Privacy Settings
Control PII redaction and data anonymization for your organization
Privacy Settings
Deck's privacy settings give organization admins control over how personally identifiable information (PII) is handled across your workspace.
Navigate to Settings → Privacy to manage these options.
PII Redaction
When PII redaction is enabled, Deck automatically masks customer contact details, such as names, email addresses, and phone numbers, for all members, admins included. It applies in the Deck web app and to AI assistants connected through MCP; How It Works lists what each one covers.
| Data type | Redacted example |
|---|---|
j***@example.com | |
| Name | J*** D*** |
| Phone | ***-***-4567 |
Enabling PII Redaction
- Go to Settings → Privacy
- Toggle Enable PII redaction on
- The change takes effect immediately for all members
Only organization admins can enable or disable PII redaction.
How It Works
PII redaction masks data when Deck shows or sends it, not when it is stored:
- Deck web app — customer names and email addresses are masked wherever Deck shows customer contact details, such as support tickets and survey responses.
- Connected AI assistants (MCP) — before Deck sends data to Claude, ChatGPT, Cursor, or any other MCP client, it masks respondent names and emails, plus email addresses and phone numbers inside quotes, transcripts, NPS responses, and AI-generated summaries. This includes the Deck view in ChatGPT, where pain-point answers follow the same masking: their quotes are masked, and customer counts show numbers only. If Deck cannot check the setting, it masks the data to be safe.
Because masking happens when data is read, historical insights are covered without re-processing, and turning the setting off shows the original data again. Connected AI assistants usually pick up a change on their next request, and always within 15 minutes.
What Is Not Masked
- Speaker labels in transcripts and interview clips are shown as recorded.
- Video and audio in interview clips play unchanged; only the text around them is masked.
- Names inside free text (for example, "Jane said…") are not detected. Inside text, Deck finds email addresses and phone numbers; phone detection is tuned for US-style numbers.
- Stored data is not changed: insights, quotes, and summaries are kept as they were captured, and Deck's AI does not remove PII when it creates them.
- Deck Intelligence (the in-app chat) and the Deck public API do not mask data yet.
When to Use PII Redaction
PII redaction is useful when:
- Sharing Deck with team members who should not see customer contact details
- Operating in privacy-sensitive industries (healthcare, finance, etc.)
- Complying with internal data minimization policies
- Letting external contractors or agencies review feedback without exposing customer identities