Privacy Policy

Last Updated: January 25, 2026

This Privacy Policy explains how DecodeKit collects, uses, discloses, and otherwise processes information in connection with DecodeKit's websites, applications, and services (collectively, the "Service").

1.Information We Collect

Information You Provide

  • Account information (such as name, email, organization name)
  • Payment information (if you subscribe), processed by third-party payment providers
  • User Content, including forwarded emails, attachments, prompts, rules, instructions, workflows, and outputs
  • Support communications, feedback, and other communications you send to us

Information From Connected Services

If you connect third-party services, we may access or receive information necessary to perform Actions, including file identifiers, record identifiers, permissions/scopes, and data you direct us to read or write.

Automatically Collected Information

  • Usage data (feature usage, timestamps, logs, error reports, performance data)
  • Device and network data (IP address, browser type, device identifiers)
  • Cookies and similar technologies (primarily for authentication, security, analytics, and site functionality)

2.How We Use Information

We may use information for lawful purposes related to operating, maintaining, improving, and protecting the Service, including to:

  • Provide, operate, maintain, and secure the Service
  • Process User Content and perform Actions you request or configure
  • Authenticate users and administer accounts
  • Process billing and subscriptions
  • Provide customer support and communicate with you
  • Monitor, prevent, detect, and address fraud, abuse, security incidents, and technical issues
  • Analyze usage and improve performance, reliability, and user experience
  • Develop, enhance, and improve features, products, and services, including as described in the AI and model section below

3.AI, Model Use, & Training

DecodeKit uses automated systems, which may include machine learning and other AI techniques, to process User Content and generate outputs.

We may also use User Content (including emails, attachments, prompts, and outputs) to develop, train, fine-tune, evaluate, and improve models and automated systems used by or offered within the Service. This may include improving extraction accuracy, classification, routing, summarization, and action execution, as well as quality assurance, debugging, testing, analytics, and research and development.

We may process User Content for these purposes in identifiable form and/or in de-identified or aggregated form, and we may engage third-party service providers to support these activities. We may offer settings or controls related to certain uses; availability and details may change over time.

4.How We Disclose Information

We may disclose information:

  • To vendors and service providers who help us operate the Service (for example, hosting, databases, logging, analytics, customer support, billing, and AI/model infrastructure)
  • To connected third-party services at your direction when you configure Actions or integrations
  • For legal and safety reasons to comply with law, enforce our terms, or protect rights, safety, and integrity
  • In business transfers such as a merger, acquisition, financing, reorganization, or sale of assets

5.Data Retention

We retain information for as long as we determine is necessary or useful for providing, maintaining, securing, and improving the Service; supporting model and system development and performance; complying with legal obligations; resolving disputes; and enforcing agreements.

Retention periods may vary depending on the type of information, how it is used, and operational or legal considerations. We may delete information at our discretion, and we may retain certain information even after account cancellation or deletion where necessary for legitimate purposes.

6.Tokens, Credentials, & Authorization

If you connect third-party services, we may store authorization credentials (such as OAuth tokens) to maintain the integration and perform Actions you request. We may change how we store, use, refresh, or require reauthorization for such credentials over time. You can typically revoke access through the third-party service or your account settings (where available), which may prevent the Service from completing Actions.

7.Security

We use reasonable safeguards designed to protect information. No security measures are perfect, and we cannot guarantee absolute security.

8.Your Choices & Rights

Depending on your location, you may have rights under applicable law to request access, correction, deletion, or other actions related to your personal information. To submit a request, contact [email protected]. We may need to verify your identity before responding.

9.International Use

DecodeKit operates globally. Your information may be processed in countries other than your own, which may have different data protection laws.

10.Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version and update the "Last Updated" date. Continued use of the Service after changes become effective constitutes acceptance where permitted by law.

11.Contact

Privacy questions or requests: [email protected]