Privacy Policy

1. Introduction

DeckScorer is operated by IncluSend LLC ("Company," "we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the DeckScorer platform at deckscorer.app and any related services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your full name, email address, and password. If you sign up using a third-party authentication provider (e.g., Google OAuth), we receive your name, email address, and profile picture from that provider. We do not receive or store your third-party account password.

2.2 Uploaded Content

We store the pitch decks (PDF files) you upload to the Service, the analysis results and scores generated from those decks, custom scorecards you create, and any notes or outcomes you assign. This content is associated with your account and is strictly private to you. It is not accessible to other users unless you are part of a team organization, in which case it is shared only with members of your team.

2.3 Web Intelligence Data

When you analyze a pitch deck, the Service may collect publicly available information about the company from websites, LinkedIn profiles, and other public internet sources. This data is used solely to enrich your analysis results and is stored in association with the relevant analysis.

2.4 Payment Information

When you subscribe to a paid plan or purchase credits, payment processing is handled by Stripe, Inc. We do not directly collect, store, or process your credit card numbers or bank account details. We receive from Stripe a customer identifier, subscription status, and billing period information, which we store to manage your account. For more information on how Stripe handles your payment data, please refer to Stripe's Privacy Policy.

2.5 Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, actions taken (such as analyses run or companies followed), timestamps, and error logs. This data helps us improve the Service, diagnose issues, and understand usage patterns.

2.6 Device & Technical Data

We may collect technical information about the device and browser you use to access the Service, including IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URLs.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, operate, and maintain the Service, including processing your pitch deck uploads, generating AI-powered analyses, and delivering company tracking updates.
• Account Management: To create and manage your account, authenticate your identity, and process subscription payments and billing.
• Communications: To send you transactional emails related to your account (e.g., verification, password resets, billing receipts, digest notifications). We may also send product announcements and updates; you can opt out of non-essential communications at any time.
• Service Improvement: To analyze usage patterns, identify bugs, and improve the performance, features, and user experience of the Service.
• Security & Fraud Prevention: To detect, prevent, and respond to security incidents, fraud, abuse, and other harmful activity.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

4. AI Processing

Your pitch decks and associated data are processed by third-party AI models to generate analysis results, scores, and recommendations. This processing is performed solely to deliver the Service to you.

We do not use your uploaded content (pitch decks, scorecards, or analysis results) to train AI models. Your content is sent to AI providers only as needed to generate your specific analysis results and is not retained by those providers for model training purposes.

AI chat conversations you have about your analyses are stored in our database to maintain conversation history and provide continuity across sessions. Chat logs are associated with your account and the relevant analysis, and are deleted when you delete the associated analysis or your account.

5. Data Ownership & Confidentiality

Your data is yours. All content you upload to or create within DeckScorer — including pitch decks, analyses, scorecards, theses, chat conversations, and inbound submissions — belongs to you and is treated as confidential.

IncluSend LLC employees, contractors, and affiliated entities (including but not limited to Visible Ventures and any other related company) do not access, review, or have visibility into your uploaded content, analysis results, or any other account data. The only exceptions are:

• Automated processing: Your content is processed by automated systems (including AI models) solely to deliver the Service. No human reviews this content as part of normal operations.
• Technical support: If you contact us for support and explicitly grant permission, a support representative may access specific data to help resolve your issue.
• Legal requirements: If compelled by law, regulation, or valid legal process (e.g., a court order or subpoena).

Each user account is isolated at the database level using row-level security policies. Users cannot see, access, or interact with data belonging to other accounts. Team organization members share only the data explicitly designated as shared within that organization.

6. Cookies & Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential Cookies: Required for the Service to function properly, including authentication session cookies and security tokens. These cannot be disabled.
• Functional Cookies: Used to remember your preferences and settings to improve your experience.
• Analytics: We may use analytics tools to understand how users interact with the Service, including aggregate usage statistics and performance monitoring. We use Sentry for error tracking to identify and fix bugs.

We do not use advertising or marketing tracking cookies. We do not sell your data to advertisers or use third-party advertising networks on the Service. You can manage cookie preferences through your browser settings.

7. Data Sharing & Third-Party Services

We share your information with third-party service providers only as necessary to operate and deliver the Service. These providers are contractually obligated to protect your data and to use it only as directed by us. Our key service providers include:

• Cloud Infrastructure & Database (Supabase): Hosts our application database, handles user authentication, and stores your account data and uploaded content.
• AI Model Provider (Anthropic): Processes pitch deck content to generate AI-powered analyses and scores. Content is sent for processing only and is not used for model training.
• Payment Processing (Stripe): Handles subscription billing, credit pack purchases, and payment method management. Stripe operates as an independent data controller for payment data.
• Hosting & Deployment (Vercel): Hosts and serves the web application, handling HTTP requests and static asset delivery.
• Email (Resend): Sends transactional emails including account verification, password resets, and weekly digest notifications.
• Error Monitoring (Sentry): Captures application errors and performance data to help us identify and fix issues. Error data may include technical context such as browser information and anonymized user identifiers.

We may also disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of IncluSend LLC, our users, or the public.

In the event of a merger, acquisition, reorganization, bankruptcy, or other similar event, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

8. Data Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS 1.2 or higher
• Encryption of data at rest using AES-256
• Secure cloud infrastructure with network isolation and access controls
• Authentication and authorization controls for all account access
• Regular security monitoring and error tracking
• Regular data backups and disaster recovery procedures

While we strive to protect your information, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. Specifically:

• Account data: Retained for the duration of your account. Upon account deletion, your data is permanently and immediately deleted, including all analyses, scorecards, chat history, and associated files.
• Uploaded content and analyses: Retained for the duration of your account. You may delete individual analyses at any time through the Service interface.
• Usage and technical data: Retained for up to 12 months for analytics and service improvement purposes.
• Billing records: Retained as required by applicable tax and accounting laws, typically for a period of 7 years.

We may retain certain information after account deletion where required by law or for legitimate business purposes, such as fraud prevention or dispute resolution. In such cases, we will apply appropriate safeguards to the retained data.

10. Your Privacy Rights

Depending on your location and applicable laws, you may have certain rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal information.
• Right to Deletion: Request deletion of your personal information, subject to certain exceptions (e.g., legal retention requirements).
• Right to Object: Object to or restrict certain processing of your personal information.
• Right to Data Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@deckscorer.app. We will respond to your request within 30 days, or sooner if required by applicable law. We may need to verify your identity before processing your request.

We will not discriminate against you for exercising any of your privacy rights.

11. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you, the sources of that information, and the purposes for which it is used.
• Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising purposes.
• Right to Non-Discrimination: We will not deny you the Service, charge you different prices, or provide a different quality of Service because you exercised your CCPA rights.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

12. European Economic Area & UK Residents (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal information based on the following lawful bases under the General Data Protection Regulation (GDPR):

• Contract Performance: Processing necessary to provide the Service you have requested (e.g., account management, pitch deck analysis).
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the Service, preventing fraud, and ensuring security, where such interests are not overridden by your rights.
• Legal Obligations: Processing necessary to comply with applicable legal requirements.
• Consent: Where we rely on consent, you may withdraw it at any time.

In addition to the rights described in Section 10, EEA and UK residents may lodge a complaint with their local data protection supervisory authority.

13. International Data Transfers

Your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have different data protection laws than your country of residence. When we transfer your data internationally, we take appropriate safeguards to ensure your information is protected in accordance with this Privacy Policy and applicable data protection laws.

14. Children's Privacy

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child, please contact us immediately at support@deckscorer.app.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a notice within the Service. Your continued use of the Service after any changes constitutes your acceptance of the revised Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 30 days.