Privacy Policy

1. Overview

DecisionDNA Pte Ltd (“DecisionDNA,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website (decisiondna.io), use our Claude Cowork plugin, access our API, or engage with any of our services (“Services”).

DecisionDNA is incorporated in Singapore and is an affiliate of Chasing The Sun Pte Ltd. We comply with the Singapore Personal Data Protection Act (PDPA) and the EU General Data Protection Regulation (GDPR) where applicable.

2. Information We Collect

Information you provide voluntarily

When you sign up for the alpha, fill out contact forms, request product information, or engage with our Services, we may collect your name, email address, organisation, role, and inquiry details.

Information collected through the plugin and API

When you use the DecisionDNA Claude Cowork plugin or API, the following applies:

• Documents you upload are parsed and processed locally on your device. No document content — no text, no filenames, no company names — is transmitted to our servers.
• An anonymized analytical payload is transmitted to our scoring API. This payload contains only statistical indicators: decision type counts, status distributions, signal scores per dimension, and rhetorical sophistication metrics. The payload is structurally insufficient to reconstruct the original documents or identify the organisation being analysed.
• Each diagnostic session is assigned a unique UUID generated on your device. This UUID is the only identifier associated with the anonymized payload on our servers. No email address, company name, or user identity is stored alongside the diagnostic data unless you explicitly provide it.

Information collected automatically

When you visit our website, we may collect:

• Browser type and version
• IP address (anonymized where possible)
• Pages visited
• Time and date of visit
• Referring website

We use privacy-respecting analytics only.

3. How We Use Your Information

We use collected information to:

• Deliver the Services and respond to your inquiries
• Process and score diagnostic submissions
• Improve our Services and scoring accuracy
• Send communications you have requested (alpha updates, product announcements)
• Comply with legal obligations
• Aggregate anonymized data to improve the research database

We will never sell your personal information. We will never use your document content for any purpose — because we never receive it.

4. Data Processing and Residency

Diagnostic scoring is processed on Google Cloud Platform infrastructure located in Europe (GCP europe-west4, Netherlands). Anonymized analytical payloads do not leave EU jurisdiction during processing.

The website may be hosted on infrastructure located outside the EU (e.g., GitHub Pages, Cloudflare). Website analytics and form submissions may be processed in jurisdictions outside the EU, subject to appropriate safeguards.

5. Data Retention

• Anonymized diagnostic payloads are retained for a maximum of 90 days from the date of submission, after which they are automatically and permanently deleted.
• Contact form submissions and email correspondence are retained for as long as necessary to respond to your inquiry and maintain the business relationship, or until you request deletion.
• Alpha feedback data is retained for the duration of the alpha programme and for a reasonable period afterwards for product development purposes.

6. Data Security

We implement appropriate technical and organisational measures to protect your information, including:

• Encryption in transit (TLS) for all data transmitted to our scoring API
• API access gated through Cloudflare Access
• Identity-blind storage architecture (diagnostic payloads are not linked to user identities)
• Automatic purging of diagnostic data after the retention period

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights

Under GDPR (EEA, UK, or Switzerland)

You have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Request erasure of your personal data (“right to be forgotten”)
• Restrict or object to processing of your personal data
• Data portability
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights with respect to diagnostic data, provide your diagnostic UUID. We will delete all data associated with that UUID.

Under Singapore PDPA

You have the right to access and correct your personal data held by us, and to withdraw consent for the collection, use, or disclosure of your personal data.

For all data subject requests, email boy@decisiondna.io. We will respond within 30 days.

8. Cookies

We use minimal cookies necessary for website functionality. We do not use advertising cookies or third-party tracking cookies.

If we use analytics, we use privacy-respecting services that do not track individual users across websites. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

9. Third-Party Services

The Services may integrate with third-party platforms (e.g., Anthropic’s Claude platform for the Cowork plugin, Google Cloud Platform for scoring). These third parties have their own privacy policies governing their handling of data. We encourage you to review their policies.

We only share the minimum data necessary for the Services to function, and in the case of diagnostic scoring, only anonymized analytical signals are shared.

10. Children’s Privacy

The Services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child, we will take steps to delete it.

11. International Data Transfers

If you are located outside Singapore, your information may be transferred to and processed in Singapore and the European Union. We ensure appropriate safeguards are in place for international transfers in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. We encourage you to review this policy periodically.

13. Data Protection Contact

For any privacy-related questions, concerns, or data subject requests:

Boy WJ Kester
DecisionDNA Pte Ltd
Email: boy@decisiondna.io
Phone: +65 8308 6680

DecisionDNA Pte Ltd  |  Singapore  |  An affiliate of Chasing The Sun Pte Ltd.