Privacy Policy

Decidi (“Decidi”, “we”, “us”) is an AI decision-support service operated by 8T20 Capital, based in South Africa. For any privacy question, or to exercise the rights described below, write to privacy@decidi.ai. We act as the data controller for the personal information described here.

We keep the data we collect deliberately narrow:

• Account email — the address you sign up with, used to authenticate you, to send essential service messages, and to send the occasional re-engagement or feedback email described under “Email we send you” below. Those messages are delivered by Resend, our email provider.
• Your chat threads — the messages you send in chat and the replies you get back. On a signed-in account these are stored so a thread is waiting on your next device; as a guest they stay in your browser.
• Decisions and briefs you submit — the questions, context and instructions you give a specialist, a panel or the Multi-Agent Team, and the resulting debate transcripts and verdicts.
• Files you upload — photos, screenshots and documents you attach to a brief, used to inform that specific debate.
• Usage and credit ledger — which debates you ran, the depth level chosen, the models invoked, token usage, and the credits debited so your balance is accurate.
• Payment metadata via Lemon Squeezy — confirmation that a payment succeeded, the amount, and a transaction reference. Card payments are processed entirely by Lemon Squeezy; we never see or store your full card number, CVV or PIN.

Decidi does not run its own large language models. Whatever you send — a chat message, a brief, an attached file — goes to third-party model providers through the FastRouter gateway, solely to generate the reply, the contributions and the verdict you asked for. Those providers are OpenAI, Anthropic, Google and xAI for the reasoning, and Perplexity for the live web research that grounds facts which move.

We do not use your content to train any public model. We do not sell your prompts or transcripts, and we instruct providers not to retain your content for training where their API permits that instruction. Provider handling is governed by each provider’s own enterprise/API terms; for routine debates your content is processed to return a response and is not added to any consumer-facing training set.

Account records, decision history and credit ledgers are stored in Supabase, hosted in the European Union region. Data in transit is encrypted with TLS, and data at rest is encrypted by our hosting provider. Access to production data is limited to the small number of people who operate the service.

We keep your decisions and transcripts so you can return to them and so your credit ledger stays auditable. You can delete an individual decision at any time from your history. To delete your entire account and the personal data attached to it, email privacy@decidi.ai and we will erase your account, decisions and uploaded files, retaining only the minimal billing records we are legally required to keep. Uploaded files can be removed independently of your account on request.

There are two kinds, and they are governed differently.

• Service email — sign-in and verification, payment receipts and invoices, security notices such as a new API key, a message telling you a run finished after you left, and anything else your account genuinely requires. This cannot be switched off while the account exists, because it is how we keep our side of the arrangement.
• Re-engagement and feedback email — a reminder that the free run your account came with is still unused, a nudge if you have been away for a while, and one short question asking what you made of Decidi. You can stop all of these at any time.

Every re-engagement and feedback email carries a one-click unsubscribe link, and supports your mail app’s own Unsubscribe button. We honour it immediately and permanently, no sign-in needed. Opting out never affects service email — you will still get receipts, security alerts and account notices.

When you answer a feedback email, we store which option you chose and anything you choose to write, against your account, and use it to decide what to build and fix. It is read by the people who operate Decidi and summarised into an internal weekly review. We do not publish it, and we do not attach your name to it anywhere public.

We rely on our legitimate interest in improving a service you signed up for (Article 6(1)(f) GDPR), and on the existing relationship between us under section 69 of POPIA, to send this small amount of email. You can object at any time using the unsubscribe link or by emailing privacy@decidi.ai. We never sell, rent or share your address, and we never send you email on behalf of anyone else.

We use strictly necessary cookies and similar local storage to keep you signed in and to remember your session and preferences. For usage statistics (page views, traffic sources and page-speed) we use Vercel’s analytics, which is cookieless and builds no personal profile, and Google Analytics. We also load the Meta pixel so we can tell which advertisements brought someone here. These are measurement tools only — they never receive your briefs, transcripts or verdicts. Analytics runs by default; advertising and personalisation signals stay switched off unless you accept them in the cookie banner, and declining there switches analytics off as well.

Decidi is intended for adults. It is not directed at, and may not be used by, anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a minor has used the service, contact us and we will delete the relevant data.

Depending on where you live, you have rights over your personal information under the Protection of Personal Information Act (POPIA) in South Africa and the General Data Protection Regulation (GDPR) in the European Union. These include the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — ask us to erase your account and associated data.
• Portability — receive your decisions and data in a structured, machine-readable format.
• Objection and restriction — object to or limit certain processing.
• Withdraw consent — where processing relies on consent, withdraw it at any time.

To exercise any of these, email privacy@decidi.ai. You also have the right to lodge a complaint with your local regulator — the Information Regulator in South Africa, or your supervisory authority in the EU.

Because we operate from South Africa and rely on infrastructure and model providers based in the European Union and the United States, your data may be transferred across borders to deliver the service. Where we transfer data internationally, we rely on appropriate safeguards — such as standard contractual clauses and provider data-processing terms — to protect it.

We may update this policy as the service evolves or the law changes. When we make a material change we will update the date above and, where appropriate, notify you by email. Continuing to use Decidi after an update means you accept the revised policy.