Privacy Policy
Last updated: May 7, 2026
1. Data controller
CERO K S.A.S, Cra 31 # 84-20, Colombia, contact email: info@idecidehub.com.
2. Data we collect
- Account data: name, email, organization, role.
- Usage data: decision processes, alternatives, criteria, weights and votes.
- AI interaction data: prompts sent and responses generated.
- Technical data: IP address, browser type, activity logs.
- Billing data: contracted plan, payment history and transaction identifiers, handled by our payment provider (Wompi). We do not store full card details.
3. Processing purposes
Provide and improve the service; manage accounts and subscriptions; compute consensus decisions; run AI deliberation; ensure security and support; and comply with legal obligations.
4. Legal basis
We process your data based on: performance of the contract to provide you the Service; your consent, when we expressly request it (for example, for marketing communications); our legitimate interest in ensuring security and improving the Platform; and compliance with legal obligations. Processing is governed by Colombia's Law 1581 of 2012 and its implementing regulations; for users located in the European Union, we also rely on the legal bases set out in the GDPR.
5. Use of AI providers and third parties
For expert deliberation we use AI model providers (currently Groq). Data sent to these services is processed under their policies. On the Full plan, the Owner may use their own API key (BYOK): in that case, prompts are processed directly against the provider chosen by the Owner and under that provider's policies. Other processors: hosting and infrastructure (Railway) and payment processing (Wompi).
6. Multi-tenant isolation and security
Each organization's data is logically isolated. We apply role-based access control, encryption in transit (TLS), encryption at rest at our hosting-infrastructure level, and audit logs.
7. Data retention
We retain data while the account is active and for thirty (30) days after its closure or suspension, unless a legal obligation requires longer retention.
8. Your rights
Access, rectification, erasure, objection, restriction and portability. To exercise them, write to info@idecidehub.com. You may also lodge a complaint with the competent data protection authority (in Colombia, the Superintendencia de Industria y Comercio). Users located in other countries may contact the competent data protection authority in their jurisdiction.
9. International transfers
Some of our providers (for example, AI, hosting and payments) may process data outside Colombia, including in the United States. In such cases, the transfer relies on each provider's contracts and privacy policies, under which they commit to applying adequate security measures. You may request more information about these safeguards by writing to info@idecidehub.com.
11. Changes to this policy
We will notify material changes through the Platform or by email.
12. Contact
info@idecidehub.com.