Decision Assurance™ — Privacy Policy

1. Information We Collect

Depending on how you interact with Decision Assurance, we may collect the following categories of information.

Account and Profile Information

When you create or use an account, we may collect information such as your:

• Name
• Email address
• Organization
• Role or title
• Account identifiers
• Authentication and account-status information

Organization and Decision Information

Decision Assurance is designed to help organizations evaluate decisions. Users may therefore provide information concerning:

• Proposed decisions
• Business objectives and context
• Decision sponsors and reviewers
• Alternatives under consideration
• Risks and constraints
• Evidence
• Assumptions
• Contrary evidence
• Professional Skeptic responses
• Hidden gaps and blind spots
• Decision Confidence information
• Executive Decision Records™
• Assurance Drift™ review information
• Other information relevant to a Decision Case

This information may become part of an organization's Decision Capital™ when a completed review is preserved as a Decision Asset™.

Supporting Documents

Users may upload supporting documents to Decision Cases.

These documents may contain confidential or proprietary organizational information. Uploaded documents are stored in private storage and associated with the applicable organization and Decision Case.

Users are responsible for ensuring they have appropriate authority to upload documents and other information to Decision Assurance.

Payment Information

Payments and subscriptions are processed through our payment provider, Stripe.

Decision Assurance does not need to store your complete payment-card number in order to provide the Service. Stripe may collect and process payment information, billing information, transaction details, payment-method information, and related fraud-prevention information according to its own privacy practices.

We may receive information from Stripe concerning your subscription and transaction status, such as your plan, payment status, billing period, customer or subscription identifiers, and related information necessary to administer your Decision Assurance subscription.

Technical and Usage Information

When you use Decision Assurance or our website, we or our service providers may automatically collect certain technical information, such as:

• Browser and device information
• IP address
• Login and authentication events
• Application interactions
• Error and diagnostic information
• Security-related events
• Date and time of access
• General usage information necessary to operate, secure, and improve the Service

We may also use cookies or similar technologies where necessary for authentication, security, preferences, analytics, or operation of the Service.

2. How We Use Information

We may use information to:

• Provide and operate Decision Assurance
• Authenticate users
• Maintain organizational accounts
• Create and maintain Decision Cases
• Preserve completed Decision Assets
• Provide Decision Capital functionality
• Generate or display Decision Assurance results
• Maintain subscription and Decision Case capacity
• Process and reconcile subscription status
• Provide supporting-document functionality
• Maintain security and tenant isolation
• Prevent fraud, misuse, and unauthorized access
• Troubleshoot technical issues
• Provide customer support
• Communicate service-related information
• Maintain and improve the Service
• Comply with legal obligations
• Enforce our Terms of Service
• Protect Decision Assurance, our customers, and others

We do not acquire ownership of an organization's underlying business information merely because it is processed through Decision Assurance.

3. Decision Analysis and Customer Information

Information entered into a Decision Case is processed for purposes of providing the Decision Assurance service.

The platform may use submitted information to structure, evaluate, synthesize, or display information relating to evidence, assumptions, gaps, confidence, conditions, or other elements of a Decision Case.

Decision Assurance results depend substantially upon the information made available to the Service. Users remain responsible for the accuracy, completeness, appropriateness, and authorization of information they provide.

Uploading or entering information does not automatically establish that the information is verified or accurate.

4. How We Share Information

We do not sell customer Decision Cases or Decision Assets to third parties.

We may disclose information to service providers that assist us in operating Decision Assurance, such as providers of:

• Cloud hosting and application infrastructure
• Database and storage services
• Authentication
• Payment processing
• Email and communications
• Security and fraud prevention
• Technical monitoring and diagnostics
• Customer support
• Analytics, where implemented

These providers may process information only as necessary to perform services for us, subject to applicable contractual and legal requirements.

We may also disclose information where reasonably necessary to:

• Comply with applicable law or legal process
• Respond to lawful government requests
• Protect the rights, property, or safety of Decision Assurance, our users, or others
• Investigate fraud, abuse, or security incidents
• Enforce our agreements
• Complete a merger, acquisition, financing, reorganization, or sale of all or part of our business, subject to appropriate protections

5. Stripe and Payment Processing

Decision Assurance uses Stripe for payment and subscription processing.

Payment information provided during checkout is processed by Stripe. Stripe's handling of that information is governed by its own privacy terms and policies.

Decision Assurance receives only the payment and subscription information reasonably necessary to manage your account, subscription status, billing period, and Decision Case capacity.

6. Organizational Accounts and Tenant Isolation

Decision Assurance is designed to separate information belonging to different organizations.

Access controls are used to restrict organizational information—including Decision Cases, supporting documents, and completed Decision Assets—to authorized contexts.

Users must not attempt to access information belonging to another organization.

Organizations are responsible for determining which individuals they authorize to access their Decision Assurance account.

7. Completed Decision Assets and Historical Integrity

Completed Executive Decision Records may be preserved as Decision Assets within an organization's Decision Capital.

Because these records are intended to preserve the historical state of a decision review, completed Decision Assets may be made read-only and protected against ordinary modification or deletion.

Later Assurance Drift reviews or subsequent developments do not automatically rewrite the historical Decision Asset.

8. Data Security

We use administrative, technical, and organizational safeguards intended to protect information against unauthorized access, disclosure, alteration, loss, or misuse.

These safeguards may include authentication controls, organization-based access restrictions, private document storage, database access controls, environment separation, and other application and infrastructure security measures.

However, no electronic system, internet transmission, or storage technology can guarantee absolute security.

Users are responsible for protecting their account credentials and devices and should promptly contact us if they believe their account has been compromised.

9. Data Retention

We retain information for as long as reasonably necessary to:

• Provide the Service
• Maintain customer accounts
• Preserve organizational Decision Capital
• Meet contractual obligations
• Maintain security and fraud-prevention records
• Resolve disputes
• Enforce agreements
• Comply with legal, accounting, tax, or regulatory obligations

Because completed Decision Assets are designed to serve as durable organizational records, their retention may differ from temporary or incomplete Decision Case information.

Retention periods may also depend on account status, contractual requirements, legal obligations, technical requirements, and customer requests.

10. Account Cancellation and Decision Capital

Canceling a paid subscription does not automatically mean that previously completed Decision Assets will become inaccessible.

Decision Assurance is designed so that organizations are not required to continue purchasing new Decision Case capacity merely to access completed Decision Assets they have already created, subject to reasonable account, security, retention, legal, technical, and service-continuity requirements.

Certain active functionality, including creation of additional Decision Cases, may require an active subscription.

11. Data Deletion and Access Requests

Subject to applicable law and legitimate business, contractual, security, and record-retention requirements, users may contact us to request access to, correction of, or deletion of certain personal information associated with their account.

Organizational Decision Case information may belong to or be controlled by the applicable organization. Where appropriate, individual users may need to direct requests concerning organizational content to their organization.

Some information may need to be retained where required by law, necessary for security or fraud prevention, required to resolve disputes, or necessary to preserve legitimate organizational records.

Requests may be sent to support@getdecisionassurance.com.

12. Cookies and Similar Technologies

Decision Assurance and getdecisionassurance.com may use cookies or similar technologies necessary for functions such as:

• Authentication
• Account security
• Session management
• User preferences
• Payment functionality
• Application performance
• Analytics, if implemented

Where legally required, we will provide appropriate notice or choices regarding non-essential cookies.

13. Children's Privacy

Decision Assurance is a business and organizational decision-support service and is not intended for children under 13.

We do not knowingly solicit personal information from children under 13 through the Service.

14. International Users

Decision Assurance is operated from the United States.

If you access the Service from another country, your information may be processed in the United States or other jurisdictions where our service providers operate.

Where required, we will use appropriate safeguards for international transfers of personal information.

15. State and Other Privacy Rights

Depending on where you reside, applicable privacy laws may provide rights concerning your personal information, potentially including rights to access, correct, delete, obtain a copy of, or restrict certain processing of personal information.

These rights are subject to applicable exceptions and verification requirements.

Decision Assurance will respond to valid privacy requests as required by applicable law.

16. Changes to This Privacy Policy

We may update this Privacy Policy as Decision Assurance evolves or as legal, operational, security, or regulatory requirements change.

The updated policy will identify its effective or last-updated date.

Where required by law, we will provide additional notice of material changes.

17. Contact Us

Questions or requests concerning privacy may be directed to: