Privacy Policy

What We Collect

• Account data such as your email address and basic profile details.
• Workspace content you create, including sandboxes, graph versions, assumptions, constraints, and node notes.
• Subscription and billing metadata (for example plan and status). Full payment details are processed by Stripe.
• Basic service logs needed for security, troubleshooting, and abuse prevention.
• AI feature requests and related context needed to generate responses.

How We Use Data

• To authenticate your account and provide access to your workspace.
• To save, sync, and restore your sandbox and graph history.
• To enforce account limits and plan entitlements.
• To generate AI-assisted outputs you request.
• To improve reliability, usability, safety, and abuse prevention.

AI Data Handling

We do not use your content to train our own AI models.

When you use AI features, relevant prompt and workspace context is sent to OpenAI to generate output. Third-party AI providers may retain or process data according to their own terms, policies, and account-level settings.

Sharing and Processors

We do not sell your personal data. We share data with service providers only as needed to operate the product:

• Supabase for authentication and database hosting.
• Stripe for billing and subscription management.
• OpenAI for AI generation APIs used by app features.

Data Retention and Security

We retain account and workspace data while your account is active and for a limited period afterward where required for legal, security, backup, or dispute-resolution purposes. We use reasonable administrative and technical safeguards, but no system can be guaranteed 100% secure.

Your Rights and Choices

• You can update sandbox content and profile information from your account.
• You can delete sandboxes directly in the app.
• You can request account deletion by contacting us.
• Where applicable, you may request access, correction, deletion, portability, or objection to processing.
• You may request information about categories of data shared and processors used for your account.

International Transfers and Children

Your information may be processed in countries other than your own. Decision Lens is not directed to children under 13, and we do not knowingly collect personal data from children under 13.

Policy Changes

We may update this policy from time to time. If changes are material, we will post an updated date and provide notice where required by law.

Contact

For privacy questions or requests, contact: privacy@decisionlensapp.com