Privacy Policy

Depending on how you use Showdeck, we may collect:

• Account details — email, name, password (stored by Firebase Auth), and optional Google sign-in profile info.
• Workspace & catalog content — organization profile, product photos, names, prices, descriptions, tags, and related catalog/deck data you create.
• Optional business profile — account type, purpose, and country if you provide them during onboarding or in settings.
• Billing records — plan, subscription status, and transaction references from Paddle (we do not store your full card number).
• Usage & operations — login sessions, feature usage needed to run quotas, error logs, and (when enabled) server-side product analytics events.
• Public reports — privacy-minimised abuse or issue reports you or visitors submit.
• Buyer interest / lead requests — when a visitor uses Send to business on a public catalog or deck, we store the items they selected plus any name, phone, email, or note they provide, and may email that request to the workspace (Owner/Admin see full contact detail; other alert recipients may get a redacted summary).

• Anthropic — field extraction from product photos.
• PhotoRoom — photo cleanup and stylized stills.

Those providers process data under their terms for the request. Do not upload content you are not allowed to share with these processors.

• Google Firebase / Google Cloud — auth, database, and file storage.
• Vercel — website and API hosting, plus cookieless Web Analytics (page views / referrers; not an ad network).
• Paddle — payments and subscriptions (Merchant of Record).
• Resend — transactional email.
• Anthropic & PhotoRoom — AI features you trigger.
• Sentry — error monitoring (when configured; we avoid unnecessary personal data in error reports).
• Amplitude — product analytics from our servers (pseudonymous where practical; no ad network).

We may also disclose information if required by law, or to protect Showdeck, our users, or the public from harm or fraud.

• Essential session cookie — keeps you signed in to the app.
• Attribution cookie (sd_ref) — if you arrive via a referral link, we may remember that code briefly so we can credit the referral when you create a workspace.

We do not use advertising cookies or sell data to ad networks. Vercel Web Analytics is cookieless (page views and referrers only). If we add client-side analytics that need consent, we will update this policy and show a consent choice.

To make a request, email info@novech.io. We will verify the request and respond within 30 days (or sooner if local law requires). Workspace owners can also manage much of their content directly in the app.