Get Your Free Snapshot

Legal

Privacy Policy

Effective date: August 3, 2026 · Last updated: September 17, 2026

1. Overview

This Privacy Policy explains how DECODX ("DECODX," "we," "us") collects, uses, discloses, and protects information in connection with our website (decodx.app) and the DECODX Behavioral Intelligence Platform, including the Design Partner Program (together, the "Services"). It applies to visitors to our site and to individuals whose data is processed through the Services on behalf of a Design Partner or customer ("Customer").

DECODX processes two distinct categories of data, described separately below because they carry different obligations: (a) information about people who visit our website or apply to the Design Partner Program, and (b) recorded conversation data that a Customer submits to the Services for analysis. For the second category, DECODX generally acts as a data processor / service provider on the Customer's behalf, and the Customer's own privacy notices and consent obligations govern collection from the individuals in those conversations.

2. Information we collect directly from you

When you visit decodx.app, apply through our Design Partner Application, or otherwise contact us, we may collect:

  • Contact and business information you submit, such as name, work email, company, role, team size, and the content of your application or message.
  • Usage and device data collected automatically, such as pages visited, referring pages, browser and device type, and approximate location derived from IP address, via Google Analytics (Google tag / gtag.js), the Meta Pixel, and HubSpot's tracking code. See section 9.
  • Correspondence you send us, including application follow-ups and support requests.

3. Recorded conversation data processed on behalf of Customers

The Services are designed to ingest recorded sales conversations and related structured data (such as CRM fields) that a Customer submits for behavioral analysis. This data is processed under tenant-isolated storage and role-based access controls, and is used solely to provide the Behavioral Intelligence Assessment, the Sales Intelligence Workspace, and related outputs to that Customer.

DECODX does not use one Customer's conversation data to train models or generate conclusions about another Customer's people or organization. Customers are responsible for obtaining any consents or notices required by applicable law (including recording-consent and wiretap laws) before submitting recorded conversations to DECODX, and for ensuring they have the right to share that data with us.

4. How we use information

  • To operate, maintain, and improve the Services, including generating behavioral scores, predictions, and recommendations.
  • To evaluate and respond to Design Partner applications.
  • To communicate with you about your application, engagement, or account.
  • To monitor, secure, and troubleshoot the Services, including detecting misuse.
  • To understand aggregate site usage and improve our website and product.
  • To measure and improve our advertising, including letting Meta know when someone who saw one of our ads requests a 10-Call Snapshot.
  • To comply with legal obligations.

DECODX does not sell personal information for money, and does not share recorded conversation data with third parties for their own marketing purposes. Our use of advertising tools (the Meta Pixel and the Meta Conversions API) may count as "selling" or "sharing" personal information for cross-context behavioral advertising under some US state privacy laws. You can opt out of this at any time, as described in section 9.

5. How we share information

We share information only as needed to operate the Services: with infrastructure and sub-processors who host or process data on our behalf (such as our cloud hosting provider), under contractual confidentiality and security obligations; with analytics and advertising providers (Google Analytics, Meta, and HubSpot) as described in section 9; and where required by law, regulation, legal process, or to protect the rights, property, or safety of DECODX, our Customers, or others.

6. Data retention and deletion

We retain application and site-visitor information for as long as reasonably necessary to evaluate applications, operate the Services, and meet legal or accounting obligations, after which it is deleted or anonymized. Retention and deletion periods for recorded conversation data are defined in the applicable Customer agreement and are governed by the retention and deletion policy referenced in that agreement. You may request deletion of your own application or contact information at any time by emailing us at the address below.

7. Security

We use tenant isolation, role-based access controls, encryption in transit, and access auditing to protect data processed through the Services. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information, or to object to or restrict certain processing. To exercise any of these rights, contact us at the email address below. If your data was submitted to us by a Customer as part of recorded conversation data, we will direct your request to that Customer where they are the party responsible for that data.

9. Cookies, analytics, advertising, and your privacy choices

Our website uses Google Analytics to understand aggregate traffic, the Meta Pixel to measure how our Facebook and Instagram ads perform, and HubSpot's tracking code to connect a form submission to the visit that led to it. When you request a 10-Call Snapshot, our servers also send Meta a record of that request through the Meta Conversions API. The record includes your email address, your name, and a DECODX lead ID in hashed (SHA-256) form, your IP address, your browser type, the page address, and Meta's cookie identifiers, so Meta can match the request to an ad.

These tools are on by default. You can opt out at any time: select Your privacy choices (also linked in the site footer) and choose "Do not sell or share my info." After you opt out, this site stops loading Google Analytics and the Meta Pixel in that browser, asks HubSpot's tracking code to stop tracking you, and stops sending the Conversions API record for your future requests. We treat a Global Privacy Control (GPC) signal from your browser as the same opt-out. Your choice is stored in your browser, so it applies to that browser only; if you clear your browser storage or use another device, you will need to opt out again.

You can also control cookies through your browser settings, and can opt out of Google Analytics using Google's provided opt-out tools.

10. International data transfers

DECODX may process and store information in the United States and other countries where our hosting and sub-processors operate. Where required, we rely on appropriate safeguards for such transfers.

11. Children's privacy

The Services are intended for business use by adults and are not directed to children. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.

13. Contact us

Questions about this Privacy Policy or requests regarding your information can be sent to hello@decodx.app.

This page is also referenced from our Responsible AI overview, which describes the governance principles behind how DECODX handles behavioral data at a product level.