Back to Home
D
decision drift

Privacy Policy

Last updated: March 6, 2026

1. Introduction

Decision Drift ("Company," "we," "us," or "our") is committed to protecting the privacy of individuals who visit our website, register for our platform, or otherwise interact with our services. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use the Decision Drift platform ("Service"). By using the Service, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, job title, organization name, and role when you register or are invited to the platform
  • Decision Data: Strategic decision records, execution updates, constraints, tradeoffs, success criteria, and related governance data you submit to the Service
  • Communications: Information you provide when contacting us for support, sales inquiries, or feedback
  • Profile Information: Optional profile details such as profile pictures, authority level, and team assignments

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, timestamps, click patterns, and interactions within the Service
  • Device Information: Browser type, operating system, device identifiers, and screen resolution
  • Log Data: IP addresses, access times, referring URLs, and server log information
  • Analytics Data: Aggregated and anonymized usage metrics to understand how the Service is used

2.3 Information from Third Parties

We may receive information about you from tenant administrators who invite you to the platform, from single sign-on (SSO) identity providers, or from other integrated services as authorized by your organization.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, operate, and maintain the Decision Drift platform, including generating drift analyses, scoring, and governance reports
  • Account Management: To create and manage your account, process invitations, and authenticate your identity
  • AI-Powered Analysis: To process your decision data through our analytical models to produce drift assessments, integrity scores, and recommended actions
  • Communication: To send transactional emails (e.g., review reminders, at-risk notifications), respond to inquiries, and provide customer support
  • Improvement: To analyze usage patterns, diagnose technical issues, and improve the quality, security, and functionality of the Service
  • Compliance: To comply with legal obligations, enforce our Terms and Conditions, and protect the rights and safety of our users

4. AI Processing and Automated Decision-Making

The Service uses artificial intelligence models to analyze execution updates, extract metrics, assess constraint compliance, and generate governance recommendations. This processing is performed on Customer Data submitted by your organization. AI outputs (including drift scores, tier classifications, and narrative summaries) are generated to support human decision-making and are not intended to replace professional judgment. No fully automated decisions with legal or similarly significant effects are made about individuals through the Service.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following limited circumstances:

  • Within Your Organization: Your name, email, role, and activity within the platform are visible to other members of your tenant workspace in accordance with your organization's access controls
  • Service Providers: We engage trusted third-party service providers to assist in operating the Service (e.g., cloud hosting, email delivery, analytics). These providers are contractually obligated to process your data only on our behalf and in accordance with this Privacy Policy
  • AI Model Providers: Decision data may be processed by third-party AI model providers for the purpose of generating analyses. Data sent to AI providers is transmitted securely and is not used to train their general-purpose models
  • Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to the same privacy protections

6. Data Retention

We retain your personal information and Customer Data for as long as your account is active or as needed to provide the Service. Upon account termination, you may request export of your data within thirty (30) days. After this period, we may delete or anonymize your data in accordance with our retention schedule. Certain information may be retained longer where required by law or legitimate business purposes (e.g., audit logs, billing records).

7. Data Security

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS) and at rest, role-based access controls, regular security assessments, and secure software development practices. While we strive to protect your information, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete personal information
  • Deletion: Request deletion of your personal information, subject to legal retention requirements
  • Portability: Request a machine-readable copy of your personal information
  • Objection: Object to processing of your personal information for certain purposes
  • Restriction: Request restriction of processing of your personal information
  • Withdrawal of Consent: Where processing is based on consent, withdraw your consent at any time

To exercise any of these rights, please contact us at privacy@decisiondrift.com. We will respond to your request within thirty (30) days or as required by applicable law. We may require identity verification before processing your request.

9. International Data Transfers

The Service is hosted in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. We take appropriate safeguards to ensure that your information receives an adequate level of protection in accordance with applicable data protection laws, including the use of Standard Contractual Clauses where required.

10. Cookies and Tracking Technologies

We use essential cookies and similar technologies to authenticate sessions, maintain security, and ensure the proper functioning of the Service. We may also use analytics cookies to understand usage patterns and improve the Service. You can manage your cookie preferences through your browser settings. Disabling essential cookies may impair your ability to use the Service.

11. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information promptly.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to request deletion of your personal information, and the right not to be discriminated against for exercising your privacy rights. We do not sell personal information as defined under the CCPA.

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) or equivalent legislation. Our legal bases for processing your personal information include: performance of a contract (providing the Service), legitimate interests (improving the Service, security), compliance with legal obligations, and consent (where applicable). You may exercise your rights by contacting us at privacy@decisiondrift.com.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or email with at least fifteen (15) days' notice prior to the changes taking effect. Your continued use of the Service following the effective date of any changes constitutes acceptance of the updated Privacy Policy.

15. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Decision Drift
Email: privacy@decisiondrift.com

If you are located in the EEA and believe that your privacy rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.