Privacy Policy
Who we are
Decided is an application developed and operated by Northcairn Ltd.
What data we collect
When you sign in
Decided uses Microsoft Entra single sign-on. When you sign in, we check your organisation's plan so we can show you the right version of the app.
We do not store your name, email address, or account identifiers when you do this. Your sign-in details are read to complete the check and are not retained.
When you use Decided
We store the content of the decision sessions you create:
- The question, any background context, and any constraints you add
- The options under consideration
- Rankings and votes submitted by participants
- The Decision Record produced at the end, and any exported copy of it
This content is stored under a randomly generated session identifier. It is not linked to your name, email address, or Microsoft account.
If you join a session by link
Some people take part in a decision session by opening a join link, without signing in. If you join this way:
- We do not ask you to sign in, and we do not collect your name, email address, or any account details.
- We store only the ranking you submit, against a randomly generated identifier.
Participants joining by link remain pseudonymous to Decided.
Information stored in your browser
Decided stores a small amount of data in your browser so that sessions work correctly: a marker allowing you to return to a session you have already joined, a code identifying the session, and a token confirming you are the person who created it. These are used only to run the session and for no other purpose.
Service logs
Like any online service, Decided keeps operational logs to keep the app working and diagnose faults. These record events such as when a session was created or joined, along with technical information sent by your browser. They do not contain your name, email address, or Microsoft account identifiers.
How we use your data
- To run the decision sessions you create and let participants take part in them
- To produce the Decision Record at the end of a session
- To check which version of Decided to show you when you sign in
- To keep the service working, secure, and free of faults
We do not sell your data, and we do not use it for advertising or profiling.
AI features
Decided uses Microsoft Azure OpenAI to generate decision record summaries. Session content (question, options, constraints, and voting outcomes) is sent to Azure OpenAI for this purpose. No data is used to train Microsoft's AI models.
Where your data is stored
Your data is stored in Microsoft Azure in the United Kingdom.
Session content sent to Azure OpenAI to generate a Decision Record may be processed in another Microsoft data centre outside the United Kingdom. This processing is covered by Microsoft's standard Data Processing Agreement, which includes appropriate safeguards for international transfers. No content is stored outside the United Kingdom.
How long we keep it
We keep session content and Decision Records for one month, after which they are deleted automatically. Export any record you wish to keep before then.
Because sessions are not linked to your account, we cannot find your sessions from your name or email address. If you want a session deleted sooner, send us the session link or session identifier and we will remove it.
Your rights
Under UK GDPR you have the right to access, correct, or delete your personal data we hold about you.
Most of what Decided stores is not linked to your identity, so in practice this means the content of sessions you can identify to us. Please include the session link or identifier in any request so we can locate the right data. Contact us at contactus@northcairn.com.
Contact
Last updated: 23 July 2026