Privacy notice

Who is responsible

DECIXIONIQ (PTY) LTD, trading as DecixionIQ, is the responsible party (data controller) under South Africa's Protection of Personal Information Act (POPIA) for the account and usage information described here. For decision records and documents your organisation stores in DecixionIQ, your organisation decides what is recorded and we process it on its behalf.

What we collect and why

• Account details — name, email address and sign-in credentials: to create and secure your account (performance of our contract).
• Organisation and membership details — organisation name, roles, invitations: to provide the service and control access (contract).
• Content you add — decisions, evidence, documents, meeting summaries and comments: to provide the service, including AI-assisted analysis you request (contract).
• Usage and technical data — IP address, device and browser details, activity and audit logs: for security, fraud prevention and keeping an audit trail (legitimate interests, legal obligations).
• Support messages: to help you (contract, legitimate interests).

Card and payment details are collected and processed by Paddle, not by us.

Who we share it with

• Service providers who host and run DecixionIQ, including cloud hosting and database providers, and the AI model provider (OpenAI) that processes content when you run AI-assisted analysis. They act on our instructions.
• Paddle.com, our Merchant of Record, for the sale of plans, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as lawyers and accountants, where needed.
• Authorities, where the law requires it.

Some providers process information outside South Africa. Where they do, we rely on agreements and safeguards that give protection comparable to POPIA.

How long we keep it

We keep account information while your account is active. Decision, approval and audit records are kept unchanged for as long as your organisation needs them, because governance records must stay traceable; your organisation's retention settings flag records for human review. When information is no longer needed, we delete or anonymise it.

Your rights

You may ask to access, correct or delete your personal information, object to its processing, or withdraw consent where we rely on it. You may also complain to the Information Regulator of South Africa (inforegulator.org.za). We respond to requests within a reasonable time.

For privacy requests, email support@decixioniq.com.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls per organisation and role, and tamper-evident audit history.

Cookies and local storage

We use only what is essential: storage that keeps you signed in and remembers your preferences in the app. We do not use advertising cookies.