Institutional Data Governance

Privacy Policy

Last Updated & Effective Date: October 8, 2026

1. Overview & Commitment

DecideSync (accessible at decidesync.com) is a collaborative decision intelligence platform engineered for executive evaluation, blind stakeholder scoring, and multi-criteria consensus. We are committed to maintaining strict privacy standards, enterprise-grade confidentiality, and institutional data governance for all organizations, decision leaders, and participating stakeholders.

2. Information We Collect

We collect information only as necessary to provide our consensus decision services:

  • Account & Authentication Information: When you register or sign in via email, Google Single Sign-On (SSO), or Microsoft Entra ID / Microsoft 365, we receive your name, email address, and profile picture provided by your authentication identity provider.
  • Decision Project Data: Projects, vendor/option candidates, evaluation criteria, weight matrices, and role titles created by decision leaders.
  • Stakeholder Scoring & Feedback: Individual numerical scores, justification notes, and comments entered by review participants. During active blind reviews, individual scores are isolated until revealed in aggregate consensus reporting.
  • Billing Information: Payments and subscription plans are processed securely by Stripe. DecideSync does not store raw credit card numbers on its servers.
  • Technical & Usage Logs: IP addresses, browser types, and timestamp telemetry collected automatically by Cloudflare edge infrastructure to ensure platform security, DDoS mitigation, and service reliability.

3. Google API Services User Data Policy Compliance

DecideSync allows users to authenticate using Google Sign-In. When you authenticate using Google:

  • We request only basic identity scopes (OpenID, Email, Profile) solely to verify your identity and display your authenticated name and email inside your DecideSync workspace.
  • We do not request, access, read, or store your Gmail messages, Google Drive files, Google Calendar, or contacts.
  • Limited Use Statement: DecideSync's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
  • We do not sell personal data, and we do not use or transfer user data obtained from Google APIs for serving advertisements, including retargeting, personalized, or interest-based advertising.

4. How We Use Your Information

  • To provide, operate, and maintain the DecideSync decision scoring engine.
  • To compute consensus radar graphs, confidence metrics, and generate executive decision memos.
  • To send stakeholder scoring invitations and debrief notifications via verified email dispatchers.
  • To process subscriptions, authenticate workspace access, and prevent unauthorized tampering.

5. Data Sharing & Third-Party Processors

We never sell or rent your data to data brokers or advertisers. We share information only with trusted sub-processors essential to operating our infrastructure:

  • Cloudflare: Global Edge hosting, DDoS security, and serverless data storage.
  • Clerk: User authentication, session management, and SSO federation.
  • Stripe: Encrypted payment processing and invoice management.
  • Microsoft 365: Enterprise notification delivery for stakeholder review dispatch.

6. Data Security & Storage

All communications are encrypted in transit using Transport Layer Security (TLS 1.3). Data at rest is stored in encrypted database volumes. Stakeholder review links use cryptographically random tokens to prevent unauthorized link discovery.

7. Your Rights & Data Deletion

Regardless of your jurisdiction, DecideSync provides you with complete control over your data:

  • You may export your projects and decision memos at any time in printable or PDF format.
  • You may request full deletion of your account, projects, and stakeholder records.

To exercise your data privacy rights or request permanent deletion, contact us at support@decidesync.com.

8. Contact Us

If you have any questions about this Privacy Policy or our data governance practices, please reach out to:

DecideSync Privacy Team: support@decidesync.com

Official website: https://decidesync.com