Help

1. Enter your email, use the access code we send, choose your password, and continue into your workspace.
2. Upload a document from the Documents page.
3. Create a share link and choose its password, expiration, email, and download settings.
4. Send the link, then review opens and page engagement from Analytics or the document detail page.

DeckPeek accepts PDF, DOCX, PPTX, XLSX, JPEG, PNG, WebP, MP4, MOV, and M4V on all plans. Plans differ by capacity and premium controls, not by supported file format.

DOCX, PPTX, and XLSX files stay private while an isolated converter creates a PDF viewer copy. MOV and M4V files are normalized to a browser-ready MP4 viewer copy. Viewers see a preparing state until conversion and the format-specific checks pass. DeckPeek does not run a general-purpose malware scan on these uploads.

Free

• 50 active documents
• 2 GiB total workspace storage
• 100 pages per PDF and up to 2 workspace members
• Up to 50 total share links created
• PDF, DOCX, PPTX, and XLSX files up to 100 MB; standalone images up to 30 MB; and video up to 100 MB
• Up to 50 new DOCX, PPTX, or XLSX conversion initiations per workspace in each UTC calendar month

Pro

• 250 active documents
• 50 GiB total workspace storage
• Unlimited share links
• MCP access for your AI assistant
• 500 pages per PDF and up to 5 workspace members
• PDF, DOCX, PPTX, and XLSX files up to 350 MB; standalone images up to 100 MB; and video up to 500 MB
• MP4, MOV, and M4V video; no usage-based overage charge; fair-use and provider-safety limits apply
• Up to 100 new DOCX, PPTX, or XLSX conversion initiations per workspace in each UTC calendar month

Business

• 1000 active documents
• 100 GiB total workspace storage
• Unlimited data rooms and share links
• MCP access for your AI assistant
• Up to 5 workspace members
• All Pro security controls, upload sizes, page limits, and conversion allowances

Workspace storage includes every original document version, any generated viewer copy, and capacity reserved while that copy is being produced. Current, earlier, and failed versions and all versions of documents in Trash count. Moving a document to Trash does not release storage; permanently deleting it removes the originals and viewer copies and frees that capacity. Storage limits use binary units: 1 GiB is 1,073,741,824 bytes.

Incomplete multipart upload sessions expire after seven days. Abandoned temporary upload storage enters the durable cleanup path after eight days, with retries if storage cleanup is temporarily unavailable. Failed or expired version records remain in version history and count at their recorded size toward workspace storage until their document is permanently deleted.

DeckPeek does not charge usage-based overages. View traffic, analytics events, and notification emails are not sold as metered allowances at launch. Fair-use, abuse-prevention, security, and provider-safety controls apply. Reaching a stated plan limit blocks the next affected action; it does not add an overage charge or delete existing content.

A file can be rejected when its type or contents do not match, it is empty, its structure cannot be read, an Office package contains unsupported active or external content, an image exceeds dimension or pixel bounds, or the workspace has reached a file, page, document, or storage limit. Keep the exact error and file type when contacting support; do not attach confidential material unless support asks for it through an approved channel.

Folders organize documents without changing existing share URLs. A new version keeps the document record together while updating the content associated with its links. Review link behavior before replacing material that has already been shared.

Moving a document to Trash removes it from the active library and disables its links. You have 30 days to restore it before the document, versions, links, and analytics are permanently deleted. The Trash page shows the scheduled deletion date. You can also delete it permanently sooner.

Viewers normally do not need an account. Each link has independent access settings, so use a separate link for each recipient or audience. You can revoke a link, set an expiration, require a password, collect a viewer email, and show or hide the one-click download action.

Free workspaces can create up to 50 share links in total. Revoking, expiring, or deleting a link does not restore that allowance. Editing an existing link or replacing its document does not create another link. Pro and Business include unlimited share-link creation.

You can show or download a QR code for any active share link. It opens the same URL as Copy link and follows the same access rules. Making a QR code does not create another link or use your Free link allowance. A QR code stops opening the document when its link expires or is revoked.

Pro and Business add email verification, allow/block lists, watermarking, screenshot deterrence, and agreement gates. If a viewer cannot open a link, check that it has not expired or been revoked, confirm the exact password and email, and make sure any access-list rule matches the viewer’s address or domain.

Hiding the download action and adding viewer deterrents do not provide DRM. A browser preview receives file data, so an authorized recipient may still retain or capture what they can view.

Recipients can use Request access on supported restricted or expired links, on every plan. They enter an email and optional message; submitting a request does not open the document or verify their identity. Workspace owners and admins review pending requests in Notifications → Requests. Reviewed requests move to Completed.

Approving sends a new personal link that requires verification of the requested email and lasts up to seven days, or until the original link's earlier future expiration. The original link stays unchanged. Its password and other copied document controls still apply. Each approved request creates a share link and counts toward Free's total allowance. If email delivery fails, review the delivery status in Completed to retry or copy the approved link.

Verification codes are short-lived and have attempt limits. Request a new code if one expires, and check spam or quarantine folders before retrying repeatedly.

Analytics can show opens, return visits, total and average viewing time, page-level attention, approximate country, browser or device indicators, referrer, and viewer email when collection is enabled.

Treat these measurements as useful signals, not proof that a specific person read, understood, or agreed with a document. Browser behavior, network conditions, blocked scripts, and repeated sessions can affect the results.

Read the pitch deck analytics guide for metric definitions, identity limits, and practical ways to use viewer activity for follow-up.

Free workspaces allow the owner and one regular member, for 2 people total. Administrator roles are not available on Free. Pro and Business workspaces allow up to 5 total people, including the owner, and support administrator roles. Workspace owners manage administrator roles; owners and authorized administrators can manage regular members and invitations.

Pro and Business include one custom sharing domain. Add the requested DNS records exactly as shown and wait for both hostname and certificate status to become active. Do not remove the verification or CNAME records while the domain is connected. To prevent automated provider abuse, each paid plan allows up to 5 new provider hostname creations per workspace in each UTC calendar month. Status checks do not consume that allowance. A downgrade removes access to custom-domain routing.

Pro and Business include up to 10 webhook endpoints per workspace. Owners and admins can add an endpoint in Webhooks, select events, and save the generated signing secret. Disabled endpoints still count toward the limit. The endpoint must be a public HTTPS URL accepting JSON POST requests; redirects are not followed.

Events

Every JSON payload contains id, type, apiVersion, createdAt (Unix milliseconds), and data. Event data includes relevant workspace, document, link, and visit IDs, document titles, and captured viewer emails with a verification flag. Emails may be absent or unverified. Document content, comment text, passwords, and access tokens are excluded. Only connect destinations authorized to receive this data.

• link.viewed — A new viewing session starts on a shared link.
• viewer.comment.created — A viewer leaves a comment on a document.
• link.download_started — A recipient starts an authorized download. This does not confirm the file was saved.
• link.created — A new sharing link is created.
• document.ready — A new document version finishes processing and becomes available to share.

Send test queues a sample webhook.test event. It normally arrives within a minute. Use View deliveries and Refresh deliveries to inspect the result, response status, and individual attempts. History is available for seven days. Each workspace can send one new test every 30 seconds.

Verify every request

The X-DeckPeek-Signature header has the form t=TIMESTAMP,v1=SIGNATURE. The timestamp is Unix seconds; the signature is a lowercase hexadecimal HMAC-SHA256 of TIMESTAMP.RAW_REQUEST_BODY, using the complete signing secret as the key. Verify the original bytes before parsing JSON; reserializing the body changes the signature. Compare signatures in constant time and reject timestamps more than five minutes from your server’s clock.

The X-DeckPeek-Event-Id header identifies the event, and X-DeckPeek-Event identifies its type. Deduplicate by event ID after successful signature verification. Deliveries can repeat or arrive out of order. Keep the signing secret on your server; rotate it in Webhooks if it is lost or exposed.

Responses and retries

Return a 2xx status within eight seconds and process slower work in your own queue. Timeouts, network failures, HTTP 408, 425, 429, and 5xx responses retry automatically, up to ten attempts within 24 hours. Other non-2xx responses fail without retrying. A test is queued, rather than proof of successful delivery; check its final status.

Editing, disabling, rotating the secret, or deleting an endpoint cancels its pending deliveries. A downgrade preserves configuration and pauses sending; events that occur on Free are not replayed after upgrading. Deleting an endpoint also removes its delivery history. A request already in flight may still reach the receiver.

A room brings documents together with folders and separate share links for each audience. Free lets you prepare and privately preview one draft. Pro includes one active shared room. Business includes unlimited rooms within its workspace document and storage allowances.

A room counts as active while it has an unexpired, enabled share link. Multiple links to the same room count as one room. Adding an existing library document to another room does not duplicate the file or count it again toward your document and storage allowances.

Archive a room to disable its links and retain its documents and activity. Restoring the room keeps its old links disabled; create or enable a link when you are ready to share again. Pro and Business include passwords, email verification, viewer restrictions, NDAs, watermarks, and file and folder permissions.

If your plan no longer supports sharing, public room access stops. After a Business downgrade to Pro, the oldest active shared room stays available and additional rooms are suspended. Your documents, settings, and activity are retained.

Pro costs $15 when billed monthly or $144 when billed annually, equivalent to $12 per month. The workspace owner can choose either billing cadence in Stripe checkout or open the billing portal from the Plan page to manage payment methods, invoices, and cancellation. Active subscriptions cannot switch cadence at launch. To choose another cadence, cancel at period end and start a new checkout after the old subscription ends. Subscription changes can take a short time to appear while Stripe confirms them. For annual billing, DeckPeek makes one best-effort reminder delivery about 30 days before renewal, but email delivery is not guaranteed; review the Plan page and cancel before renewal when needed.

Business costs $39 per workspace each month, or $374.40 billed annually, equivalent to $31.20 per month. Owners can choose their billing interval on the Plan page. Pro upgrades show the unused-time credit and amount due before confirmation. Business monthly subscribers can also review a switch to annual billing. If the current period was funded by a Pro upgrade credit, switching becomes available after a regular, fully paid Business monthly renewal. Business access starts after Stripe confirms payment; pending payment leaves existing paid access in place.

Never send full card numbers, passwords, Stripe secrets, or webhook secrets to support. For billing help, provide the account email, workspace name, approximate charge date, and invoice or subscription reference if available.

MCP connects an AI assistant to your DeckPeek workspace. Pro and Business include access; Free does not include MCP workspace tools. Your assistant may have its own account, plan, or organization requirements for custom connections.

Connect your assistant

1. Sign in to DeckPeek and open MCP in the sidebar. Copy the Server URL: https://deckpeek.com/mcp.
2. Add a custom remote MCP connection in your assistant and paste that URL. Use OAuth with dynamic client registration; do not choose unauthenticated access or paste your DeckPeek password into chat.
3. Complete sign-in on DeckPeek, review the client name and requested permissions, and select Connect only if you trust the client and approve that access.
4. Enable or select the connection in a conversation, then ask it to list your documents. With one eligible workspace, DeckPeek selects it automatically. With several, specify the workspace name or ask the assistant to list the available workspaces first.

ChatGPT, Claude, and Grok

In ChatGPT on the web, open Plugins, select the plus button, and choose the option to add a custom MCP server. Enter the URL, use OAuth, review the warning, and create the plugin. Install it, then select it with @ in a conversation. Workspace policies may control whether custom connections are available. See the ChatGPT connection instructions.

In Claude, open Customize, then Connectors, and add a custom connector. Choose OAuth client Register automatically; DeckPeek supports this registration flow, not Claude's published-identity option. In Grok, open Connectors, choose New Connector, then Custom, and enter the URL. Follow the Claude or Grok instructions for your account. Both document custom remote MCP connections; live account verification for Claude and Grok is still pending.

Permissions and changes

Read access lets the assistant find documents, read available content, and review activity. Write access is also needed to upload or change documents, manage links and rooms, or save follow-ups. Sensitive configuration tools additionally require admin access. Every operation still checks your current workspace membership, role, and plan; a connection does not give your account access to another workspace.

Review the exact document, link, room, or workspace before approving a change. Ask the assistant to confirm before deleting content, changing access, or changing administrative settings. Saving or assigning a follow-up records work for your team; it does not automatically send an investor an email.

Useful requests

• Use DeckPeek to find my pitch deck and summarize its content.
• Which viewers returned to my pitch deck this week?
• Turn off downloads on my investor link after confirming the link.
• Save a follow-up for Morgan and assign it to me.

Ready PDFs and Office viewer copies can return embedded text and available page images. Images can be returned for visual reading, and videos can return an existing caption transcript. MCP does not generate OCR or a new transcription. Responses are bounded and may contain only part of a document; ask the assistant to continue when more pages or text are available. Uploads and changes remain subject to plan limits, processing readiness, and safety controls.

Disconnect or change permissions

Open MCP in DeckPeek, find the client in Connections, and use its Revoke control. This blocks future calls and token renewal for that connection. To change its permissions, revoke it and reconnect with the permissions your client requests. Revocation does not undo completed actions or erase content already received by the assistant; manage that content with its provider. Read our privacy information before connecting confidential material.

For the full walkthrough, read Connect DeckPeek to your AI assistant.

Account settings let you change your password, review active sessions, sign out other sessions, export account data, manage notifications, and request account deletion. Password resets sign out existing sessions.

Account deletion is permanent and includes owned workspaces and stored files. Review the deletion summary carefully and export anything you need first. An active legal or safety preservation obligation can temporarily prevent deletion.

Read the Privacy Policy and Security page for more detail.

Send the account email, workspace name, page or feature, approximate time, and exact error text. Never send a password, verification code, API secret, full payment-card number, or an unnecessary copy of a private document.

Harmful or illegal hosted material should be reported through the dedicated abuse form so it reaches the correct review path.

Email support@deckpeek.com · Contact form · Report abuse