Help

1. Enter your email, use the access code we send, choose your password, and continue into your workspace.
2. Upload a document from the Documents page.
3. Create a share link and choose its password, expiration, email, and download settings.
4. Send the link, then review opens and page engagement from Analytics or the document detail page.

DeckPeek accepts PDF, DOCX, PPTX, XLSX, JPEG, PNG, WebP, MP4, MOV, and M4V on both plans. Plans differ by capacity and premium controls, not by supported file format.

DOCX, PPTX, and XLSX files stay private while an isolated converter creates a PDF viewer copy. MOV and M4V files are normalized to a browser-ready MP4 viewer copy. Viewers see a preparing state until conversion and the format-specific checks pass. DeckPeek does not run a general-purpose malware scan on these uploads.

Free

• 50 active documents
• 2 GiB total workspace storage
• 100 pages per PDF and up to 2 workspace members
• Up to 50 total share links created
• PDF, DOCX, PPTX, and XLSX files up to 100 MB; standalone images up to 30 MB; and video up to 100 MB
• Up to 50 new DOCX, PPTX, or XLSX conversion initiations per workspace in each UTC calendar month

Pro

• 250 active documents
• 50 GiB total workspace storage
• Unlimited share links
• 500 pages per PDF and up to 5 workspace members
• PDF, DOCX, PPTX, and XLSX files up to 350 MB; standalone images up to 100 MB; and video up to 500 MB
• MP4, MOV, and M4V video; no usage-based overage charge; fair-use and provider-safety limits apply
• Up to 100 new DOCX, PPTX, or XLSX conversion initiations per workspace in each UTC calendar month

Workspace storage includes every original document version, any generated viewer copy, and capacity reserved while that copy is being produced. Current, earlier, and failed versions and all versions of documents in Trash count. Moving a document to Trash does not release storage; permanently deleting it removes the originals and viewer copies and frees that capacity. Storage limits use binary units: 1 GiB is 1,073,741,824 bytes.

Incomplete multipart upload sessions expire after seven days. Abandoned temporary upload storage enters the durable cleanup path after eight days, with retries if storage cleanup is temporarily unavailable. Failed or expired version records remain in version history and count at their recorded size toward workspace storage until their document is permanently deleted.

DeckPeek does not charge usage-based overages. View traffic, analytics events, and notification emails are not sold as metered allowances at launch. Fair-use, abuse-prevention, security, and provider-safety controls apply. Reaching a stated plan limit blocks the next affected action; it does not add an overage charge or delete existing content.

A file can be rejected when its type or contents do not match, it is empty, its structure cannot be read, an Office package contains unsupported active or external content, an image exceeds dimension or pixel bounds, or the workspace has reached a file, page, document, or storage limit. Keep the exact error and file type when contacting support; do not attach confidential material unless support asks for it through an approved channel.

Folders organize documents without changing existing share URLs. A new version keeps the document record together while updating the content associated with its links. Review link behavior before replacing material that has already been shared.

Moving a document to Trash removes it from the active library and disables its links. You have 30 days to restore it before the document, versions, links, and analytics are permanently deleted. The Trash page shows the scheduled deletion date. You can also delete it permanently sooner.

Viewers normally do not need an account. Each link has independent access settings, so use a separate link for each recipient or audience. You can revoke a link, set an expiration, require a password, collect a viewer email, and show or hide the one-click download action.

Free workspaces can create up to 50 share links in total. Revoking, expiring, or deleting a link does not restore that allowance. Editing an existing link or replacing its document does not create another link. Pro includes unlimited share-link creation.

Pro adds email verification, allow/block lists, watermarking, screenshot deterrence, and agreement gates. If a viewer cannot open a link, check that it has not expired or been revoked, confirm the exact password and email, and make sure any access-list rule matches the viewer’s address or domain.

Hiding the download action and adding viewer deterrents do not provide DRM. A browser preview receives file data, so an authorized recipient may still retain or capture what they can view.

Recipients can use Request access on supported restricted or expired links, on Free and Pro. They enter an email and optional message; submitting a request does not open the document or verify their identity. Workspace owners and admins review pending requests in Notifications → Requests. Reviewed requests move to Completed.

Approving sends a new personal link that requires verification of the requested email and lasts up to seven days, or until the original link's earlier future expiration. The original link stays unchanged. Its password and other copied document controls still apply. Each approved request creates a share link and counts toward Free's total allowance. If email delivery fails, review the delivery status in Completed to retry or copy the approved link.

Verification codes are short-lived and have attempt limits. Request a new code if one expires, and check spam or quarantine folders before retrying repeatedly.

Analytics can show opens, return visits, total and average viewing time, page-level attention, approximate country, browser or device indicators, referrer, and viewer email when collection is enabled.

Treat these measurements as useful signals, not proof that a specific person read, understood, or agreed with a document. Browser behavior, network conditions, blocked scripts, and repeated sessions can affect the results.

Read the pitch deck analytics guide for metric definitions, identity limits, and practical ways to use viewer activity for follow-up.

Free workspaces allow the owner and one regular member, for 2 people total. Administrator roles are not available on Free. Pro workspaces allow up to 5 total people, including the owner, and support administrator roles. Workspace owners manage administrator roles; owners and authorized administrators can manage regular members and invitations.

Pro includes one custom sharing domain. Add the requested DNS records exactly as shown and wait for both hostname and certificate status to become active. Do not remove the verification or CNAME records while the domain is connected. To prevent automated provider abuse, Pro allows up to 5 new provider hostname creations per workspace in each UTC calendar month. Status checks do not consume that allowance. A downgrade removes access to custom-domain routing.

Pro includes up to 10 webhook endpoints per workspace. Owners and admins can add an endpoint in Webhooks, select events, and save the generated signing secret. Disabled endpoints still count toward the limit. The endpoint must be a public HTTPS URL accepting JSON POST requests; redirects are not followed.

Events

Every JSON payload contains id, type, apiVersion, createdAt (Unix milliseconds), and data. Event data includes relevant workspace, document, link, and visit IDs, document titles, and captured viewer emails with a verification flag. Emails may be absent or unverified. Document content, comment text, passwords, and access tokens are excluded. Only connect destinations authorized to receive this data.

• link.viewed — A new viewing session starts on a shared link.
• viewer.comment.created — A viewer leaves a comment on a document.
• link.download_started — A recipient starts an authorized download. This does not confirm the file was saved.
• link.created — A new sharing link is created.
• document.ready — A new document version finishes processing and becomes available to share.

Send test queues a sample webhook.test event. It normally arrives within a minute. Use View deliveries and Refresh deliveries to inspect the result, response status, and individual attempts. History is available for seven days. Each workspace can send one new test every 30 seconds.

Verify every request

The X-DeckPeek-Signature header has the form t=TIMESTAMP,v1=SIGNATURE. The timestamp is Unix seconds; the signature is a lowercase hexadecimal HMAC-SHA256 of TIMESTAMP.RAW_REQUEST_BODY, using the complete signing secret as the key. Verify the original bytes before parsing JSON; reserializing the body changes the signature. Compare signatures in constant time and reject timestamps more than five minutes from your server’s clock.

The X-DeckPeek-Event-Id header identifies the event, and X-DeckPeek-Event identifies its type. Deduplicate by event ID after successful signature verification. Deliveries can repeat or arrive out of order. Keep the signing secret on your server; rotate it in Webhooks if it is lost or exposed.

Responses and retries

Return a 2xx status within eight seconds and process slower work in your own queue. Timeouts, network failures, HTTP 408, 425, 429, and 5xx responses retry automatically, up to ten attempts within 24 hours. Other non-2xx responses fail without retrying. A test is queued, rather than proof of successful delivery; check its final status.

Editing, disabling, rotating the secret, or deleting an endpoint cancels its pending deliveries. A downgrade preserves configuration and pauses sending; events that occur on Free are not replayed after upgrading. Deleting an endpoint also removes its delivery history. A request already in flight may still reach the receiver.

Pro costs $15 when billed monthly or $144 when billed annually, equivalent to $12 per month. The workspace owner can choose either billing cadence in Stripe checkout or open the billing portal from the Plan page to manage payment methods, invoices, and cancellation. Active subscriptions cannot switch cadence at launch. To choose another cadence, cancel at period end and start a new checkout after the old subscription ends. Subscription changes can take a short time to appear while Stripe confirms them. For annual billing, DeckPeek makes one best-effort reminder delivery about 30 days before renewal, but email delivery is not guaranteed; review the Plan page and cancel before renewal when needed.

Never send full card numbers, passwords, Stripe secrets, or webhook secrets to support. For billing help, provide the account email, workspace name, approximate charge date, and invoice or subscription reference if available.

Account settings let you change your password, review active sessions, sign out other sessions, export account data, manage notifications, and request account deletion. Password resets sign out existing sessions.

Account deletion is permanent and includes owned workspaces and stored files. Review the deletion summary carefully and export anything you need first. An active legal or safety preservation obligation can temporarily prevent deletion.

Read the Privacy Policy and Security page for more detail.

Send the account email, workspace name, page or feature, approximate time, and exact error text. Never send a password, verification code, API secret, full payment-card number, or an unnecessary copy of a private document.

Harmful or illegal hosted material should be reported through the dedicated abuse form so it reaches the correct review path.

Email support@deckpeek.com · Contact form · Report abuse