Privacy policy

Information We Collect

Personal Information

• Your email address, and the name on your account and certificates (by default the part of your email address before the @; you can change it in your profile)
• What you write here: answers to case questions, course answers and memos, decision journal entries, and messages you send through the contact and feedback forms
• Usage data and analytics information
• When signed in, your email address is used as the Amplitude account identifier so activity can be connected across sessions
• Device information and IP address

Automatically Collected Information

• Browser type and version
• Operating system
• Pages visited and time spent on our website
• Referring website addresses
• Cookies and similar tracking technologies

How We Use Your Information

We use your personal information to:

• Provide and maintain our services
• Sign you in with one-time links sent to your email
• Review the answers, memos and journal entries you send for a review, using an AI model
• Send you email: sign-in links, one welcome letter, the weekly live case, streak reminders and, if you join a programme or a case room, its invitations and reminders. The live case and streak emails can be switched off in your profile or from any of those emails
• Improve our website and user experience
• Comply with legal obligations

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• With your explicit consent
• To comply with legal requirements or court orders
• To protect our rights, property, or safety
• With the service providers listed below, who process data for us to run the product

Service providers

• Vercel hosts the website.
• Supabase stores your account and what you write.
• Resend delivers our emails.
• OpenAI reviews the answers, memos and journal entries you send for a review, and turns dictated speech into text. We do not keep the audio.
• Amplitude measures how the site is used and records sessions; text typed into form fields is masked in those recordings, and pages inside rooms and courses, which show other people’s names, are left out of them. Its data is kept in Amplitude's EU data centre.

Your account and everything you write are stored in the United States; usage analytics stay in Amplitude’s EU data centre. If your rules require the data to be kept in another region, such as the UK, the EU or Kazakhstan, you or the organisation that invited you can ask at hello@decidenda.com, and we will store it there.

Organisations that invite people to rooms or programmes can sign our data processing agreement.

What other people can see

• In a case room, the people leading it see your name and how many of its questions you have sent; other players see only how many people have answered, never names or answers. After the results open, and only once at least five players have answered, the room shows how many people picked each call and one sentence about the group’s FRAME steps.
• In a room, the people leading it read the answers you send there and their reviews, with your name, unless the room allows anonymous answers and you choose to answer anonymously; the invitation says which before you join. If you turn on “Show my answers to the room”, the answers you send also appear in the room’s results without your name, and only once five people have answered a question. Pages inside a room are left out of session recordings.
• A certificate's verification page shows your name, the certificate and its numbers to anyone who has its link. It does not show your answers.

Cohort Programmes and Decision Memoranda

A decision memorandum belongs to its author and is not shown to a programme owner, employer, manager, or another participant. A programme owner sees participation: whether and when each person joined and made each decision, how many chapters they have finished and when they were last active, and can download that list.

Reasoning evidence is released only as an anonymous cohort aggregate when at least five participants have submitted both required checkpoints. We do not provide individual scores, employee rankings, or fallback access to individual memoranda when that threshold is not met.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate data
• Delete your account and associated data
• Withdraw consent at any time
• Object to data processing

To use any of these rights, write to us from the address your account uses.

How long we keep it

We keep your account and what you wrote for as long as the account exists, so that your answers stay editable and your certificates stay valid. A sign-in link is deleted once it is used. Write to us to delete your account and everything in it.

Signing in

There are no passwords and no sign-in through other services. We email you a link that works once and expires after an hour. Opening it keeps you signed in on that browser for as long as you come back at least once every seven days.

Cookies

We use a few cookies: one keeps you signed in, two protect the sign-in form and remember where to return you, one remembers your interface language, and two note that a visitor has used the free review before registering. Your browser also stores drafts written before you sign in, your place in each case and which introductions you have seen. Amplitude sets its own identifiers to measure how the site is used. Blocking cookies stops sign-in from working.

Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices or content.

Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or website notice.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: hello@decidenda.com

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.