Privacy Policy

Effective Date: September 18, 2026

Thank you for using Decidest ("Decidest", "we", "us", or "our"). Your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal information when you use our websites and services, including decidest.com and the Decidest app at app.decidest.com.

If you have any questions, please contact us at support@decidest.com.

1. Information We Collect

a. Account Information

When you create an account or sign in, we collect the information needed to run your workspace:

Name, email address, and password (passwords are stored as a one-way hash, not in plain text)
Workspace (account) name
Profile image if you provide one, or if a sign-in provider supplies it
Identifiers from third-party sign-in (Google or GitHub) if you choose to connect those services

b. Workspace Content

Decidest is a workspace for tracking decisions, experiments, and outcomes. We store the content you and your teammates put into the product, including:

Board columns, labels, tickets (bets), comments, and assignments
Hypotheses, evidence, metric definitions, funnels, and recorded outcomes
Datasets, reports, and other workspace configuration you create

c. Connected Data Sources

If you connect a third-party data source (currently Google Analytics), we collect:

OAuth tokens and connection metadata needed to keep that integration working. Tokens are stored encrypted.
Analytics data you authorize us to import, such as page metrics, funnels, and related aggregated reporting data
Property and account names from the source so you can tell connections apart in settings

We only access connected sources to provide the features you request. You can disconnect a source at any time. Disconnecting stops new imports; you may also ask us to delete imported data as described below.

d. Device and Usage Information

We may collect information about your device and how you use the service, including:

Browser type, operating system, and app version
IP address and usage patterns (for analytics, security, and diagnostics)

2. How We Use Your Information

We use your data to:

Provide and improve Decidest's core features, including the board, bets, reports, and connected data
Authenticate you, keep your session secure, and remember that you are signed in
Sync, store, and display data from sources you choose to connect
Customize your workspace experience
Provide customer support
Protect the service against abuse, fraud, and unauthorized access

We do not sell your personal data to any third parties.

We do not use connected analytics data, workspace content, or account information to show you third-party ads.

3. Data Sharing and Disclosure

We do not share your personal data except in the following cases:

With your consent: You opt in to connect a third party (for example, linking a Google Analytics property).
With people in your workspace: Content you add is visible to other members of that workspace.
With service providers: We use trusted vendors to help operate the service. These include:
- Google LLC: used for optional Google sign-in and, if you connect it, the Google Analytics APIs that import reporting data into your workspace
- GitHub, Inc.: used for optional GitHub sign-in
- Sanity.io: used to host and deliver content on the public Decidest website
- Cloud hosting, database, and product-analytics providers that help us run, secure, and understand the service
As required by law: We may disclose data if legally obligated.

4. Children's Privacy

Decidest is a workplace product and is not intended for children under 13 (or under 16 in the EU). We do not offer child accounts.

If we discover that a child has created an account, we will take steps to delete the account and associated data.

5. Your Privacy Rights

a. GDPR (EU/EEA Users)

If you are in the European Economic Area, you have the right to:

Access, correct, or delete your data
Withdraw consent at any time
Object to or restrict processing
Request data portability

To exercise these rights, contact us at support@decidest.com.

b. California & Other Jurisdictions

Residents of California and other jurisdictions may have additional rights under local laws (e.g., CCPA). These include:

Right to know what data we collect
Right to request deletion
Right to opt out of data sharing (where applicable)

"Do Not Track" signals are honored where required by law.

6. Data Retention and Security

We retain your personal information only as long as necessary to provide the service or as required by law. If you ask us to delete your account, we will delete or de-identify personal data associated with it, except where we must keep a limited record for security, fraud prevention, or legal compliance.

We use modern security practices (for example, encryption in transit, encrypted storage of connected-account credentials, hashed passwords, and access controls) to safeguard your data. However, no method of transmission or storage is 100% secure.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Maintain session integrity so you stay signed in to the app
Analyze usage trends on the marketing site and product, when analytics is enabled
Remember preferences needed to operate the service

You may disable cookies in your browser settings, though this may affect certain features, including remaining signed in.

8. Third-Party Services

Decidest may link to or integrate with third-party services, including Google, GitHub, and any data source you choose to connect. Their use of your data is governed by their own privacy policies. Please review them individually. Our Terms of Service describe additional rules for connected sources.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the app or email.

Continued use of Decidest after an update constitutes your acceptance of the revised policy.

10. Contact Us

Decidest Support Email: support@decidest.com