Privacy, without ambiguity.

Decionis, Inc. operates Sense. For account, website, security, support, and relationship data, Decionis determines why and how the data is processed. For content placed in a customer-managed workspace, Decionis generally processes that data on the customer's instructions as a service provider or processor.

This policy covers information submitted directly to Sense and information Sense is permitted to read from an optional connection. It does not govern the privacy practices of Google, Microsoft, Notion, Slack, Atlassian, or another third-party service you choose to connect.

Account and workspace data

We process identifiers such as user, organization, workspace, device, and session IDs; account contact details when provided; membership and authorization scopes; connector status; and operational audit metadata.

Work submitted for judgment

When you request a review, Sense processes the draft, excerpt, goal, rule, decision, or other artifact needed to produce the requested verdict. The deterministic contradiction path does not send that artifact to an external large-language-model provider.

Derived evidence

Sense creates content hashes, extracted claims, verdicts, contradiction findings, evidence summaries, work items, decision receipts, ledger records, verification records, and related activity metadata. If you save or share a result, these derived records are associated with your workspace.

Connector and technical data

With your authorization, Sense processes the source identifiers, metadata, and limited content needed for the connected feature. We may also process request, browser, device, IP, diagnostic, and security-log data needed to operate, protect, and troubleshoot the service. Support messages are processed when you contact us.

• Provide deterministic reviews, findings, and decision memory.
• Authenticate sessions, enforce workspace permissions, and maintain organization separation.
• Synchronize only the sources and scopes you have authorized.
• Save, seal, verify, export, or share records when you request those actions.
• Secure the service, prevent abuse, diagnose failures, and maintain reliability.
• Provide support, administer customer relationships, and meet legal obligations.

Sense keeps account and workspace records for as long as the account or customer relationship is active and as needed to provide the selected features. Derived decision and ledger records may remain until an authorized user deletes them or the applicable workspace retention rule removes them. Temporary and guest data is retained only as needed for the session, product continuity, security, and applicable retention controls.

Disconnecting a connector prevents future synchronization but does not automatically erase derived records previously created in the workspace. OAuth tokens are revoked, deleted, or made unusable when the connection or service no longer requires them. Security, billing, and legal records may be retained where law or legitimate operational requirements require it.

For Sense for Jira & Confluence, an authenticated Forge pre-uninstall event immediately revokes or disables credentials bound to the Atlassian cloud site and schedules connector records and Atlassian-derived events, work items, memory, and sessions for deletion within 30 days. A verified reinstall during that window cancels the scheduled deletion. Unrelated Sense projects, ledgers, devices, and other connector data are not removed by an Atlassian uninstall. See the Customer DPA for the contractual terms.

We do not sell or rent personal data, share it with data brokers, or use Sense content for cross-context behavioral advertising. We disclose data only to service providers that help us operate hosting, security, communications, support, and related business functions; to a customer workspace's authorized users; when you direct us to share it; or when required for law, safety, rights protection, or a corporate transaction.

Sense may process data in countries other than the one where you live. Where required, Decionis uses contractual and organizational safeguards for international transfers.

Sense uses safeguards designed for the sensitivity of the data, including HTTPS/TLS in transit, encrypted credential storage, least-privilege authorization, tenant-aware access controls, secret redaction, content hashing, and security logging. No service can guarantee absolute security, so we also monitor and improve these controls as the product evolves.

If you believe you have found a security issue, contact security@decionis.com and do not include live credentials or sensitive customer data in the initial report.

• Use the first-review flow without creating an account.
• Choose which connectors to authorize, disconnect them in Sense, and revoke access with the source provider.
• Disable or remove the browser extension and clear its local storage through your browser.
• Revoke public share links you are authorized to manage.
• Request access, correction, export, restriction, objection, or deletion where applicable law provides those rights.

We may need to verify your identity and authority over the relevant workspace before completing a request. You may also have the right to complain to your local data-protection authority. Sense is a business productivity service and is not directed to children under 16; we do not knowingly collect their personal data.

We may update this policy as Sense changes. We will revise the effective date and provide additional notice when a material change requires it.