Privacy Policy

Last updated: August 2, 2026

Decktell (operated by Gridline Labs, LLC) provides security awareness training for teams. This page explains, in plain language, what we store and what we do with it. The short version: we store the minimum needed to run your training and prove completion, we do not sell data, session recording runs only on our public marketing pages, and no third-party tag of any kind runs on the training pages your employees take. One advertising tag (Microsoft's, described under Analytics) also runs in the admin workspace to count conversions — it sees that events happened, never your roster or records.

What we store about workspace admins

• Your name, work email, and a hashed password.
• Your company name (you choose it; it appears on training emails and certificates).
• Billing status. Card details never touch our servers; payments are processed by Stripe.

What we store about employees (your team)

• Name (optional) and email address, added by their workspace admin.
• Training records: which decks were assigned, when training was started and completed, quiz score, and certificate number. This is the compliance record the product exists to produce, so it is retained until the workspace deletes it.
• Nothing else. Employees have no accounts and no passwords, and we do not track their browsing or build behavioral profiles. Employees can stop training emails with one click in any email we send.

Service providers

We use a small number of processors to run the service: hosting (DigitalOcean), email delivery (Resend), and payments (Stripe). Deck narration and custom deck generation use OpenAI's API; employee personal data is not included in generation requests.

Analytics

We measure product usage (for example, that a deck was assigned) with our own in-house analytics, stored in our own database. We do not sell or share data with data brokers.

We advertise Decktell on Bing, so Microsoft Advertising's tag runs on our site to tell us which ads led to a signup. It records that a signup, a first assignment, or a purchase happened. It is never told who did it, and it never sees your roster, your employees' names or addresses, or anyone's completion records.

On our public marketing pages only (the homepage, pricing, the training library, this privacy page, the terms page, and the sign-up and log-in forms) we also run Microsoft Clarity, which records anonymised session replays so we can see where people get stuck. Clarity is switched off everywhere else. It does not run inside your workspace, on your reports, or on the training pages your employees see.

Your rights

Workspace admins can remove employees at any time (completion history is kept for the workspace's compliance records until the workspace is deleted). To delete your workspace and all its data, or to ask anything about this policy, email mansur@decktell.com and we will handle it promptly.