Privacy Policy

Decidi (“Decidi”, “we”, “us”) is an AI decision-support service operated by 8T20 Capital (Pty) Ltd, based in South Africa. For any privacy question, or to exercise the rights described below, write to support@decidi.ai. We act as the data controller for the personal information described here.

Everything we keep, and why:

• Account email — the address you sign up with, used to authenticate you, to send essential service messages, and to send the occasional re-engagement or feedback email described under “Email we send you”.
• Your chat threads — the messages you send in chat and the replies you get back. On a signed-in account these are stored so a thread is waiting on your next device. As a guest they are kept in your browser and not in an account; each message is still sent to the models to be answered.
• Decisions and briefs you submit — the questions, context and instructions you give a specialist, a panel or the Multi-Agent Team, and the resulting debate transcripts and verdicts.
• Files you attach — the text of a document you attach is kept with the decision or conversation it belongs to, so the work can be reopened and built out later. Images are read for the run and not kept. Documents you add to your library are kept until you remove them, and are drawn on across your conversations.
• What Decidi remembers about you — on a signed-in account, chat picks up durable facts about you and your work — your market, how you like things written — so you do not have to repeat them. Every one of them is listed in your account, where you can remove it.
• Usage and credit ledger — which runs you made, the depth chosen, the models invoked, token usage and the credits drawn, so your balance is accurate; and a record of which features are used, held against an identifier in your browser.
• Payment and billing details via Lemon Squeezy — confirmation that a payment succeeded, the amount, a transaction reference, the status of your subscription, and any billing details you enter for an invoice (a name or company, an address, a VAT number). Card payments are processed entirely by Lemon Squeezy; we never see or store your full card number, CVV or PIN.
• Messages you send us — what you write through the Help button or by email, with the address you give and the page you were on.
• Your IP address — used to limit abuse — how many requests arrive from one place — and, for guests, to meter free use.

Decidi does not run its own large language models. Whatever you send — a chat message, a brief, an attached file — goes to third-party model providers through the FastRouter gateway, to generate the reply, the contributions and the verdict you asked for. Those providers are OpenAI, Anthropic, Google and xAI for the reasoning, and Perplexity for the live web research that grounds facts which move. A request for a video goes to a video model from ByteDance. If your brief contains a link, our server fetches that page so the team can read it.

We do not use your content to train any model. We do not sell your prompts, files, transcripts or verdicts. They reach the model providers through their APIs, to return an answer, and are handled there under each provider’s own API terms.

Once a week the people who operate Decidi read an internal review of how the product was used. It draws on the opening line of the questions asked that week, the titles of conversations, support messages and answers to feedback emails, and is prepared with the help of one of the models above. It is never published, and no name is attached to it anywhere public.

To keep free use fair, accounts that appear to belong to the same person are linked.

The services that handle your data, and the only reason each one does:

• Frontier-model providers — OpenAI, Anthropic, Google and xAI, reached through the FastRouter gateway. They receive your chat messages, your brief, the text of what you attach and the relevant parts of your library and of what Decidi remembers about you, to return each contribution and the verdict. Perplexity, reached the same way, receives the brief for the live web research that grounds the facts which move. When you ask for a video, the request goes to a video model from ByteDance through the same gateway.
• Supabase — stores your account and everything listed above, in the European Union (eu-north-1), and signs you in.
• Vercel — hosts and serves the application.
• Sentry — receives error reports, so a fault is found and fixed. A report carries the error, the page and the model involved — not your briefs or verdicts.
• Google Analytics — measures page views and traffic sources so we can see how people find and move through the site. It never receives your briefs, transcripts or verdicts.
• Meta — the Meta pixel records that a visit happened, so we can tell which advertisements brought someone here. It never receives your briefs, transcripts or verdicts.
• Lemon Squeezy — processes payments; it handles your card details so we never do.
• Resend — delivers the email we send you. A message telling you a run has finished quotes the opening of your brief, so you can tell which run it was.
• Twilio — carries the support phone line, and holds a voicemail if you leave one.
• Google sign-in — if you choose to sign in with Google, Google confirms who you are to us.

We do not sell or share your content with anyone else.

Account records, decision history and credit ledgers are stored in Supabase, hosted in the European Union region. Data in transit is encrypted with TLS, and data at rest is encrypted by our hosting provider. Access to production data is limited to the small number of people who operate the service.

Your decisions, conversations and documents are kept in your account until you remove them, so you can reopen and download them. The text of an attached document is kept with the decision or conversation it belongs to. We hold the billing records the law requires, and nothing more than we need to run the service.

You can remove a decision or a conversation from your history at any time. It leaves your account at once and its shared link stops working. A document you remove from your library is erased at once. Anything Decidi remembers about you that you remove is erased at once.

To have a removed item erased from our systems, or to erase your whole account, email support@decidi.ai. We erase your decisions, conversations, documents and what Decidi remembers about you, and keep only the billing records the law requires us to keep.

There are two kinds, and they are governed differently.

• Service email — sign-in and verification, payment receipts and invoices, security notices such as a new API key, a message telling you a run finished after you left, and anything else your account genuinely requires. This cannot be switched off while the account exists, because it is how we keep our side of the arrangement.
• Re-engagement and feedback email — a reminder that the free run your account came with is still unused, a nudge if you have been away for a while, and one short question asking what you made of Decidi. You can stop all of these at any time.

Every re-engagement and feedback email carries a one-click unsubscribe link, and supports your mail app’s own Unsubscribe button. We honour it immediately and permanently, no sign-in needed. Opting out never affects service email — you will still get receipts, security alerts and account notices.

When you answer a feedback email, we store which option you chose and anything you choose to write, against your account, and use it to decide what to build and fix. It is read by the people who operate Decidi and summarised into the internal weekly review described above. We do not publish it, and we do not attach your name to it anywhere public.

We rely on our legitimate interest in improving a service you signed up for (Article 6(1)(f) GDPR), and on the existing relationship between us under section 69 of POPIA, to send this small amount of email. You can object at any time using the unsubscribe link or by emailing support@decidi.ai. We never sell, rent or share your address, and we never send you email on behalf of anyone else.

We use strictly necessary cookies and similar local storage to keep you signed in, to remember your session and preferences, and to measure how the product is used. For usage statistics (page views and traffic sources) we use Google Analytics. We also load the Meta pixel so we can tell which advertisements brought someone here. These are measurement tools only — they never receive your briefs, transcripts or verdicts. Analytics runs by default; advertising and personalisation signals stay switched off unless you accept them in the cookie banner, and declining there switches analytics off as well.

Decidi is intended for adults. It is not directed at, and may not be used by, anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a minor has used the service, contact us and we will delete the relevant data.

Depending on where you live, you have rights over your personal information under the Protection of Personal Information Act (POPIA) in South Africa and the General Data Protection Regulation (GDPR) in the European Union. These include the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — ask us to erase your account and associated data.
• Portability — receive your decisions and data in a structured, machine-readable format.
• Objection and restriction — object to or limit certain processing.
• Withdraw consent — where processing relies on consent, withdraw it at any time.

To exercise any of these, email support@decidi.ai. You also have the right to lodge a complaint with your local regulator — the Information Regulator in South Africa, or your supervisory authority in the EU.

Because we operate from South Africa and rely on infrastructure and model providers based in the European Union, the United States and elsewhere, your data may be transferred across borders to deliver the service. Where we transfer data internationally, we rely on appropriate safeguards — such as standard contractual clauses and provider data-processing terms — to protect it.

We may update this policy as the service evolves or the law changes. When we make a material change we will update the date above and, where appropriate, notify you by email. Continuing to use Decidi after an update means you accept the revised policy.