Exactly how your content and data are handled.
An honest, specific account of what happens to your topic, your deck content, and your data at every step of a Decklyn generation.
What happens, step by step, when you make a deck.
Every step is specific and deliberate. Nothing moves that does not need to.
You give Decklyn a topic and audience
Your input is sent from the browser to a Decklyn server route over an encrypted connection (TLS). Nothing in the browser has access to provider API keys. The topic text is the only thing that leaves your browser at this step.
A language model writes the deck
The server calls the language model API with your topic and audience to produce a structured deck: outline, per-slide copy, and a narration script, all returned as validated JSON. The OpenAI API key lives server-side and is never included in any browser response.
An image model designs each slide
For each slide, the server calls the image model API with a short description produced by the language model. The generated image is stored with your deck. The API key stays on the server.
A voice model narrates the whole deck
The narration script is sent to a server route that calls ElevenLabs to synthesize the spoken voiceover, one segment per slide. Audio is stored with your deck. Your voice is not involved in this step.
The completed deck is stored in your account
Slides, images, and audio are stored for your account so you can present, share, or edit at any time. You can export or delete everything from Settings.
Third parties that process your data.
Decklyn uses two external AI providers. Their role is specific and limited to what is needed.
Language and image models
OpenAI
Generates your deck outline and slide copy (language model) and the visual for each slide (image model). Receives your topic, audience, and slide descriptions. Processed under a data processing agreement that prohibits using your data to train or improve any public model.
Data region: United States (OpenAI API default).
Voice narration
ElevenLabs
Converts the narration script into spoken audio for the full deck voiceover. Receives only the narration text, never personal account data. Processed under a data processing agreement.
Data region: United States (ElevenLabs API default).
How your account and data are protected.
API keys server-side only
OpenAI and ElevenLabs keys are stored server-side only. They are never included in any client-side code or API response.
Sessions use signed tokens
Each login creates a signed, short-lived session token. Tokens expire automatically and are invalidated immediately on sign-out.
Passwords hashed, never readable
Your password is hashed before storage using bcrypt. Decklyn never stores it in a form that can be read, reversed, or recovered.
Encryption in transit and at rest
All data moves over TLS. Stored data, including deck content, images, and audio, is encrypted at rest.
Export everything
Download a complete JSON export of your account and all your decks from Settings at any time.
Delete everything
Delete individual decks or your entire account from Settings. Account deletion removes all your data within 30 days as it propagates through backups.
Kept until you delete it.
Your decks, images, and audio are kept until you delete them or close your account. There is no automatic expiry. When you delete your account, your content is removed within 30 days as deletion propagates through backups. We retain billing records only as required by law.
See Your data for a plain-language walkthrough of everything that is stored and how to manage it.
Your decks are yours.
You own the decks Decklyn helps you create. We do not claim ownership over your content, and we do not use your individual deck content to train AI models or to share with other users. You can export everything or delete everything, anytime, from Settings.
Responsible disclosure
If you find a security issue in Decklyn, please tell us before disclosing it publicly. Write to security@getdecklyn.com with a description of the issue and steps to reproduce it. We will respond promptly, work with you to understand and address the issue, and credit you if you would like.
Questions about privacy or security?
We are glad to explain our practices in plain language.