the security page. We do not keep the content of AI requests; we keep a daily count of calls per user. Dekvia uses the OpenAI API; see OpenAI's API data usage policy.

5. Where data is stored

The Service runs on Microsoft Azure in the European Union. Transfers outside the EU (for example to an AI provider) are covered by the European Commission's standard contractual clauses or an adequacy decision.

6. Retention

Account data and library content are kept for the duration of the contract and deleted within 90 days after it ends. Diagnostic data is kept for 12 months. Website logs are kept for 30 days.

7. External processors and sharing

We use these providers to run the Service:

• Microsoft 365 (Microsoft): our email, for the addresses support@, sales@, hello@, privacy@ and [email protected].
• Microsoft Azure (Microsoft): the Dekvia API, the task pane and the library, when they are hosted by us.
• OpenAI: the AI features, through the OpenAI API (section 4).
• Cloudflare: hosting of the website dekvia.com and of its domain.

We share data with authorities only where the law requires it. We do not sell personal data.

8. Your rights

You may access, correct, delete or export your data, restrict or object to processing, and withdraw consent, by writing to [email protected]. You may lodge a complaint with your supervisory authority (in Italy, the Garante per la protezione dei dati personali).

9. Cookies

dekvia.com uses only strictly necessary cookies. We do not use advertising or cross-site tracking cookies.

10. Changes

We will post any change to this policy on this page and, for material changes, notify account holders by email.