Privacy
Last updated 7 August 2026.
What we do with your file
When you upload a PowerPoint file we read it to extract your theme colours, fonts, slide layouts and any images placed on the slide master. That extraction happens on our server, in-process. We do not send your file to any third party, we do not use it to train anything, and nobody reads it.
Your slide content never leaves with the package
People upload a real deck, not a blank template — so the file we receive usually contains client work. The template we give you back is rebuilt from your slide master, layouts and theme only. Your content slides, their photographs and the workbooks behind your charts are discarded and never form part of the package. That matters because the package syncs to OneDrive and is read by an AI assistant.
How long we keep things
- Before you buy. Your file is held so we can build your package if you decide to purchase. If you don't, it is deleted automatically within 2 hours.
- After you buy. Your uploaded file is deleted as soon as your package is built.
- Your download. The built package and its order record are removed after 24 hours. Save the zip when you get it, or email it to yourself from the success page.
Uploads are stored outside the web root under unguessable filenames and are not reachable over the internet.
Payment
Payments are handled by Stripe. We never see or store your card details. We keep the Stripe session reference so we can match your payment to your download, and it expires with everything else.
If you ask us to email your package — or if Stripe passes us the address you paid with — we use it to send that email. Our logs record a one-way hash of the address and its domain, so we can spot a mail provider silently rejecting our messages — never the address itself.
We keep a copy of the delivery email, including your address and the package that was sent, in our own mailbox. It is our record that the thing you paid for was actually delivered, and it lets us resend it or answer a support query later. It is not used for anything else, and we will not add you to a mailing list. Ask us to delete it at any time using the deletion form or by emailing privacy@skillmdcreator.ai.
Cookies and analytics
- Strictly necessary. A session cookie keeps your upload attached to your browser tab, and a cookie remembers your choice below. Neither can be switched off without breaking the site.
- Analytics. If you accept, we count page views, previews and purchases so we can tell which parts of the site work. Visitors are identified by a salted daily hash of the IP address — it cannot be reversed to an IP or linked across days. No third-party analytics, no advertising, no tracking pixels.
- Transaction records. Purchases, downloads and package emails are recorded regardless of the analytics choice — they are business records for a paid product, not behavioural tracking. They carry the same anonymous visitor hash.
Short-lived rate-limit records are keyed to a hash of your IP address and expire within two hours. Error logs may record that a request failed and why, but never the contents of your file.
Your rights
Everything we hold expires on its own within 24 hours. To have something removed sooner, or to ask what we hold, use the deletion request form or email privacy@skillmdcreator.ai with the session reference from your Stripe receipt.