Privacy Policy

1. Introduction

DecideAI ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us:

• Account Information: Email address, name, password (hashed)
• User Content: Documents, text, questions, and other content you upload
• Payment Information: Processed securely through Stripe (we don't store credit card details)
• Communication: Messages you send to us, feedback, support requests

2.2 Automatically Collected Information

We automatically collect certain information when you use the Service:

• Usage Data: Queries made, features used, time spent, pages visited
• Device Information: Browser type, device type, operating system, IP address
• Log Data: Access times, dates, error logs
• Cookies and Tracking: See our Cookie Policy for details

3. How We Use Your Information

We use the collected information for:

• Providing, maintaining, and improving the Service
• Processing your queries and generating AI responses
• Processing payments and managing subscriptions
• Sending administrative information and updates
• Responding to your comments, questions, and requests
• Monitoring and analyzing usage patterns
• Detecting, preventing, and addressing technical issues
• Enforcing our Terms of Service
• Complying with legal obligations

4. Data Processing and AI Services

To provide AI-powered responses, your content may be processed by third-party AI services (e.g., OpenAI). We use these services in accordance with their privacy policies and data processing agreements.

Important: When you upload content, it is processed to:

• Generate embeddings for semantic search
• Chunk and index your documents
• Provide context for AI responses
• Improve our AI models (with your consent, if applicable)

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: Third-party services that help us operate (e.g., Stripe for payments, OpenAI for AI, Sentry for error tracking, Supabase for hosting)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

All service providers are contractually obligated to protect your information and use it only for the purposes we specify.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure authentication and authorization
• Regular security audits
• Access controls and monitoring
• Row-level security (RLS) for database access

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

8. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Request transfer of your data
• Objection: Object to processing of your data
• Withdraw Consent: Withdraw consent where processing is based on consent

Data portability: You can export your data (profile, libraries, decisions, goals, collections) at any time from your Account settings.

For other requests, please contact us at homodeginger@gmail.com. We will respond within 30 days.

9. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete such information immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your country.

We ensure that appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses (SCCs) where applicable
• Compliance with GDPR requirements
• Privacy Shield framework (where applicable)

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. See our Cookie Policy for detailed information.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

For material changes, we will notify you via email or a prominent notice on our Service.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: homodeginger@gmail.com
Website: https://decideai.tech