Security & privacy

Everything you send to Decidi travels over TLS, so it is encrypted in transit. At rest, your account records, decision history and uploaded files are stored encrypted by our hosting provider. There is no point in the flow where your brief crosses the network in the clear.

Account data, chat threads, councils and credit ledgers are stored in Supabase, hosted in the European Union region. Everything we keep, and the reason for each item, is listed in the privacy policy.

Files you attach — photos, screenshots, documents — are used to do the work you attached them to, and to build the deliverable from it later. The text of a document is kept with its decision or conversation; images are read for the run and not kept. They are not shared. Documents in your library are drawn on across your conversations until you remove them, and are erased when you do.

We do not use your content to train any model. We do not sell your prompts, files, transcripts or verdicts. They reach the model providers through their APIs, to return an answer, and are handled there under each provider’s own API terms.

We use established providers under their data-protection terms. The services that handle your data, and the only reason each one does:

• Frontier-model providers — OpenAI, Anthropic, Google and xAI, reached through the FastRouter gateway. They receive your chat messages, your brief, the text of what you attach and the relevant parts of your library and of what Decidi remembers about you, to return each contribution and the verdict. Perplexity, reached the same way, receives the brief for the live web research that grounds the facts which move. When you ask for a video, the request goes to a video model from ByteDance through the same gateway.
• Supabase — stores your account and everything listed above, in the European Union (eu-north-1), and signs you in.
• Vercel — hosts and serves the application.
• Sentry — receives error reports, so a fault is found and fixed. A report carries the error, the page and the model involved — not your briefs or verdicts.
• Google Analytics — measures page views and traffic sources so we can see how people find and move through the site. It never receives your briefs, transcripts or verdicts.
• Meta — the Meta pixel records that a visit happened, so we can tell which advertisements brought someone here. It never receives your briefs, transcripts or verdicts, and advertising signals stay switched off unless you accept them in the cookie banner.
• Lemon Squeezy — processes payments; it handles your card details so we never do.
• Resend — delivers the email we send you. A message telling you a run has finished quotes the opening of your brief, so you can tell which run it was.
• Twilio — carries the support phone line, and holds a voicemail if you leave one.
• Google sign-in — if you choose to sign in with Google, Google confirms who you are to us.

We do not sell or share your content with anyone else. We do run measurement tags — Google Analytics and the Meta pixel — so we can see which pages and which advertisements bring people here. They record that a visit happened; they never receive your briefs, transcripts or verdicts, and advertising signals stay switched off unless you accept them in the cookie banner.

Access to production data is restricted to the small number of people who operate the service, and only when needed to run or support it. Authentication protects your account, and every request is scoped to the account that made it.

Payments are handled by Lemon Squeezy, which acts as the merchant of record for Decidi — it is the seller on your receipt, charges in US dollars, and calculates, collects and remits any sales tax or VAT due in your country. Full card details never reach Decidi’s servers. Your card details are entered with the processor, not with us — full card numbers, CVV and PIN never touch Decidi’s servers. We receive confirmation that a payment succeeded, its reference and amount, and the status of your subscription; any billing details you enter for an invoice are kept with it.

You can remove a decision or a conversation from your history at any time. It leaves your account at once and its shared link stops working. A document you remove from your library is erased at once. Anything Decidi remembers about you that you remove is erased at once. To have a removed item erased from our systems, or to erase your whole account, email support@decidi.ai. We erase your decisions, conversations, documents and what Decidi remembers about you, and keep only the billing records the law requires us to keep.

Your decisions, conversations and documents are kept in your account until you remove them, so you can reopen and download them. The text of an attached document is kept with the decision or conversation it belongs to. We hold the billing records the law requires, and nothing more than we need to run the service.

We’d rather be honest than impressive. Decidi is an early-stage product and does not currently hold formal security certifications — no SOC 2, no ISO 27001, no HIPAA. We will not imply compliance we don’t have. Formal certification and features like customer-managed retention and audit logging are on the roadmap as the product and customer base grow. If your use genuinely requires a specific certification today, tell us and we’ll be straight with you about where we are.

A council can include several different underlying models — real, live API models, not one model wearing different hats. They are accessed through the FastRouter gateway and assigned round-robin, so an N-mind debate genuinely spans different providers: OpenAI, Anthropic, Google and xAI. When four minds argue, you are typically hearing four different frontier models reason independently.

Each contribution shows which model produced it. Nothing is anonymised into a single voice — when GPT, Claude, Gemini or Grok speaks, the debate names it, so you can weigh a point knowing where it came from.

Personas are distinct expert system-prompts — a security red-teamer, a CFO, a devil’s advocate — layered onto a model to give it a deliberate point of view. The persona shapes the lens; the model does the reasoning. Both are shown together, so you always know that a given argument is, for example, the CFO lens running on one specific model.

The depth you choose selects the calibre of models in the pool:

• Quick — fast, lively, low-cost models for brainstorms and first passes.
• Standard — strong reasoning models for everyday rigour, the sensible default.
• Deep — the flagship frontier models at full depth, for decisions that genuinely matter. Deep is a Pro feature.

Higher levels draw from more capable — and more expensive — models, which is why Deep sits on the Pro plan rather than being something you can pay a little extra for on a lower one.

We do not invent a price. Decidi is sold as a plan and metered underneath: each run draws on the real token usage of the models that actually contributed, plus the orchestration and the audit we run on top. Your plan shows how much of the month is left, a build-out shows its estimate before you commit, and the charge reflects what was genuinely consumed — a run that produces no answer is not charged.

If a model is briefly unavailable, the debate says so and continues with the rest of the council, rather than fabricating a response on that model’s behalf. A missing voice is shown as missing — we would rather give you an honest four-mind debate than a faked five-mind one. If the model appointed to chair or to audit cannot be reached, a model from another lab takes its place, and the page names the one that did the work.