Data residency

This page states plainly where your data lives and where it is processed. The short version: everything we store lives in the United Kingdom; some processing happens in the United States and the European Union while a deck is being built or a payment is being taken.

Stored in the UK

The database, sign-in system and file storage run on Supabase in Amazon's London region (eu-west-2). That covers your account, decks, versions, drafts, saved slides, workspaces, retained workspace data and generated files awaiting download.

Processed in the US and EU

The application itself runs on Vercel, whose server functions execute in the United States; your content passes through them in transit while a deck is generated, edited or downloaded, but is not stored there. The AI models that read your material and write the deck are provided by Anthropic and, depending on configuration, OpenAI or Google, all processing in the United States; your material is sent to them to build your deck and is not used to train their models under our agreements. Background job scheduling runs in Frankfurt (EU) and carries only job identifiers, never your content. Error monitoring is hosted in Germany and analytics in the EU, both content-free.

Payments and email

Stripe (payments) and Resend (service email) are US companies operating global infrastructure. Stripe holds your billing details; we never see card numbers. Emails we send you carry no deck content.

International transfers

Where processing leaves the UK, it happens under each provider's data processing terms with the UK and EU approved safeguards for international transfers (the standard contractual clauses and the UK addendum). The full list of providers and their roles is on the subprocessors page.

What this means for a privacy review

If your policy requires storage in the UK or EU: met. If it requires that no content ever transits US infrastructure: not met today, because deck generation runs on US-based compute and US-based AI providers, and we say so here rather than promise otherwise. Uploaded source files are deleted after generation (see Security), which keeps the US-touching footprint transient.