Privacy Policy

Last updated: 18 July 2026

Data controller

Biomag, S.L.U., with registered office at Calle Barrachi 39, Pabellón 3, 01013 Vitoria-Gasteiz, Álava, España (Tax ID [to be completed]), is the controller of the personal data collected through the AIM DECK service.

For any privacy question or to exercise your rights, you can contact us at attcliente@biomag.es.

What data we process

Account data: your email address, a hashed version of your password —we never store your password in clear text—, your chosen language and your plan.

Content you create: the text and titles you enter to generate your presentations, their revisions, any logo you upload and the images generated or uploaded.

Data you collect from third parties: if you enable lead capture, comments or collaboration on a public presentation, we process on your behalf the names, emails and messages those people send you. In that case, you are the controller of that data.

Technical usage data: product metrics linked to your account (for example, registering, creating or exporting a presentation) and AI usage metrics (consumption and cost). Views of a public presentation are counted WITHOUT storing the IP address or identifying the viewer: only the date is kept.

Purpose and legal basis

To provide the service and manage your account (performance of the contract).

To generate your presentations by sending the text you enter to our AI providers (performance of the contract).

To keep the service secure, prevent abuse and improve the product with aggregated metrics (legitimate interest).

Providers and international transfers

To operate, AIM DECK relies on processors: artificial-intelligence providers that generate content from the text you enter (text and image generation) and a hosting provider in the European Union.

Some AI providers may process data outside the European Economic Area. In those cases, transfers are covered by the safeguards provided under the GDPR (such as the European Commission's Standard Contractual Clauses).

These are the current processors, so you can verify it: Railway (hosting and database, European Union — Amsterdam), OpenRouter (text generation) and Atlas Cloud (image generation). None of them uses your content to train models.

We do not sell your data or share it with third parties for advertising purposes.

Retention

We keep your account data and content while your account is active. If you delete your account, you and your presentations are permanently removed. We may keep minimal records where a legal obligation requires it.

Security

We apply reasonable technical and organizational measures. Passwords are stored hashed and access to your data is restricted.

Your rights

You can access and download a copy of your data, and delete your account and all your content, directly from the settings section of the application.

You may also exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to attcliente@biomag.es. If you believe your request has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Minors

The service is not directed to minors and we do not knowingly collect their data.

Changes

We may update this policy. We will post the current version here with its last-updated date.