Privacy
Last updated 9 November 2026
Short version: what you type into the playground is not stored. The open models you download from Hugging Face run on your own machine and send us nothing.
Playground and hosted API
- Your inputs (the document, questions and answers) are processed in memory to compute the answer and then discarded. We do not store them, log them, or use them to train models.
- Request metadata is kept for up to 30 days to run and protect the service: time, status, latency, model, request sizes and number of questions, country, and network data our providers record (such as IP address).
- Abuse protection: Cloudflare Turnstile checks that requests come from a person. After the check passes, our
server sets one short-lived, strictly necessary session cookie (
__Host-dps, 30 minutes) on getdecido.ai. We set no advertising or analytics cookies; Turnstile runs in a Cloudflare frame under Cloudflare's own privacy policy. - Rate limits: to enforce fair-use limits we keep counters keyed by your IP address (for IPv6, its /64 network), by the random session id, and (for new API keys) by your wider network (IPv4 /24 or IPv6 /48) for about 2 days, then delete them. While you wait in the playground's line, your place is held in memory with the same IP key for at most a minute after your page stops asking.
- Usage statistics: we keep daily totals only: how many answers, sign-ins, new keys and waiting-line visits there were each day, and how many distinct visitors (a number, not who), for up to 400 days. They contain no IP addresses, emails, keys, account ids or inputs.
- Accounts (for API keys): you sign in with Google. We keep which provider you used, its user id for
you, your verified email address, and when the account was created
and last used. We use this to give each person one account and one key, to enforce the limits, and to contact you about the service if
needed. We ask the provider only for your email address (scopes
openid email), do not keep its access tokens, and do not receive your password. Google learns that you signed in to Decido, under its own privacy policy. Signing in sets a strictly necessary session cookie (__Host-dsess, 30 days) and, during sign-in only, a 10-minute cookie (__Host-doauth). You can delete your account at any time on the playground: the account, its keys and sessions are deleted right away (rate-limit counters expire within about 2 days). Accounts unused for 12 months are deleted automatically. Legal basis: providing the service you asked for, and our legitimate interest in preventing abuse. - API keys: a key is shown once and we store only its SHA-256 hash, never the key itself. With it we keep a short
display prefix (e.g.
dk_abcdefgh), your optional label, the account it belongs to, and when it was created and last used. Replaced or revoked keys stop working at once; keys unused for 90 days are deleted. Keys created before sign-in existed also kept the IP address they were created from (IPv6: its /64 network); they stop working on 23 November 2026 and are deleted 30 days later. API requests are handled like playground requests: inputs are not stored; request metadata (including the key prefix) is kept up to 30 days. - Processors: Cloudflare (website, edge, Turnstile, account data) and Google Cloud (model servers, us-central1); Google also for sign-in. Data may be processed in the United States.
- Please do not paste personal, confidential or regulated data into the public playground. For sensitive data, run
Decido locally (
pip install decido-ai); then nothing leaves your machine.
Local use
The decido-ai package downloads model files from Hugging Face (subject to Hugging Face's privacy policy) and
then runs offline. It contains no telemetry.
If you write to us, we keep the correspondence to reply and follow up. Ask us any time to delete it.
Contact
founders@getdecido.ai for questions, access or deletion requests.