Privacy Policy
Who we are
Decided is an application developed and operated by Northcairn Ltd.
What data we collect
When you sign in
Decided Pro uses Microsoft Entra single sign-on. The Taster does not require you to sign in.
When you sign in to Decided Pro, we read your name, email address or username, Microsoft Entra object ID, and organisation tenant ID. We use these details to check your organisation's plan, give you access to its decision log, and identify the decisions you facilitate.
We retain the facilitator's name and Entra object ID on each Pro decision. The name is shown on the decision. If someone edits a decision record, we also retain that person's name and Entra object ID with the edit time. The organisation's tenant record retains its tenant ID, plan, subscription status, and retention deadline. Its workspace retains the Entra object ID of the person who first creates it, and its initial name may be based on that person's display name.
Your name, email address or username, Entra object ID, tenant ID, and workspace details are also stored in your browser while you use Decided Pro. The email address or username read at sign-in is not retained in the Pro database as part of your sign-in profile.
When your organisation subscribes
Microsoft sends us subscription details so we can provide and manage Decided Pro. We retain the organisation tenant ID, subscription and plan details, and the subscription lifecycle messages received from Microsoft. Those messages may include purchaser or beneficiary account identifiers and an email address supplied by Microsoft.
When you use Decided
We store the content of the decision sessions you create:
- The question, any background context, and any constraints you add
- The options under consideration
- Rankings and votes submitted by participants
- The Decision Record produced at the end, and any exported copy of it
In the Taster, this content is stored under a randomly generated session identifier. It is not linked to your name, email address, or Microsoft account.
In Decided Pro, session content and decision records are stored for your organisation. A decision is linked to the organisation's tenant ID and to the facilitator's name and Entra object ID. This lets signed-in users see their organisation's shared decision log and lets Decided identify the facilitator. Decisions marked private can be opened only by their facilitator.
If you join a session by link
Some people take part in a decision session by opening a join link, without signing in. If you join this way:
- We do not ask you to sign in, and we do not collect your name, email address, or any account details.
- We store only the ranking you submit, against a randomly generated identifier.
Participants joining by link remain pseudonymous to Decided.
Information stored in your browser
Decided stores a small amount of data in your browser so that sessions work correctly: a marker allowing you to return to a session you have already joined, a code identifying the session, and a token confirming you are the person who created it. These are used only to run the session and for no other purpose.
For Decided Pro, the browser also stores the signed-in identity and workspace details described above so that you remain signed in.
Service logs
Like any online service, Decided keeps operational logs to keep the app working and diagnose faults. These record events such as when a session was created or joined, along with technical information sent by your browser. Taster session logs use random session and participant identifiers rather than your name, email address, or Microsoft account identifiers. Pro logs may include organisation tenant IDs, Entra object IDs, decision IDs, session IDs, subscription IDs, and operation IDs. Routine application logs do not intentionally include your name or email address.
How we use your data
- To run the decision sessions you create and let participants take part in them
- To produce the decision record at the end of a session
- To check which version of Decided to show you when you sign in
- For Decided Pro, to provide your organisation's decision log and manage its subscription
- To keep the service working, secure, and free of faults
We do not sell your data, and we do not use it for advertising or profiling.
AI features
Decided uses Microsoft Azure OpenAI to generate decision record summaries. Session content (question, options, constraints, and voting outcomes) is sent to Azure OpenAI for this purpose. No data is used to train Microsoft's AI models.
Where your data is stored
Your data is stored in Microsoft Azure in the United Kingdom.
Session content sent to Azure OpenAI to generate a Decision Record may be processed in another Microsoft data centre outside the United Kingdom. This processing is covered by Microsoft's standard Data Processing Agreement, which includes appropriate safeguards for international transfers. No content is stored outside the United Kingdom.
How long we keep it
In the Taster, we keep session content and decision records for one month, after which they are deleted automatically. Export any record you wish to keep before then.
Because Taster sessions are not linked to your account, we cannot find your sessions from your name or email address. If you want a Taster session deleted sooner, send us the session link or session identifier and we will remove it.
Decided Pro decision records persist in your organisation's decision log while its subscription is active. If the subscription ends, your organisation's decision records will be kept for 12 months. Resubscribe to restore access to them. Export is not available while the subscription is ended.
Pro records are due to be deleted after that 12-month period. Decided records the deletion deadline, but the process that deletes records when the deadline passes is not yet implemented.
Your rights
Under UK GDPR you have the right to access, correct, or delete your personal data we hold about you.
For the Taster, sessions are not linked to your identity. Please include the session link or identifier in any request so we can locate the right data.
For Decided Pro, we can use your signed-in tenant ID and Entra object ID to locate your organisation's data and decisions attributed to you. Tell us which organisation and records your request concerns. Contact us at contactus@northcairn.com.
Contact
Last updated: 30 August 2026