Privacy Policy

Last updated2026-07-25

This Policy explains how Pigletgo collects, uses, stores and shares your personal information when you use Pigletgo PPT at https://ppt.pigletgo.com, and what rights you have. Please read it before using the Service.

1. Data controller

The controller for this Service is Pigletgo, a company incorporated under the laws of the People's Republic of China (registered address available on request via our support email). Privacy contact: danghuong2092c@gmail.com. We are a small operation and have not appointed a separate Data Protection Officer; that inbox is the single point of contact for privacy matters and is monitored by the operator.

Scope: this Policy covers the product site at https://ppt.pigletgo.com. Account registration, sign-in and email verification happen on our main site at https://www.pigletgo.com, also operated by Pigletgo; this Policy applies to that account data too.

2. Information we collect

What you give us directly:

  • Account information: email address, password (stored only as a hash — we cannot recover your plaintext password), language and theme preferences.
  • Payment information: order ID, amount, currency, payment status, billing email. Card numbers and payment credentials are handled by the payment providers and are never stored on our servers.
  • Your content: the topics and edit instructions you type, material you upload (PDF / Word / Markdown / PPTX / images), the decks and version history generated, image prompts and generated images.
  • Correspondence: emails, feedback and reports you send to our support address.

What we collect automatically:

  • Device and network: IP address, browser and operating system type, time zone.
  • Usage data: page views and feature events, generation duration and token usage, credit deduction records.
  • Logs: request timestamps, error logs, performance metrics.
  • Moderation records: requests blocked by the content-safety check are logged with the category triggered and the time, for enforcement and appeal review.

⚠️ We do not collect precise location, do not read contacts, and do not perform facial or biometric recognition.

3. How we use it, and on what legal basis

PurposeLegal basis
Delivering and maintaining the Service (generate, edit, export)Contract performance
Billing, payments and crediting your balanceContract performance
Customer support and refundsContract / legitimate interests
Service notices (payment, security, policy changes)Legitimate interests
Content safety moderation and abuse preventionLegitimate interests / legal obligation
Product analytics and quality improvement (aggregated, anonymised)Legitimate interests
Meeting legal obligations (tax, retention rules)Legal obligation

We may aggregate or anonymise data for statistics; such data can no longer be linked to an individual. We do not sell your personal information, including as "sale" is defined under laws such as the CCPA.

4. Cookies and local storage

TypePurposeCan you disable it?
Strictly necessaryLogin session (pg_session_id), core functionalityNo
FunctionalLanguage preference (pigletgo-lang), interface themeYes, via browser settings
AnalyticsAnonymous usage statistics via Microsoft ClarityYes, via browser settings or a blocker

We do not run ads and do not use advertising trackers.

5. Sharing and disclosure

We do not sell your personal information. To deliver the Service, some of your data is processed by the sub-processors below. Note in particular: the material you upload and the requirements you type are sent to AI model providers for inference — that is how the Service works.

Sub-processorRoleData it can access
火山引擎 / Volcengine(火山方舟 Ark)AI model inferenceYour prompts and requirements, text extracted from uploaded materials, rendered slide screenshots (for visual review), image prompts
Vercel Inc.Application hosting and Blob object storageAccess logs, uploaded source files, generated images, intermediate PPTX export artifacts
Turso(libSQL)Application databaseAccount identifiers, deck content and version history, credit and order records, moderation logs
TavilyWeb search (only invoked when your request needs current information)Search queries derived from your request
Waffo PancakeMerchant of Record for international payments; handles acquiring and taxBilling email, payment amount and status, billing address (we never touch card numbers or payment credentials)
支付宝(蚂蚁集团)/ AlipayPayment channel for mainland ChinaOrder number, amount and payment status (payment credentials handled by Alipay)
Microsoft ClarityAnonymous product analyticsPage views and interaction events, device and browser type (never deck content)

Beyond the table above, we disclose information only:

  • Where the law requires it: under law, a court order, or a lawful regulatory request.
  • On a business change: in a merger or acquisition, with advance notice and a requirement that protections continue.
  • With your consent: for any other purpose, with your explicit prior consent.

6. Security

  • Encryption in transit: HTTPS / TLS everywhere, with HSTS enabled.
  • Storage: passwords are hashed; credentials and API keys live only in hosting-platform environment variables, never in the repository or the database.
  • Access control: least privilege — only the operator can access production data.
  • Hardened response headers: X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy are set site-wide.

We do not hold ISO 27001, SOC 2 or similar third-party certifications — stated plainly here rather than implied. If a security incident affects your rights, we will notify you and the relevant authorities within 72 hours of discovery, to the extent the law requires. Keep your credentials safe and email danghuong2092c@gmail.com if you notice anything unusual.

7. Retention

Data typeRetentionOn expiry
Account informationWhile the account is active; 30 days after closureDeleted or anonymised
Decks and version historyWhile the account is active; 30 days after closureDeleted
Uploaded source files and generated imagesWhile the account is active; 30 days after closureDeleted
Transaction and credit ledger5 years from the transaction (tax and audit)Deleted
Moderation records12 months from the recordDeleted
Access and error logs90 daysDeleted
Support correspondence2 yearsDeleted

8. Your rights

You can exercise the rights below at any time by emailing danghuong2092c@gmail.com. We respond within 30 days. To prevent impersonation we may ask you to send the request from your registered email address.

RightWhat it means
To be informedKnow what we collect and how we use it
AccessGet a copy of your personal information
RectificationCorrect inaccurate or incomplete information
ErasureAsk us to delete it, subject to conditions (closing your account starts deletion)
RestrictionPause processing in certain circumstances
PortabilityExport your data in a machine-readable format
ObjectObject to processing based on legitimate interests
Withdraw consentWithdraw consent where consent is the basis

You can also complain to the data protection authority where you live.

9. Marketing and opt-out

We do not currently send marketing email. If we start, we will ask for your consent first and every message will carry a one-click unsubscribe. Opting out will not affect essential service notices such as payment, security and policy changes.

10. International transfers

Hosting and some sub-processors are outside mainland China (Vercel and Turso operate nodes in the United States and other regions), while AI inference runs on Volcengine inside China. Your data may therefore be transferred across borders. We safeguard those transfers with data processing agreements incorporating the EU Standard Contractual Clauses, and only work with providers offering an equivalent level of protection.

11. Children's privacy

The Service is for users aged 18 and over, and we do not knowingly collect information from minors. If you believe a minor has given us personal information, email danghuong2092c@gmail.com and we will delete it promptly.

12. Third-party links and services

The Service may link to third-party sites, such as a payment provider's checkout. This Policy covers only data we collect directly; third parties' practices are governed by their own policies, which we encourage you to read.

13. Changes to this Policy

For material changes we will give at least 15 days' notice by in-product notice or to your registered email, and update the last-updated date at the top of this page. Continuing to use the Service after that means you accept the change.

14. Contact

Privacy and data-rights requests: danghuong2092c@gmail.com

Entity: Pigletgo (registered address available on request via our support email) · Website: https://ppt.pigletgo.com

Questions about this policy? Contact danghuong2092c@gmail.com · This document forms a binding agreement between you and us. Where the English and Chinese versions differ in meaning, the Chinese version prevails.