Privacy Policy
Last updated:2026-07-25
This Policy explains how Pigletgo collects, uses, stores and shares your personal information when you use Pigletgo PPT at https://ppt.pigletgo.com, and what rights you have. Please read it before using the Service.
1. Data controller
The controller for this Service is Pigletgo, a company incorporated under the laws of the People's Republic of China (registered address available on request via our support email). Privacy contact: danghuong2092c@gmail.com. We are a small operation and have not appointed a separate Data Protection Officer; that inbox is the single point of contact for privacy matters and is monitored by the operator.
Scope: this Policy covers the product site at https://ppt.pigletgo.com. Account registration, sign-in and email verification happen on our main site at https://www.pigletgo.com, also operated by Pigletgo; this Policy applies to that account data too.
2. Information we collect
What you give us directly:
- Account information: email address, password (stored only as a hash — we cannot recover your plaintext password), language and theme preferences.
- Payment information: order ID, amount, currency, payment status, billing email. Card numbers and payment credentials are handled by the payment providers and are never stored on our servers.
- Your content: the topics and edit instructions you type, material you upload (PDF / Word / Markdown / PPTX / images), the decks and version history generated, image prompts and generated images.
- Correspondence: emails, feedback and reports you send to our support address.
What we collect automatically:
- Device and network: IP address, browser and operating system type, time zone.
- Usage data: page views and feature events, generation duration and token usage, credit deduction records.
- Logs: request timestamps, error logs, performance metrics.
- Moderation records: requests blocked by the content-safety check are logged with the category triggered and the time, for enforcement and appeal review.
⚠️ We do not collect precise location, do not read contacts, and do not perform facial or biometric recognition.
3. How we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Delivering and maintaining the Service (generate, edit, export) | Contract performance |
| Billing, payments and crediting your balance | Contract performance |
| Customer support and refunds | Contract / legitimate interests |
| Service notices (payment, security, policy changes) | Legitimate interests |
| Content safety moderation and abuse prevention | Legitimate interests / legal obligation |
| Product analytics and quality improvement (aggregated, anonymised) | Legitimate interests |
| Meeting legal obligations (tax, retention rules) | Legal obligation |
We may aggregate or anonymise data for statistics; such data can no longer be linked to an individual. We do not sell your personal information, including as "sale" is defined under laws such as the CCPA.
6. Security
- Encryption in transit: HTTPS / TLS everywhere, with HSTS enabled.
- Storage: passwords are hashed; credentials and API keys live only in hosting-platform environment variables, never in the repository or the database.
- Access control: least privilege — only the operator can access production data.
- Hardened response headers: X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy are set site-wide.
We do not hold ISO 27001, SOC 2 or similar third-party certifications — stated plainly here rather than implied. If a security incident affects your rights, we will notify you and the relevant authorities within 72 hours of discovery, to the extent the law requires. Keep your credentials safe and email danghuong2092c@gmail.com if you notice anything unusual.
7. Retention
| Data type | Retention | On expiry |
|---|---|---|
| Account information | While the account is active; 30 days after closure | Deleted or anonymised |
| Decks and version history | While the account is active; 30 days after closure | Deleted |
| Uploaded source files and generated images | While the account is active; 30 days after closure | Deleted |
| Transaction and credit ledger | 5 years from the transaction (tax and audit) | Deleted |
| Moderation records | 12 months from the record | Deleted |
| Access and error logs | 90 days | Deleted |
| Support correspondence | 2 years | Deleted |
8. Your rights
You can exercise the rights below at any time by emailing danghuong2092c@gmail.com. We respond within 30 days. To prevent impersonation we may ask you to send the request from your registered email address.
| Right | What it means |
|---|---|
| To be informed | Know what we collect and how we use it |
| Access | Get a copy of your personal information |
| Rectification | Correct inaccurate or incomplete information |
| Erasure | Ask us to delete it, subject to conditions (closing your account starts deletion) |
| Restriction | Pause processing in certain circumstances |
| Portability | Export your data in a machine-readable format |
| Object | Object to processing based on legitimate interests |
| Withdraw consent | Withdraw consent where consent is the basis |
You can also complain to the data protection authority where you live.
9. Marketing and opt-out
We do not currently send marketing email. If we start, we will ask for your consent first and every message will carry a one-click unsubscribe. Opting out will not affect essential service notices such as payment, security and policy changes.
10. International transfers
Hosting and some sub-processors are outside mainland China (Vercel and Turso operate nodes in the United States and other regions), while AI inference runs on Volcengine inside China. Your data may therefore be transferred across borders. We safeguard those transfers with data processing agreements incorporating the EU Standard Contractual Clauses, and only work with providers offering an equivalent level of protection.
11. Children's privacy
The Service is for users aged 18 and over, and we do not knowingly collect information from minors. If you believe a minor has given us personal information, email danghuong2092c@gmail.com and we will delete it promptly.
12. Third-party links and services
The Service may link to third-party sites, such as a payment provider's checkout. This Policy covers only data we collect directly; third parties' practices are governed by their own policies, which we encourage you to read.
13. Changes to this Policy
For material changes we will give at least 15 days' notice by in-product notice or to your registered email, and update the last-updated date at the top of this page. Continuing to use the Service after that means you accept the change.
14. Contact
Privacy and data-rights requests: danghuong2092c@gmail.com
Entity: Pigletgo (registered address available on request via our support email) · Website: https://ppt.pigletgo.com
Questions about this policy? Contact danghuong2092c@gmail.com · This document forms a binding agreement between you and us. Where the English and Chinese versions differ in meaning, the Chinese version prevails.