Privacy policy

Last updated 26 October 2026

Draft, not in effect: this text is waiting for legal review.

Who we are

Decision Cartography is run by [company name, registered address: placeholder]. Questions about this policy or your data: [contact email: placeholder].

What we collect

Your account. When you sign in with Google we receive your Google account ID, email address, name and, for a Google Workspace account, your company’s domain.

Your decisions. When you correct an AI assistant connected to Decision Cartography, it saves a decision: a title, what to do, when it applies, why, an optional example, and a quote of your words. We keep every version of each decision, which assistant saved it and when, and what happened to it (merged, replaced, retired, restored, confirmed or rejected).

Tasks. Before a task, your assistant sends a short description of what it is about to do, and sometimes its plan, so we can return the decisions that apply. We don’t store tasks, except a 10% sample kept for 30 days to check the quality of our answers. We never receive the documents, emails or conversations you work on.

Usage records. One record per request: which tool was used, by which assistant, how long it took and which decisions came back. These records contain no task or decision text.

Sign-in records. Hashed sign-in tokens for each connected assistant, the name each assistant registers with (for the command line, your computer’s name), and a session for the web app.

How we use it

To run the service: to return your decisions to your assistants, recognise repeated and replaced decisions, and show you your decisions. To check and improve the quality of our answers, using the 30-day task sample. To keep the service secure and within its usage limits. We don’t sell your data, show ads, or use your decisions to train AI models.

Who processes it

Company What it receives Why
Neon Everything, stored in its database (United States) Storage
Fly.io Everything, while the service runs (United States) Hosting
TypeSafe Task descriptions and the text of decisions Choosing which decisions apply; spotting repeats
Voyage AI The text of decisions and task descriptions Search by meaning
OpenRouter and Anthropic Task descriptions and the text of decisions A second check when needed, and quality sampling
Google Nothing of your decisions or tasks Sign-in

[Placeholder: each processor’s retention and training terms, and our data processing agreements with them.]

Teams

If you sign in with a work account whose company has a team on Decision Cartography, you join that team. The team’s admins can read the decisions you save with that account, and those decisions stay with the team if you leave or delete your account, with your email shown as who saved them. You are told this before you join. Admins cannot see your tasks or anything saved with a personal account.

[Placeholder: whether the company or Decision Cartography is the controller of work decisions.]

How long we keep it

Data Kept
Your account and decisions Until you delete them
Task sample 30 days
Usage records 12 months
The text of a save, after it is processed 30 days
Expired sign-in records 7 days after they expire
Web app sessions 30 days, or until you sign out
Registrations of assistants no longer used 90 days

Your rights

You can see every decision on your rules page, export everything you saved, and delete your account, from your assistant, the command line or the web app. Deletion removes your account, sign-ins and personal decisions immediately and for good. For anything else, including requests about decisions held by a team, contact us at the address above. [Placeholder: response time for requests by email, and your rights under GDPR and other laws.]

What deletion can’t reach straight away

Our database host keeps a restore window of [placeholder: the window on our plan], our hosting logs keep request records (without decision or task text) for 7 days, and our processors keep requests for as long as their own terms allow.

Cookies

The web app at mcp.decisioncartography.com uses one cookie to keep you signed in. This website uses no cookies and no analytics.

Changes

We’ll post changes here and update the date at the top. [Placeholder: how we notify users of material changes.]