Privacy Policy
How Decalyst collects, uses, shares, retains, and protects personal data.
[legal-entity-name] and [support-contact-email]. Replace all [placeholder-type] values with approved legal terms before publication.1. Scope
This Privacy Policy explains how [legal-entity-name] handles personal data for Decalyst services.
It applies to website visitors, account holders, workspace users, and support interactions.
2. Data We Collect
- Account and profile data: name, email, organization, login identifiers.
- Billing data: subscription metadata, invoices, payment status (full card details are handled by [payment-processor-name]).
- Service content: prompts, files, tool calls, generated outputs, and related logs.
- Usage data: feature interactions, performance diagnostics, and product telemetry where enabled.
- Security data: authentication events, abuse and fraud signals, and audit logs.
3. How We Use Data
- Provide, secure, and maintain Decalyst services.
- Authenticate users and enforce account or plan limits.
- Process payments, billing, and subscription operations.
- Detect abuse, security incidents, and policy violations.
- Improve product quality when improvement settings are enabled.
- Comply with legal obligations and enforce contractual rights.
4. Sharing and Disclosure
We share data with subprocessors that help us deliver the service, including model providers, cloud infrastructure, analytics tools (if enabled), and payment providers.
Current providers and purposes are listed on the Subprocessors page.
- We do not sell personal information for money.
- We may disclose data when legally required or to protect rights, safety, and service integrity.
5. AI Training and Improvement Controls
By default, product-improvement use of content is controlled by account settings and plan configuration.
If "Help improve Decalyst" or equivalent settings are off, content is not used for product-improvement training workflows except where required for security, abuse prevention, or legal compliance.
6. Retention and Deletion
We retain data only as long as needed for service operation, security, billing, legal obligations, and dispute handling.
Retention schedules and deletion windows are defined in [retention-policy-reference].
7. Your Privacy Rights
Depending on your location, you may have rights to access, correct, delete, export, or restrict certain processing of personal data.
You can submit requests through [privacy-request-form-url] or [privacy-contact-email].
8. International Transfers
Data may be processed in [country-list-for-data-processing].
When required, we use recognized transfer mechanisms such as SCCs or equivalent safeguards.
9. Children and Minors
Decalyst is intended for adults and business users. We do not knowingly permit use by children under 13.
See the Age and Minor Safety Policy for age restrictions and handling.
10. Contact
Privacy contact: [privacy-contact-email]
Data protection officer or representative (if applicable): [dpo-contact-email]
Mailing address: [legal-entity-address]