Privacy Policy

1 Who We Are

DecideIQ is an AI-powered decision intelligence platform developed and operated by Ravion LLC, a company incorporated in the United States. Our platform is available at ravioniq.com/#suite and via our Android mobile application on the Google Play Store.

For the purposes of applicable data protection laws (including GDPR and CCPA), Ravion LLC acts as the data controller for personal data processed through the DecideIQ platform.

2 Data We Collect

We collect the minimum data necessary to provide our services. The following categories describe what we collect and why:

Account & Identity Data

We collect your full name, email address, hashed password, account role (admin or viewer), subscription status, and preferences such as language and time zone. This is used to create and manage your account, authenticate you, and personalize your experience.

Decision & Business Data

We store decision titles, context, strategic options considered, risk assessments, stakeholder names or tags, outcomes, notes, and category metadata. This powers the AI decision log, audit trail, outcome tracking, and weekly intelligence reports.

Meeting & Transcript Data

When you use our meeting integrations, we process transcripts you paste or upload, documents in PDF or DOCX format, and API or OAuth credentials for platforms such as Zoom, Fireflies.ai, Otter.ai, Google Meet, and Microsoft Teams. These credentials are stored securely and used exclusively to retrieve your own transcripts for AI-powered decision extraction.

Usage & Technical Data

We collect app interaction logs, device type, operating system version, IP address, and crash or diagnostic reports. This information is used solely to maintain app performance, diagnose technical issues, and improve the product.

Billing Data

Payment processing is handled entirely by our third-party payment processor. We do not store credit card numbers or full financial details on our servers.

3 How We Use Your Data

4 Data Sharing with Third Parties

The only circumstances in which data may be shared with external parties are:

• AI Processing (OpenAI): Decision content is sent to OpenAI's API solely to perform bias detection and generate insights on your behalf. OpenAI processes this data under strict data processing agreements and does not use your data to train their models by default.
• Payment Processing: Billing information is handled by our payment processor under their own privacy terms. We receive only transaction confirmation.
• Infrastructure Providers: We use cloud hosting providers to store and serve data. These providers operate under data processing agreements and only act on our instructions.
• Legal Requirements: We may disclose data if required by law, court order, or to protect the rights and safety of our users or the public.

5 Meeting & Transcript Data

DecideIQ integrates with Zoom, Microsoft Teams, Google Meet, Fireflies.ai, and Otter.ai to help you automatically capture decisions from meetings.

• API Key Integrations (Zoom, Fireflies, Otter.ai): You provide API credentials that are stored securely in your account settings. These credentials are used exclusively to retrieve your own transcripts and are never shared.
• OAuth Integrations (Google Meet, Microsoft Teams): You authorize DecideIQ via a secure OAuth flow. We request only the minimum permissions necessary to fetch meeting transcripts. You may revoke access at any time from Settings.
• Manually Uploaded Content: Documents and transcripts you upload are processed to extract decisions and are stored in your private account. Only you and your account admins can access this content.

Transcript data is processed through our AI pipeline to extract decisions. Raw transcripts are not permanently stored beyond what is needed to generate your decision log.

6 AI Processing & Bias Detection

DecideIQ uses OpenAI's large language models to provide the following AI-powered features:

• Detection of up to 12 cognitive biases (e.g., Confirmation Bias, Sunk Cost Fallacy, Groupthink, Anchoring Bias)
• Generation of critical questions to challenge assumptions
• Automatic extraction of decisions from meeting transcripts
• Weekly AI intelligence reports with behavioral trend analysis

Data submitted to the AI is used solely to generate outputs for your account. We do not use your decision data to train AI models. AI outputs are presented as decision-support tools and do not replace human judgment.

7 Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• Account data: Retained until account deletion is requested.
• Decision records: Retained for the lifetime of your account for audit and outcome tracking purposes. You may export or delete individual records at any time.
• Transcript data: Processed and converted to decision records. Raw transcripts are not retained beyond 30 days after processing.
• Usage logs: Retained for up to 12 months for performance and security purposes.

Upon account deletion, all personal data is removed from active systems within 30 days, subject to legal retention obligations.

8 Security & Google Play Integrity

We take the security of your strategic decision data seriously. The following measures are in place:

• All data in transit is encrypted using TLS 1.2 or higher.
• Data at rest is encrypted using AES-256 encryption.
• Access to production systems is restricted and monitored.
• API credentials and OAuth tokens are stored using secure secret management.
• Passwords are hashed using industry-standard algorithms (bcrypt).

Despite these measures, no system is 100% secure. We encourage you to use a strong, unique password and enable any available multi-factor authentication options.

9 Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data: the right to access your data, correct inaccurate information, request deletion, export your data in CSV format, withdraw consent, object to or restrict processing, and lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You may also export your decision data at any time via the Decision Audit page (CSV export).

California residents (CCPA): You have the right to know what personal information is collected, request deletion, and opt out of sale (we do not sell personal data).

EU/UK residents (GDPR): You have the right to lodge a complaint with your local supervisory authority if you believe your data rights have been violated.

10 Children's Privacy

DecideIQ is designed for business professionals and executives. Our services are not directed at children under the age of 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at [email protected].

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will:

• Update the "Effective Date" at the top of this page.
• Send an email notification to registered users.
• Display an in-app notification upon next login.

Your continued use of DecideIQ after the effective date of any update constitutes acceptance of the revised policy.