Privacy Policy

Last updated: June 2026

1. Who we are

Deckly is a SaaS platform for OOH media owners, built and operated by Ivra Labs (Pty) Ltd, based in South Africa. When we refer to "Deckly", "we", "us", or "our" in this policy, we mean Ivra Labs. Questions? Reach us at privacy@godeckly.io.

2. What data we collect

We collect the following categories of data:

  • Account information: Name, email address, company name, and password (hashed) provided during signup.
  • Usage data: Pages visited, features used, actions taken within the platform (e.g. rate card generation, site creation).
  • Uploaded content: PowerPoint (.pptx) files, images, and other assets you upload. These are used solely to provide the service.
  • Billing data: Payment method details processed by Paystack or Stripe — we do not store raw card numbers.
  • Technical data: IP address, browser type, device type, and session identifiers collected automatically via cookies.

3. How we use your data

  • To create and manage your account and provide the Deckly service.
  • To process subscription payments and send receipts.
  • To send transactional emails (password resets, billing notifications).
  • To monitor platform performance and investigate issues.
  • To improve the product through aggregated, anonymised analytics.
  • To comply with legal obligations.

We do not sell your data to third parties. We do not use your uploaded content to train AI models.

4. Data storage and security

Your data is stored on infrastructure provided by Supabase (PostgreSQL database + file storage) and Vercel (application hosting), both of which operate data centres in the EU-West-2 (London) region. Data is encrypted at rest and in transit (TLS 1.2+). Access to production data is restricted to authorised Ivra Labs personnel.

5. Data retention

We retain your account data for as long as your account is active. After account deletion or cancellation, data is retained for 30 days to allow for recovery, then permanently deleted within 90 days. Anonymised analytics data may be retained indefinitely.

6. Your rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Ask us to correct inaccurate or incomplete data.
  • Deletion: Request deletion of your account and all associated data.
  • Portability: Receive your data in a machine-readable format.
  • Objection: Object to processing where we rely on legitimate interests.

To exercise any of these rights, email privacy@godeckly.io. We will respond within 30 days.

7. Third-party services

We use the following sub-processors: Supabase (database, auth, storage), Vercel (hosting), Paystack / Stripe (payments), Resend (transactional email), and PostHog (product analytics). Each sub-processor has their own privacy policy and data processing agreements in place.

8. Cookies

We use cookies for authentication sessions and product analytics. See our Cookie Policy for full details.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice at least 14 days before they take effect.

10. Contact

Privacy enquiries: privacy@godeckly.io
Ivra Labs (Pty) Ltd, South Africa