Privacy Policy

Who we are

Decize (“Decize,” “we,” or “us”) is currently operated by the Decize team. Questions about this policy can be sent to support@decize.app.

What we collect

• Account data: authentication identifiers, email address, display name, and session information for people who sign in.
• Organization data: workspace name, member names and email addresses, roles, organization values and goals, capture settings, and integration settings.
• Decision data: titles, summaries, owners, dates, forecasts, approvals, outcomes, lessons, source messages, and AI-generated organization analysis.
• Inbound communication: email message content and delivery metadata when mail is sent or forwarded to a workspace capture address.
• Operational data: audit events, request logs, error details, and aggregate product analytics used to secure and improve the service.

We do not sell data or use it for advertising.

How we use data

• Provide and secure organization workspaces.
• Capture, organize, search, and report on organization decisions.
• Generate the AI analysis, summaries, themes, and related-decision recall requested by a workspace.
• Send capture replies, outcome prompts, and organization digests.
• Prevent abuse, diagnose failures, and improve reliability.

Workspace access

Decisions belong to an organization workspace, not to an individual journal. Every member of a workspace can read all of its decision records; roles govern what each can change. Owners and managers can manage membership, settings, exports, and organization data. Database row-level security separates organizations on reads, and server-side code scopes each write to its organization.

AI processing

Decize sends the content needed for an AI feature to Google Gemini, with Anthropic available as a fallback provider. Related-decision embeddings are generated within Supabase infrastructure. Inputs can include decision and email text, relevant organization values and goals, and compact related records. One check runs without being asked: when a decision is saved, opened or downloaded, Decize asks the AI provider whether each of its closest past decisions (at most three) is about the same thing, sending the newer decision’s title and summary and the earlier one’s title, date, outcome, lesson and whether it is still in force, and keeps the answer so the same pair is not sent again. A past decision checked this way can turn out to be unrelated; it always comes from the same workspace. We don’t train AI models on your decisions.

If we switch on AI evaluation, TypeSafe (typesafe.ai) also receives the text of an emailed outcome reply, with the titles, decision dates and short summaries of the decisions it might be about, so its reading can be compared with ours. Its answers are stored for evaluation only and are never shown or acted on. Evaluation is off by default.

Where data is stored

Your decision log is stored in a Supabase Postgres database in AWS us-east-1 (N. Virginia), encrypted at rest by Supabase. Copies also exist in Supabase’s backups, in mail handled by Resend, in our Hostinger support mailbox, and for about an hour in Vercel’s cache of AI-written summaries. Email sent to a workspace capture address, and the email Decize sends, pass through Resend, which processes them in AWS ap-northeast-1 (Tokyo). The emails Decize sends stay in the recipients’ mailboxes. Replies sent to support@decize.app or to our send-only addresses go to Hostinger instead. AI requests are processed by the providers listed below. This describes where data is kept today; it is not a data-residency commitment.

Service providers

Handle decision content

• Supabase — database, authentication, edge functions, and embeddings.
• Vercel — application hosting and aggregate web analytics.
• Google and Anthropic — AI model processing.
• Resend — outbound and supported inbound email delivery.

Billing only

• Dodo Payments — payment processing and subscription billing.

Dodo Payments receives the workspace owner’s email address and a workspace identifier from us. It collects card and billing details directly on its own checkout page, and Decize never sees or stores them. It never receives decision content.

Off unless we switch it on

• TypeSafe — optional AI evaluation, only when switched on.

It is off today. If we switch it on, it applies to every workspace; there is no per-workspace setting.

Site infrastructure

• Hostinger — domain DNS and our support mailbox, which receives replies sent to support@ or to our send-only notifications@ and reports@ addresses. A reply can quote the Decize email it answers.
• Cloudflare Turnstile — bot check on the sign-in and refund forms, when enabled. It sees the visitor’s IP address and browser signals.

Cookies

Decize uses essential session storage and cookies for sign-in and security. Vercel may collect aggregate, cookieless web analytics. We do not use advertising cookies or cross-site advertising trackers.

Retention, export, and deletion

Organization data is retained while the workspace is active and as needed for security, legal, and backup purposes. Owners and managers can delete decision records and export organization decisions on every plan. Workspace owners can delete the whole workspace from Settings at any time. Workspace owners can also choose, in Settings, to have Decize remove the text of emails sent to it after 30, 90 or 365 days; by default it is kept. Decisions, outcomes and lessons are kept either way. Deleted data can remain in backups until they rotate. Deleting a decision erases the text of the emails linked to it, including replies in its thread that changed it or reported how it went; other messages in the thread keep their text. Deleting in Decize does not recall emails it has already sent, or anything already sent to the service providers listed above. Account deletion requests can be sent to support@decize.app. We may need to confirm that the requester has the authority to delete the data.

Your rights

Depending on where you live, you may have rights to access, correct, export, delete, or restrict processing of personal data. Contact support@decize.app to make a request. If your data is controlled by your employer or another organization, we may direct the request to that organization.

Children

Decize is intended for workplace use and is not directed to children under 16.

Changes and contact

We will revise the date above when this policy changes. For security details, see Security. For privacy questions, email support@decize.app.