1. Who we are
Fourteen Slides, the trading name of Simon Shorsher, a sole proprietor registered in Israel, operating fourteenslides.com. We are the data controller for the information described here.
Fourteen Slides
Haandarta 1
Beer Sheva, Israel
privacy@fourteenslides.com
2. The short version
We collect your email address and the deck you upload when you request a free scorecard, and the same again when you buy a redesign. We use an external AI provider to produce both. We do not sell your data, and we do not share your deck with anyone other than the processors listed below.
3. What we collect, and why
| Data | When | Why | Legal basis |
|---|---|---|---|
| Email address | Free scorecard request | To send the scorecard and a short follow-up sequence | Consent |
| Your deck file, funding stage, target raise | Free scorecard request | To read and score the deck, and to judge whether the enquiry is one we can serve | Consent |
| Deck content, company name, funding stage, target raise | Paid order | To produce the deliverable you bought | Contract |
| Name, billing address, country | Checkout | Payment and tax compliance | Contract / legal obligation |
| Acceptance timestamp, IP address, terms version | Checkout | Proof of what you agreed to and when | Legitimate interest — dispute defence |
| Delivery logs, revision requests, support messages | During the engagement | Delivering the service and resolving disputes | Contract |
| Ad click and conversion data | Arriving from a Google ad | Measuring which ads produce customers | Consent |
We never see your card details. Checkout is handled entirely by Paddle, who act as our merchant of record — Paddle is the legal seller of the order, takes the payment, issues the invoice and remits any VAT or sales tax. Card numbers never reach our systems, and the billing address and tax details you give at checkout are collected and held by Paddle. What reaches us is the email address on the order.
4. Your deck is processed by an AI provider
Scorecards and redesigned decks are produced by an automated AI system. We do not run our own models: generating your deliverable requires sending your content to one or more third-party AI providers. That includes your pitch deck and everything inside it — financials, traction figures, customer names, and any other confidential material.
We use commercial API tiers whose terms state that submitted content is not used to train the provider's models, and we contract with each provider as a data processor. We cannot offer you a stronger guarantee than the one our providers give us.
We may change providers as the technology changes. Any provider we use will be bound by equivalent terms, and the current list is available on request from privacy@fourteenslides.com.
If your deck contains information you cannot share with a third-party processor, remove it before sending, or do not use this service. We would rather lose the sale than have you discover this afterwards.
5. Processors we use
| Processor | Purpose | Location |
|---|---|---|
| Paddle | Merchant of record — checkout, payment, subscription billing, invoicing, sales tax | UK / US / EU |
| Third-party AI model providers | Generating scorecards and decks | US / EU |
| Google (Ads, Workspace) | Advertising measurement, email delivery | US / EU |
| Cloudflare | Hosting and DNS | Global |
Each is bound by its own data processing terms. Paddle is the exception to the word “processor”: as merchant of record they are the seller of your order and an independent controller of the payment data they collect, governed by Paddle’s own privacy notice. We do not sell personal data, and we do not share it with anyone outside these categories except where legally required.
We name categories rather than individual vendors because the AI providers we use may change. You are entitled to know exactly who processes your data at any given moment — ask at privacy@fourteenslides.com and we will tell you.
6. International transfers
We operate from Israel, which the European Commission recognises as providing an adequate level of data protection. Transfers to US-based processors rely on Standard Contractual Clauses or an equivalent mechanism in each processor's terms.
7. How long we keep things
- Scorecard emails — until you unsubscribe, then a suppression record only, kept indefinitely so we never contact you again
- A deck sent for a free scorecard — 90 days from upload, then deleted, whether or not you buy. It is kept that long only because a scorecard is often read weeks after it is sent and people come back to ask about it. Ask sooner and we delete sooner, and you do not have to give a reason
- Deck content and deliverables on a paid order — 12 months after delivery, then deleted. Ask sooner and we will delete sooner, subject to the point below
- Order records, acceptance logs, invoices — 7 years, as Israeli tax law requires
- Support correspondence — 24 months
Where a deletion request conflicts with a legal retention obligation, we delete what we can and retain only the minimum the law requires — typically the invoice, not the deck.
8. Email
Requesting a scorecard subscribes you to a short sequence about the paid redesign. Every message carries a one-click unsubscribe, honoured immediately. Transactional email about an order you placed is not marketing and continues regardless.
9. Cookies and tracking
When you arrive from a Google ad, the link carries a click identifier. We store that identifier in a first-party cookie on your device for up to 90 days and record it against your scorecard request, so we can tell which ads produce customers. It contains no name, no email address and no browsing history; it is readable only by our server, never by scripts on the page; and the only party it is ever shared with is Google Ads, for that measurement.
We also load the Google Ads tag, which sets its own cookie for the same purpose. We run no other third-party analytics, and we do not use advertising cookies for profiling.
You can clear or block either of these in your browser without affecting the service. The scorecard and any order you place work exactly the same.
10. Your rights
Under the Israeli Privacy Protection Law and, where applicable, the GDPR and UK GDPR, you may:
- request a copy of the data we hold about you
- have inaccurate data corrected
- have your data deleted, subject to §7
- object to processing based on legitimate interest
- withdraw consent at any time, without affecting processing already carried out
- receive your data in a portable format
- complain to a supervisory authority — the Israeli Privacy Protection Authority, or your local authority in the EU/UK
Write to privacy@fourteenslides.com. We respond within 30 days.
11. Security
Data is transmitted over TLS and held in access-controlled systems. Payment credentials never touch our infrastructure. We will notify affected customers and the relevant authority of any breach that presents a risk to them, without undue delay.
We are a small operation, not a bank. We tell you what we actually do rather than claiming certifications we do not hold.
12. Children
This service is sold to businesses and is not directed at anyone under 18. We do not knowingly collect data from minors.
13. Changes
Material changes will be posted here with a new version number and effective date. The version in force when you purchased is the one that governs your order.
14. Contact
privacy@fourteenslides.com for anything on this page.