Privacy Policy

Last updated: 17 May 2026

Who we are

Decouplr Ltd is a company registered in England and Wales. We operate the Decouplr platform at decouplr.io, portal.decouplr.io, and creator.decouplr.io. References to "we", "us", or "our" in this policy refer to Decouplr Ltd.

We are the data controller for personal data collected through our marketing site and subscriber portal. Creators who build automations on our platform are independent data processors for data that passes through their automations.

What we collect

We collect the following categories of personal data:

  • Account data — email address, name, and password hash when you register.
  • Billing data — payment method and billing address, processed and stored by Stripe. We receive a tokenised reference only.
  • Credentials — OAuth tokens and API keys you connect to run automations. These are encrypted at rest and never readable by Decouplr staff.
  • Usage data — automation run logs, timestamps, and step outputs, retained to provide the service and for debugging.
  • Analytics data — page views and session data collected via Google Analytics (GA4). This data is anonymised and aggregated.

How we use it

We use your data to:

  • Provide, maintain, and improve the Decouplr platform.
  • Process subscription payments and manage billing.
  • Execute automations on your behalf using the credentials you provide.
  • Send transactional emails (subscription confirmations, run alerts, billing receipts).
  • Respond to support requests.
  • Analyse aggregate usage patterns to improve the product.

We do not use your data for advertising, and we do not sell your data to third parties.

Sharing

We share data with the following categories of third parties:

  • Stripe — payment processing. Stripe's privacy policy governs their use of your billing data.
  • Google Analytics — anonymised page-view analytics.
  • Infrastructure providers — cloud hosting and database services. Data is processed within the UK and EEA.
  • Integration providers — when your automation connects to a third-party tool (e.g. QuickBooks, HubSpot), data is passed to that tool as required to execute the automation. You control which tools are connected.

We do not share personal data with any other third parties without your explicit consent, except where required by law.

Credentials and third-party connections

When you connect a third-party account to an automation, we store the resulting OAuth token or API key in encrypted form using AES-256 encryption. The encryption key is stored separately from the data. Credentials are decrypted only at runtime, in memory, for the duration of an automation run. No Decouplr employee can read your credentials in plaintext.

You can revoke any connected credential at any time from your subscriber dashboard. Revocation immediately prevents any further automation runs that depend on that credential.

Retention

We retain your account data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (e.g. billing records, which we retain for 7 years in accordance with UK accounting requirements).

Automation run logs are retained for 90 days and then permanently deleted.

Your rights

Under UK GDPR, you have the following rights:

  • Access — you can request a copy of the personal data we hold about you.
  • Rectification — you can ask us to correct inaccurate data.
  • Erasure — you can ask us to delete your data, subject to legal retention requirements.
  • Portability — you can request your data in a machine-readable format.
  • Objection — you can object to processing based on legitimate interests.
  • Restriction — you can ask us to restrict processing in certain circumstances.

To exercise any of these rights, contact us at privacy@decouplr.io. We will respond within 30 days.

Cookies

We use the following cookies:

  • Session cookies — required for authentication. These expire when you close your browser.
  • Preference cookies — store your theme preference (light/dark). These persist for 12 months.
  • Analytics cookies — Google Analytics GA4 cookies, used to measure aggregate page traffic. You can opt out via the cookie banner or your browser settings.

We do not use advertising cookies or third-party tracking cookies beyond Google Analytics.

Contact

For privacy-related questions or to exercise your rights, contact us at privacy@decouplr.io or by post at: Decouplr Ltd, [Registered address], England.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.