Is data sent through Gamma API secure?
Hey Srivalli! To give you the most helpful answer, what specific security concerns do you have in mind? What we know for sure: All API traffic uses HTTPS with TLS encryption (data encrypted in transit)
Authentication via X-API-KEY header controls access
API keys are workspace-specific and tied to Pro/Ultra plans
But "security" could mean different things:
Data privacy: How is customer data handled? Is it used for AI training?
Data retention: How long is content stored? Can it be deleted?
Compliance: SOC 2, GDPR, HIPAA certifications?
Encryption at rest: Is stored data encrypted on Gamma's servers?
Access controls: Who can see API-generated content?
Audit logs: Can you track who accessed what?
What's driving the question? Is this for a security review, compliance requirement, or a specific customer concern? That'll help me get you the right answer.
Data privacy: How is customer data handled? Is it used for AI training?
Data retention: How long is content stored? Can it be deleted?
Encryption at rest: Is stored data encrypted on Gamma's servers?
Access controls: Who can see API-generated content?
Audit logs: Can you track who accessed what?
Thanks for getting back! Looking for this information, it was requested by our management. FYI, we are using gamma pro
Srivalli Thanks for your patience. Here's what I can share about security for your Gamma Pro workspace: Data Privacy & AI Training Your content is NOT used for AI training. This is explicit in Section 4.5 of our Terms of Service. Pro workspaces are automatically opted out of AI training. Data Retention & Deletion
Content is stored while your account is active; you can delete it anytime
If you delete your account, user data is removed within 14 days
Encryption at Rest Yes, data stored on our servers is encrypted using AES-256 encryption. Access Controls API-generated content follows the same workspace permissions as content created in the web app. You control who can access your content through:
Workspace permissions (who in your workspace can see it)
Sharing settings (external access)
Email invitations (specific individuals)
Audit Logs On your Pro plan, you can track API key usage (lastUsedTime) in your workspace settings. For more comprehensive audit logging, that's available on our Business plan. Additional Resources
Terms of Service: https://gamma.app/terms
Privacy Policy: https://gamma.app/privacy
Data Processing Addendum: https://gamma.app/dpa
