Privacy Policy

Last updated: March 17, 2026

Decyde (“we,” “our,” or “us”) operates the website decyde.co.uk and the Decyde platform (the “Service”). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.

By using Decyde, you agree to the collection and use of information as described in this policy.


1. Information We Collect

Information You Provide Directly

When you use Decyde, you may provide us with:

  • Account information: Your name, email address, and company name when you create an account or request a magic link login.
  • Audit form data: Brand name, website URL, competitor name, industry, and work email address when you submit a free AI visibility audit.
  • Subscription data: When you upgrade to a paid plan, payment is processed by our payment provider, Stripe (Stripe, Inc.). We do not store your credit card number, CVV, or full payment details. We receive and store your Stripe customer ID and subscription status to manage your account tier.
  • Feedback and communications: Any information you provide when contacting us via email or through the Service.

Information Collected Automatically

When you visit or use the Service, we may automatically collect:

  • Log data: Your IP address, browser type, operating system, referring URLs, pages visited, and timestamps. This data is used for security, analytics, and improving the Service.
  • Cookies: We use essential cookies to maintain your session and authentication state. We do not use advertising or tracking cookies. See Section 7 for more detail.

Information Generated by the Service

When you run an AI visibility audit, the Service generates:

  • Audit results: AI visibility scores, platform breakdown data, citation sources, key findings, recommendations, and action plans. This data is derived from querying third-party AI platforms using the brand and competitor information you provide.
  • Website analysis data: When generating citation intelligence and content gap analysis, we may crawl the publicly accessible pages of the website URL and competitor URL you provide using third-party web scraping services.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service, including running AI visibility audits and generating reports.
  • Send you your audit results, reports, and weekly monitoring updates (for Pro subscribers) via email.
  • Process your subscription and manage your account tier.
  • Communicate with you about the Service, including responding to support requests and sending product updates you have opted into.
  • Monitor and analyze usage patterns to improve the Service.
  • Detect, prevent, and address technical issues, fraud, or security threats.

We do not sell your personal information to third parties. We do not use your information for advertising purposes.


3. Third-Party Services

We use the following third-party services to operate Decyde. Each processes data as described:

ServicePurposeData SharedTheir Privacy Policy
Convex (Convex, Inc.)Database and backend infrastructureAccount data, audit data, subscription statusconvex.dev/privacy
Vercel (Vercel Inc.)Website hosting and deploymentLog data, IP addressesvercel.com/legal/privacy-policy
Google Gemini API (Google LLC)AI model queries for audit analysisBrand name, competitor name, industry (no personal user data is sent to Gemini)ai.google.dev/terms
Jina AI (Jina AI GmbH)Website crawling for citation intelligencePublicly accessible website URLs you providejina.ai/legal
Resend (Resend Inc.)Transactional email deliveryYour email address, report contentresend.com/legal/privacy-policy
Stripe (Stripe, Inc.)Payment processing (Merchant of Record)Name, email, payment details (processed directly by Stripe)stripe.com/privacy

When we query AI models (such as Google Gemini) on your behalf, we send the brand name, competitor name, and industry you provided. We do not send your personal information (name, email, etc.) to AI model providers.


4. Data Retention

  • Account data: Retained for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law.
  • Audit data: Audit results and reports are retained for as long as your account is active to provide historical comparisons and trend data.
  • Log data: Server logs are retained for up to 90 days for security and debugging purposes.

You may request deletion of your data at any time by emailing support@decyde.co.uk.


5. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information, including:

  • Encrypted data transmission (HTTPS/TLS) for all connections to the Service.
  • Authentication via secure magic link tokens with short expiration windows.
  • Access controls limiting data access to authorized services and personnel.
  • Database hosted on Convex, which maintains SOC 2 Type II compliance.

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.


6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data.
  • Portability: Request a copy of your data in a structured, machine-readable format.
  • Objection: Object to certain types of processing of your personal data.
  • Withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, contact us at support@decyde.co.uk. We will respond within 30 days.

For European Economic Area (EEA) Residents

If you are located in the EEA, our legal bases for processing your personal data are:

  • Contract performance: Processing necessary to provide the Service you have requested.
  • Legitimate interest: Processing for analytics, security, and service improvement.
  • Consent: Where you have provided explicit consent, such as opting into marketing communications.

You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

For California Residents

Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.


7. Cookies

Decyde uses only essential cookies required for the Service to function:

  • Authentication cookies: To maintain your logged-in session after magic link verification.

We do not use advertising cookies, social media tracking pixels, or third-party marketing cookies. If we add analytics in the future, we will update this policy and provide appropriate notice.


8. Children’s Privacy

Decyde is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will delete it promptly.


9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States and countries within the European Union, where our service providers operate. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.


10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the “Last updated” date at the top of this page and, where appropriate, providing additional notice via email.


11. Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us at:

Email: support@decyde.co.uk
Website: decyde.co.uk