Privacy Policy

Decidi (“Decidi”, “we”, “us”) is an AI decision-support service operated by 8T20 Capital, based in South Africa. For any privacy question, or to exercise the rights described below, write to privacy@decidi.ai. We act as the data controller for the personal information described here.

We keep the data we collect deliberately narrow:

• Account email — the address you sign up with, used to authenticate you and to send essential service messages.
• Decisions and briefs you submit — the questions, context and instructions you give the council, and the resulting debate transcripts and verdicts.
• Files you upload — photos, screenshots and documents you attach to a brief, used to inform that specific debate.
• Usage and credit ledger — which debates you ran, the depth level chosen, the models invoked, token usage, and the credits debited so your balance is accurate.
• Payment metadata via our payment processors (Yoco and/or Paystack, depending on region/method) — confirmation that a payment succeeded, the amount, and a transaction reference. Card payments are processed entirely by Yoco or Paystack; we never see or store your full card number, CVV or PIN.

Decidi does not run its own large language models. When you convene a council, your prompt and any files you attach are sent to third-party model providers — OpenAI, Anthropic, Google and xAI — through the FastRouter gateway, solely to generate the contributions and verdict for your debate.

We do not use your content to train any public model. We do not sell your prompts or transcripts, and we instruct providers not to retain your content for training where their API permits that instruction. Provider handling is governed by each provider’s own enterprise/API terms; for routine debates your content is processed to return a response and is not added to any consumer-facing training set.

Account records, decision history and credit ledgers are stored in Supabase, hosted in the European Union region. Data in transit is encrypted with TLS, and data at rest is encrypted by our hosting provider. Access to production data is limited to the small number of people who operate the service.

We keep your decisions and transcripts so you can return to them and so your credit ledger stays auditable. You can delete an individual decision at any time from your history. To delete your entire account and the personal data attached to it, email privacy@decidi.ai and we will erase your account, decisions and uploaded files, retaining only the minimal billing records we are legally required to keep. Uploaded files can be removed independently of your account on request.

We use a small number of strictly necessary cookies and similar local storage to keep you signed in and to remember your session and preferences. We do not use third-party advertising or cross-site tracking cookies. For aggregate, anonymised usage statistics (page views, traffic sources and page-speed) we use Vercel’s privacy-friendly analytics, which is cookieless and does not track you across other sites or build a personal profile.

Decidi is intended for adults. It is not directed at, and may not be used by, anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a minor has used the service, contact us and we will delete the relevant data.

Depending on where you live, you have rights over your personal information under the Protection of Personal Information Act (POPIA) in South Africa and the General Data Protection Regulation (GDPR) in the European Union. These include the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — ask us to erase your account and associated data.
• Portability — receive your decisions and data in a structured, machine-readable format.
• Objection and restriction — object to or limit certain processing.
• Withdraw consent — where processing relies on consent, withdraw it at any time.

To exercise any of these, email privacy@decidi.ai. You also have the right to lodge a complaint with your local regulator — the Information Regulator in South Africa, or your supervisory authority in the EU.

Because we operate from South Africa and rely on infrastructure and model providers based in the European Union and the United States, your data may be transferred across borders to deliver the service. Where we transfer data internationally, we rely on appropriate safeguards — such as standard contractual clauses and provider data-processing terms — to protect it.

We may update this policy as the service evolves or the law changes. When we make a material change we will update the date above and, where appropriate, notify you by email. Continuing to use Decidi after an update means you accept the revised policy.