Legal
Privacy Policy
Last updated: [CUSTOMISE: e.g. 1 July 2026]
1. Who we are
Halbon Labs Ltd ("Decidia", "we", "us", "our") is the data controller for personal data collected through the Decidia service. Registered address: [CUSTOMISE: registered address]. We are registered with the UK Information Commissioner's Office (ICO) under reference [CUSTOMISE: ICO registration number].
2. What we collect
We collect information you provide directly (name, email, workspace content, decision session data) and information collected automatically (IP address, browser type, usage events, authentication logs). Payment processing is handled by a third-party provider — we do not store card numbers. [CUSTOMISE: list any additional data types specific to your implementation.]
3. How we use your information
We use your data to: provide and improve the Decidia service; send transactional emails (account, billing); comply with legal obligations; prevent fraud and abuse. We do not sell your personal data. We do not use your decision session content to train AI models without your explicit consent. [CUSTOMISE: confirm model provider data-processing terms and add specifics.]
4. AI-specific data practices
Decision session content (prompts, agent outputs, transcripts) is processed by AI model providers under data-processing agreements that prohibit training on customer data. Inference logs are retained for 30 days for abuse prevention, then permanently deleted. [CUSTOMISE: list specific model providers and link to their DPAs.]
6. Retention
Account data is retained for the life of your account plus 30 days after deletion. Billing records are retained for 7 years for accounting purposes. Inference logs are retained for 30 days. [CUSTOMISE: confirm retention periods with your legal/compliance team.]
7. Your rights
Under UK GDPR and, where applicable, EU GDPR and US state privacy laws (CCPA/CPRA), you have the right to: access, correct, or delete your personal data; restrict or object to processing; data portability; withdraw consent at any time. To exercise these rights, email privacy@decidia.app. We will respond within 30 days. You have the right to lodge a complaint with the ICO (ico.org.uk) or your local supervisory authority.
9. Changes to this policy
We will notify you of material changes by email or in-app notification at least 30 days before they take effect. The date at the top of this page indicates when the policy was last updated.
10. Contact
For privacy enquiries, contact our privacy team at privacy@decidia.app or by post to: Halbon Labs Ltd, [CUSTOMISE: registered address].