Privacy Policy

Version 1.0 — effective 5 September 2026.

This Policy explains what personal data Presentaz collects, why, who receives it, how long we keep it, and the rights you have. It applies to presentaz.com and related Presentaz services. The data controller is the Presentaz operating company identified on our checkout and receipts (contact: legal@presentaz.com).

1. What we collect

Account data: your email address, display name, plan/tier, and sign-in records. We use passwordless magic-link sign-in, so we never store a password.
Content you upload: books, documents, decks, images and instructions you submit for processing ("User Content"), and the outputs generated from them.
Billing data: your credit wallet ledger (purchases, holds, settlements, releases, refunds) and order references. Card and payment details are collected and processed by our merchant of record (the payment provider named at checkout) — Presentaz never receives your full card number.
Service records: job specifications, processing logs, error logs and support correspondence.
Technical data: IP address, browser type and basic request logs used for security and operations. We do not run third-party advertising or cross-site tracking.

2. Why we process it (legal bases)

To provide the Service you request — creating your account, processing Jobs, delivering outputs, operating the wallet (performance of a contract).
To send transactional email: magic sign-in links, review-expiry warnings and receipts (performance of a contract).
To secure the Service, prevent fraud and abuse, and enforce our Terms (legitimate interests).
To meet legal obligations: accounting, tax and responding to lawful requests.
With your consent, where we ask for it expressly — for example, any future opt-in to model training. Presentaz does not use your User Content to train general-purpose AI models, and does not permit its providers to do so for their own purposes, without your express opt-in.

3. Who receives data (processors)

We share personal data only with service providers acting on our instructions, to the extent needed to run the Service:

Cloud hosting for the application and databases.
Cloudflare (R2 object storage) — stores uploaded files and rendered videos.
Anthropic (Claude API) — processes text you submit to generate video scripts. API content is not used to train Anthropic's models by default.
Microsoft Azure (Speech service) — converts narration text to audio. Customer content is not used to train Microsoft's models.
Resend — delivers transactional email (sign-in links, notifications).
Our merchant of record — processes payments and handles payment data as an independent controller for its checkout.

We do not sell personal data and we do not share it for cross-context behavioural advertising.

4. International transfers

Our providers process data in multiple regions, including the United States and Europe. Where data of EU/EEA or UK residents is transferred internationally, we rely on adequacy decisions or standard contractual clauses as applicable and require equivalent protection from processors.

5. Retention

Account data: kept while your account exists, and thereafter only as needed for legal, security or billing purposes.
Rendered files: free accounts — 30 days from creation; paid accounts — while the plan is active plus 90 days; Book Pass projects — 12 months. Expiry warnings are sent where possible before deletion.
Project plans and specifications: retained while your account and project remain active so expired outputs can be reproduced; deleted on verified account-closure request, subject to backups and legally required retention.
Wallet ledger and billing records: retained for the period required by accounting and tax law.
Backups: residual copies are purged on a rolling schedule after active deletion.

6. Your rights

Depending on your location (including under the GDPR, UK GDPR and applicable US state privacy laws), you may have the right to access, correct, delete, or receive a portable copy of your personal data, to object to or restrict certain processing, to withdraw consent, and to non-discrimination for exercising these rights. To exercise any right, email legal@presentaz.com from your account email; we will verify the request and respond within the legally required time. You may also lodge a complaint with your local supervisory authority.

7. Security

Access to personal data is limited to personnel and processors who need it to operate the Service. Data is encrypted in transit; credentials are never stored as passwords; media downloads use signed, expiring URLs. No online service is perfectly secure — we handle legally notifiable breaches as required by law.

8. Children

The Service is for adults. You must be at least 18 to create an account. We do not knowingly collect personal data from children; if you believe a child has provided data, contact legal@presentaz.com and we will delete it.

9. Changes

We will post updates to this Policy here and give reasonable notice of material changes. Continued use after the effective date constitutes acceptance where permitted by law.