Privacy Policy

This Privacy Policy explains how Celoyn Global (Pvt) Ltd (“Presmo”, “we”) collects, uses, and protects your information when you use the Presmo application at presmo.app.

1. Information we collect

• Account email. We use passwordless magic-link sign-in, so we store the email address you sign in with.
• Documents & content you submit. PDFs, pasted text, or URLs you provide are processed to generate your deck. Uploaded content is processed in memory to produce the output and is not persisted on our servers after the request.
• Usage data. Plan, monthly deck counts, and basic analytics events (visit, signup, generation) to operate the service and improve it. To understand where our visitors come from, we also record the referring site or campaign tag (utm_source) of a visit — no third-party trackers are used, and this stays on our own servers.
• Cookies. A strictly-necessary sign-in cookie keeps you logged in, and one small first-party cookie remembers which channel first referred you so we can credit the right source when you sign up. We set no third-party or advertising cookies.
• Billing data. Handled by our payment providers (see below); we store only a customer reference and your plan status — never card numbers.
• Logs. Standard request logs (timestamp, route, status). Magic-link tokens are excluded from logs.

2. How we use it

• To authenticate you and provide the deck-generation service.
• To enforce plan quotas and process payments.
• To send transactional email (sign-in links, receipts, payment and quota notices).
• To monitor, secure, and improve the product.

3. Third-party processors

We share the minimum necessary data with providers that help us run the service:

• AI processing: document text is sent to Anthropic (Claude API) to generate the deck.
• Payments: Lemon Squeezy (merchant of record) and PayHere (local LKR) process payments under their own privacy policies.
• Email: Resend delivers transactional email.
• Hosting: Render, with Cloudflare for DNS/CDN and encrypted database backups on Cloudflare R2.

4. Data retention

Uploaded documents are not stored beyond the generation request. Account, usage, and billing-reference data are retained while your account is active and for 12 months thereafter, or as required by law.

5. Your rights

You may request access, correction, export, or deletion of your personal data by contacting us at [email protected]. We aim to respond within 30 days.

6. Security

We use HTTPS, signed session tokens, and access controls. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.

7. Changes & contact

We may update this policy; material changes will be posted here. Questions: [email protected].