Privacy Policy
Last updated: March 17, 2026
Decyde (“we,” “our,” or “us”) operates the website decyde.co.uk and the Decyde platform (the “Service”). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.
By using Decyde, you agree to the collection and use of information as described in this policy.
1. Information We Collect
Information You Provide Directly
When you use Decyde, you may provide us with:
- Account information: Your name, email address, and company name when you create an account or request a magic link login.
- Audit form data: Brand name, website URL, competitor name, industry, and work email address when you submit a free AI visibility audit.
- Subscription data: When you upgrade to a paid plan, payment is processed by our payment provider, Stripe (Stripe, Inc.). We do not store your credit card number, CVV, or full payment details. We receive and store your Stripe customer ID and subscription status to manage your account tier.
- Feedback and communications: Any information you provide when contacting us via email or through the Service.
Information Collected Automatically
When you visit or use the Service, we may automatically collect:
- Log data: Your IP address, browser type, operating system, referring URLs, pages visited, and timestamps. This data is used for security, analytics, and improving the Service.
- Cookies: We use essential cookies to maintain your session and authentication state. We do not use advertising or tracking cookies. See Section 7 for more detail.
Information Generated by the Service
When you run an AI visibility audit, the Service generates:
- Audit results: AI visibility scores, platform breakdown data, citation sources, key findings, recommendations, and action plans. This data is derived from querying third-party AI platforms using the brand and competitor information you provide.
- Website analysis data: When generating citation intelligence and content gap analysis, we may crawl the publicly accessible pages of the website URL and competitor URL you provide using third-party web scraping services.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service, including running AI visibility audits and generating reports.
- Send you your audit results, reports, and weekly monitoring updates (for Pro subscribers) via email.
- Process your subscription and manage your account tier.
- Communicate with you about the Service, including responding to support requests and sending product updates you have opted into.
- Monitor and analyze usage patterns to improve the Service.
- Detect, prevent, and address technical issues, fraud, or security threats.
We do not sell your personal information to third parties. We do not use your information for advertising purposes.
3. Third-Party Services
We use the following third-party services to operate Decyde. Each processes data as described:
| Service | Purpose | Data Shared | Their Privacy Policy |
|---|---|---|---|
| Convex (Convex, Inc.) | Database and backend infrastructure | Account data, audit data, subscription status | convex.dev/privacy |
| Vercel (Vercel Inc.) | Website hosting and deployment | Log data, IP addresses | vercel.com/legal/privacy-policy |
| Google Gemini API (Google LLC) | AI model queries for audit analysis | Brand name, competitor name, industry (no personal user data is sent to Gemini) | ai.google.dev/terms |
| Jina AI (Jina AI GmbH) | Website crawling for citation intelligence | Publicly accessible website URLs you provide | jina.ai/legal |
| Resend (Resend Inc.) | Transactional email delivery | Your email address, report content | resend.com/legal/privacy-policy |
| Stripe (Stripe, Inc.) | Payment processing (Merchant of Record) | Name, email, payment details (processed directly by Stripe) | stripe.com/privacy |
When we query AI models (such as Google Gemini) on your behalf, we send the brand name, competitor name, and industry you provided. We do not send your personal information (name, email, etc.) to AI model providers.
4. Data Retention
- Account data: Retained for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law.
- Audit data: Audit results and reports are retained for as long as your account is active to provide historical comparisons and trend data.
- Log data: Server logs are retained for up to 90 days for security and debugging purposes.
You may request deletion of your data at any time by emailing support@decyde.co.uk.
5. Data Security
We implement commercially reasonable technical and organizational measures to protect your personal information, including:
- Encrypted data transmission (HTTPS/TLS) for all connections to the Service.
- Authentication via secure magic link tokens with short expiration windows.
- Access controls limiting data access to authorized services and personnel.
- Database hosted on Convex, which maintains SOC 2 Type II compliance.
No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data.
- Portability: Request a copy of your data in a structured, machine-readable format.
- Objection: Object to certain types of processing of your personal data.
- Withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.
To exercise any of these rights, contact us at support@decyde.co.uk. We will respond within 30 days.
For European Economic Area (EEA) Residents
If you are located in the EEA, our legal bases for processing your personal data are:
- Contract performance: Processing necessary to provide the Service you have requested.
- Legitimate interest: Processing for analytics, security, and service improvement.
- Consent: Where you have provided explicit consent, such as opting into marketing communications.
You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.
For California Residents
Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.
7. Cookies
Decyde uses only essential cookies required for the Service to function:
- Authentication cookies: To maintain your logged-in session after magic link verification.
We do not use advertising cookies, social media tracking pixels, or third-party marketing cookies. If we add analytics in the future, we will update this policy and provide appropriate notice.
8. Children’s Privacy
Decyde is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will delete it promptly.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own, including the United States and countries within the European Union, where our service providers operate. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the “Last updated” date at the top of this page and, where appropriate, providing additional notice via email.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, contact us at:
Email: support@decyde.co.uk
Website: decyde.co.uk