Privacy Policy

Last updated: 24 May 2026

This Privacy Policy explains how Woolkoo ("we", "us", "our") collects, uses, shares, and protects personal data when you use the Woolkoo presentation platform at https://woolkoo.com and related services (the "Service").

1. Who we are

The Service is operated under the name Woolkoo at https://woolkoo.com. For privacy enquiries, data subject requests, or complaints, contact us at privacy@woolkoo.com.

If you use Woolkoo on behalf of an organization, your organization may be the controller of presentation content and collaborator data. In that case, we process that data as a processor according to your organization's instructions and any applicable data processing agreement.

2. Scope

This policy applies to visitors, account holders, collaborators, and anyone who interacts with the Service. It does not apply to third-party websites linked from Woolkoo or to services that have their own privacy policies (for example Stripe Checkout).

3. Personal data we collect

Account and identity

  • Email address and authentication identifiers when you sign up or sign in (magic link or Google OAuth).
  • Session and security data (cookies, IP address, browser type, timestamps) needed to keep you logged in and protect accounts.

Content you provide

  • Presentations, slides, prompts, comments, design systems, and related metadata you create or upload.
  • Files you attach (documents, images, PDFs) and URLs you ask us to fetch for generation context.
  • Voice input when you use dictation features (processed to produce text).
  • Collaborator email addresses you invite to view, comment on, or edit content.

Billing

  • Subscription status, plan tier, and Stripe customer identifiers. Payment card details are collected and processed by Stripe; we do not store full card numbers on Woolkoo servers.

Usage and technical data

  • Feature usage needed to enforce plan limits (for example Woolkoo token allowances, project limits).
  • Internal logs of AI API usage for billing and abuse prevention (not shown as vendor costs to end users).
  • Aggregated analytics about site usage when you accept non-essential cookies (see Cookies below).
  • Error and performance diagnostics to maintain reliability.

4. How we use personal data

We use personal data to:

  • Provide, operate, and improve the Service (generation, editing, sharing, collaboration).
  • Authenticate users and prevent fraud, abuse, and security incidents.
  • Process subscriptions and communicate about billing, plan changes, and support.
  • Enforce our Terms of Service and applicable law.
  • Respond to your requests and communicate about the Service.

Legal bases (EEA/UK): where applicable, we rely on (a) performance of a contract (providing the Service you signed up for), (b) legitimate interests (security, product improvement, analytics only with your consent), and (c) consent where required (non-essential analytics cookies).

5. AI and third-party model providers

Woolkoo uses artificial intelligence to generate and refine presentations. When you use AI features, we send relevant prompts, slide content, and excerpts from uploaded or linked materials to third-party model providers (such as OpenAI and Anthropic) solely to fulfill your request.

  • Do not submit special category or highly sensitive personal data(health, biometrics, government IDs, children's data, etc.) in prompts or uploads unless your organization has explicitly approved doing so and appropriate safeguards are in place.
  • AI outputs may be inaccurate or incomplete. You are responsible for reviewing content before sharing or relying on it.
  • Model providers process data under their own terms and privacy policies. We configure API access for service delivery; we do not use your content to train Woolkoo-branded models unless we separately tell you and obtain any required consent.

Optional features may send data to additional processors: speech-to-text (for example Deepgram), image generation (OpenAI), and automated image moderation (AWS Rekognition) when enabled.

6. How we share personal data

We share personal data only as needed to run the Service, including with:

  • Infrastructure and auth: Supabase (database, authentication, file storage), Vercel (hosting).
  • Payments: Stripe (subscriptions and customer portal).
  • AI and media: OpenAI, Anthropic, and other configured LLM or image providers; optional Deepgram and AWS as described above.
  • Security: hCaptcha or Cloudflare Turnstile (bot protection at sign-in).
  • Collaborators you invite: other Woolkoo users you explicitly grant access to your presentations or design systems.
  • Professional advisers and authorities when required by law or to protect rights, safety, and security.

We do not sell your personal data.

7. International transfers

We and our subprocessors may process data in the United States, the European Economic Area, the United Kingdom, and other countries. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms. Contact privacy@woolkoo.com for more information about transfers relevant to your use.

8. Retention

We retain personal data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When you delete content or close your account, we delete or anonymize data within a reasonable period, subject to backups and legal retention requirements. Some aggregated or de-identified data may be kept longer for analytics and security.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. You may also withdraw consent where processing is consent-based, and lodge a complaint with your local supervisory authority.

Self-service: while signed in, you can exercise data portability and erasure directly from your profile page. "Download my data" exports your account, presentations, slides, design systems, comments, and usage history as a JSON file. "Delete account" permanently removes your account and associated data, including uploaded files. Account deletion is immediate and cannot be undone; if you have an active paid subscription, cancel it first.

To exercise rights, email privacy@woolkoo.com. We may need to verify your identity. If you access Woolkoo through an enterprise customer, contact your organization first; we will assist them as processor where applicable.

10. Security

We use technical and organizational measures appropriate to the risk, including encryption in transit, access controls, and row-level security in our database. No method of transmission or storage is completely secure; you use the Service at your own risk and should protect your account credentials.

11. Children

The Service is not directed at children under 16 (or the age of digital consent in your country, if higher). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Cookies and similar technologies

We use cookies and local storage for essential functions (keeping you signed in, security, and remembering your cookie preference). Non-essential analytics (Vercel Analytics and Google Analytics) runs only if you accept via the cookie banner on the homepage or the controls on our Cookie Policy page. Until you accept, analytics does not load on any part of woolkoo.com, including after you sign in.

Essential cookies are required for authentication and core functionality. We do not use non-essential cookies for advertising.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may also be notified by email or in-app notice where appropriate. Continued use after changes take effect constitutes acceptance of the updated policy, except where law requires otherwise.

14. Contact

Privacy: privacy@woolkoo.com
General support and sales: sales@woolkoo.com

Related: Terms of Service