Privacy notice
Version 2026-10-17-production-notice · All legal documents
1. Who we are and which role we have
Lumdeck is operated by Quietstack OÜ (registry code 17608504), Sepapaja tn 6, 15551 Tallinn, Estonia. Privacy contact: office@kinesislab.ai. We have not appointed a data protection officer; the privacy contact handles every request.
We hold personal data in two roles:
- As controller for the data we need to run our business: accounts, sign-in, billing, support, security, abuse notices and this website.
- As processor for the customer that owns a workspace: the presentations in it, the people it shares with, the e-mail addresses viewers enter on gated links, viewer statistics, live-session participants and what agents submit through the API. The workspace's owner decides about that data; our Data processing agreement governs it. If you viewed a deck someone shared with you, contact them first; we help them answer you.
2. Data we hold as controller
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Account: name, e-mail, password hash or Google sign-in, sessions with browser and IP address | Sign you in and keep the account secure | Contract, Art. 6(1)(b); security, Art. 6(1)(f) |
| Terms acceptance: versions, time, method, salted IP hash, browser | Prove which terms you accepted | Legitimate interest, Art. 6(1)(f) |
| Workspace membership, roles, invitations, audit log of changes | Run workspaces and show who did what | Contract; legitimate interest |
| Billing: plan, subscription status, Stripe customer id, invoices | Charge for paid plans, keep accounting records | Contract; legal obligation, Art. 6(1)(c) |
| Support and privacy requests, and our replies | Answer you | Contract; legal obligation |
| Security events: failed sign-ins and denied requests with a salted address hash; rate-limit counters | Protect the service from abuse | Legitimate interest |
| Notices about content: reason, explanation, URL, the notifier's name and e-mail, our decision and statement of reasons | Handle notices and complaints under the Digital Services Act | Legal obligation; legitimate interest |
| E-mails we send you (content kept 30 days, delivery records 1 year) | Deliver account mail and prove delivery | Contract; legitimate interest |
We do not sell personal data. Optional marketing measurement requires your consent. We make no decisions with legal or similarly significant effects by automated means alone.
3. Data we process for workspaces
- Presentations: the files you upload and their versions, folders, tags, search text, previews and screenshots.
- Sharing: share links, named people (e-mail, role), e-mail addresses entered on gated links and the one-time codes sent to them.
- Viewer statistics: views, time per slide, country and device type. A viewer is counted with a salted hash that changes every day; Lumdeck sets no cookie and stores no IP address for statistics. Do Not Track and Global Privacy Control are honoured.
- Live sessions: who joined, display names, the current slide and timestamps.
- API and MCP: key names, scopes and last use; content and metadata that agents submit.
4. If you open a shared deck
- The share page and link previews in chat and e-mail apps show the deck title and the name of the workspace that shared it. Lumdeck makes that information visible to anyone who has the link.
- On an e-mail gated link, the address you enter is shared with the workspace and receives a one-time code from us.
- A deck is made by its author and may load fonts, scripts or images from public sources such as jsDelivr, unpkg, cdnjs, Google Fonts, the Tailwind CDN, esm.sh, or any HTTPS image address. Those providers receive your IP address and browser details under their own privacy policies. Lumdeck's own statistics use no cookies, but we cannot vouch for what a deck's author added.
- Reporting a deck: the workspace is not told who reported it. We may have to disclose the notifier's identity only where the law requires it.
5. Where data is stored
- Cloudflare D1 and R2 host the database and files. Lumdeck does not offer an EU-only storage or processing guarantee. The exact placement of every resource has not been independently verified; contact us before uploading data with a residency requirement.
- Requests are handled by Cloudflare's global network: code runs in the data centre nearest to the visitor, so data passes through it in transit, including outside the EU.
- Usage events for statistics (Cloudflare Analytics Engine) and deck screenshots (Cloudflare Browser Rendering) are processed by Cloudflare without a regional guarantee.
- Transactional e-mail is sent by Resend, which stores account data, e-mail metadata and logs in the United States.
- Payments are handled by Stripe; Google processes sign-in data if you choose Google.
6. Who processes data for us, and transfers
The current list, with each provider's role and location, is on the sub-processors page. Where personal data leaves the European Economic Area, we must establish an applicable transfer basis. This may include an adequacy decision covering the recipient or the European Commission's Standard Contractual Clauses (Decision (EU) 2021/914), with the required assessment and safeguards. Cloudflare, Resend and Stripe incorporate their data processing terms into their standard service agreements. Their published transfer terms provide the following safeguards where applicable:
- Cloudflare, Inc. (United States): Data Privacy Framework and Standard Contractual Clauses.
- Plus Five Five, Inc., trading as Resend (United States): Data Privacy Framework and Standard Contractual Clauses.
- Stripe Payments Europe, Limited (Ireland), with onward transfers to Stripe, LLC (United States): Data Privacy Framework and Standard Contractual Clauses.
- Google (United States), for Google sign-in only: Data Privacy Framework.
Contact our privacy address for our current provider and transfer record, including any limits relevant to your data.
7. How long we keep data
- Account data and terms acceptances: until you delete the account.
- Presentations: until you delete them; deleted decks stay 30 days in the trash. Deleting a workspace removes its files.
- Viewer statistics: up to two years, shown according to the workspace's plan.
- Security events: 90 days. Audit log: two years.
- E-mail contents: 30 days; delivery records: one year.
- Notices about content and statements of reasons: two years after the decision.
- Invoices and accounting records: seven years, as the Estonian Accounting Act requires.
- Purchase acknowledgements: unpaid checkouts for 30 days; paid agreements for seven years after payment. Withdrawal declarations: until resolved, then three years for complaint and legal-claim handling. Financial evidence is retained separately where required. These records may survive account deletion.
- Database backups expire automatically after at most 30 days.
8. Security
Connections are encrypted (TLS); stored data is encrypted by Cloudflare. Workspaces are isolated from each other on every request, decks run in a sandbox on a separate origin, passwords are stored as hashes, and access by our staff is limited and logged. Details are in Annex II of the Data processing agreement.
10. Your rights
You can access, download, correct and delete your data, object to processing based on legitimate interest, restrict processing and receive your data in a portable format. Account → Privacy & data has a download of everything tied to your account, a request form and self-service account deletion. You can also write to office@kinesislab.ai. We answer within one month.
You can complain to a data protection authority. In Estonia that is the Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate), Tatari 39, 10134 Tallinn, info@aki.ee.
11. Children
Lumdeck is a service for businesses and is not directed at children. Account holders must be at least 18.
12. Changes
We update this notice when our processing changes and show the new version date at the top. We tell account holders about material changes by e-mail or in the app.