gamma-data-handling

# Gamma Data Handling ## Overview Data handling, privacy controls, and compliance for Gamma API integrations. Gamma processes user-submitted content through AI to generate presentations -- understand what data flows where and how to handle PII, retention, and GDPR requirements. ## Prerequisites - Understanding of data privacy regulations (GDPR, CCPA) - Completed `gamma-install-auth` setup - Data classification policies defined ## Data Flow Map ``` User Input (content, prompts) │ ▼ ┌──────────────┐ │ Your App │ ← PII may be in content (names, company data) │ (API key) │ └──────┬───────┘ │ POST /v1.0/generations ▼ ┌──────────────┐ │ Gamma API │ ← Content processed by AI │ (gamma.app) │ ← Images generated └──────┬───────┘ │ gammaUrl + exportUrl ▼ ┌──────────────┐ │ Generated │ ← Presentation stored in Gamma workspace │ Content │ ← Export files (PDF/PPTX/PNG) temporary └──────────────┘ ``` ## Data Classification | Data Type | Classification | Where Stored | Retention | |-----------|---------------|--------------|-----------| | API key | Secret | Your env vars | Active use only | | Content/prompts | May contain PII | Gamma servers (during generation) | Gamma's policy | | Generated gammas | User data | Gamma workspace | User-controlled | | Export files (PDF/PPTX) | User data | Temporary URLs | Download promptly, URLs expire | | User prompts in logs | PII risk | Your infrastructure | Your policy (sanitize!) | | Cr...