Your work stays yours.
This notice explains what Pointo processes to generate, deliver, bill for, share, and delete a presentation.
Effective 12 July 2026Who is responsible
Pointo, Legal address pending production configuration, operates Pointo. Privacy and data requests can be sent to support@example.invalid.
Data we process
We process account identifiers, project settings, prompts, files you upload, extracted evidence, generated presentation objects, quality reports, usage and billing records, and bounded security logs. Public presentation analytics use a rotating one-way viewer hash; they do not store the viewer's IP address, source text, or slide text.
Why we process it
Processing is used to authenticate you, provide requested generation and export, preserve source grounding, prevent abuse and duplicate charges, complete purchases, operate shared presentations, recover failed jobs, and meet security, tax, accounting, and legal duties.
Service providers
Supabase provides authentication and relational storage; Cloudflare R2 stores private source and generated files; Stripe processes payment; configured DeepSeek and Google Gemini services may process bounded source excerpts or a single contact sheet for generation and visual critique. Pointo does not send database credentials, billing secrets, or unrelated projects to model providers.
Retention and deletion
Revoked or expired hosted-slide objects enter a seven-day cleanup window. Purchased exports normally remain available for 30 days. Project and account deletion immediately remove user access and queue idempotent object deletion. Provider cost metadata may be retained in de-identified form for up to 13 months; legally required financial records may be kept longer without an active Pointo account link.
Your choices and rights
The workspace lets you delete sources, projects, published links, and your account. You may also request access, correction, portability, restriction, objection, or deletion where applicable. Statutory rights depend on your location and are not limited by this notice.
Security and international processing
Pointo uses private object storage, short-lived signed URLs, scoped credentials, row-level database authorization, encrypted transport, and deletion reconciliation. Providers may process data in other countries under their contractual transfer safeguards. No Internet service can promise absolute security; report a suspected incident to the support address above.