Privacy Policy
1. Who we are
Decouplr is a UK-registered entity that provides an AI-assisted automation design and build platform. We are the data controller for the personal data described in this policy. If you have any questions about how we handle your data, you can contact us at build@decouplr.io.
2. What data we collect
We collect and process the following categories of personal data when you use our platform:
- Business information — your business name, as provided during registration.
- Contact details — your name, email address, and mobile telephone number.
- Conversation content — the messages you exchange with our AI assistant while describing your automation requirements.
- Automation designs — the technical specifications generated from your conversations.
- Technical data — your IP address, browser type, and device information collected automatically when you visit our website.
- Cookie data — essential session cookies and, where you consent, analytics cookies. See Section 9 for details.
3. Why we collect it (lawful bases)
We rely on the following lawful bases under UK data protection law for processing your personal data:
- Consent — you provide explicit consent when you complete the registration form and agree to these terms. Where you opt in to marketing communications, that consent is given separately and can be withdrawn at any time.
- Contract performance — processing your business information, conversation content, and automation designs is necessary to deliver the service you have requested, namely the design and build of your automation.
- Legitimate interest — we may use your mobile telephone number to contact you about service-related matters (such as build progress or technical questions). We have assessed that this processing is necessary for our legitimate interest in delivering an effective service and does not override your rights and freedoms.
4. How we use your data
We use your personal data for the following purposes:
- Automation design and build — your conversation content and business information are used to design, generate, and deliver your custom automation.
- Service communication — we use your email address and mobile number to keep you informed about your automation build, ask clarifying questions, and provide ongoing support.
- Analytics — where you consent, we use analytics cookies to understand how visitors use our website so that we can improve it.
- Marketing communications — only where you have given explicit, separate opt-in consent during registration. You can withdraw your marketing consent at any time by contacting build@decouplr.io or using the unsubscribe link in any marketing email.
5. Third-party processors
We share your data with the following third-party service providers who process it on our behalf:
- Anthropic (United States) — conversation content is sent to Anthropic's API to power the AI assistant that helps design your automation. Personal data such as your name, email, and phone number is collected separately and is not included in the data sent to Anthropic.
- Google Analytics (United States) — where you have consented to analytics cookies, anonymised website usage data is processed by Google to help us understand how visitors interact with our site.
- Hetzner (Germany) — our platform infrastructure is hosted on Hetzner servers located in Germany.
We do not sell your personal data to any third party.
6. International transfers
Some of our third-party processors are based outside the United Kingdom. Specifically, Anthropic and Google are headquartered in the United States. These transfers are protected by appropriate safeguards, including UK adequacy regulations and Standard Contractual Clauses (SCCs) as approved by the Information Commissioner's Office, to ensure your data receives an equivalent level of protection to that provided under UK law.
7. Data retention
We retain your personal data for the following periods:
- Account data — retained for as long as your account is active. You may request deletion of your account and associated data at any time.
- Chat sessions — conversation content is retained for 30 days after completion to allow for follow-up questions and quality assurance, after which it is automatically deleted.
- Consent records — records of the consent you have given (including timestamps and the specific consents granted) are retained indefinitely as required for regulatory compliance.
8. Your rights
Under UK data protection law, you have the following rights in relation to your personal data:
- Right of access — you can request a copy of the personal data we hold about you.
- Right to rectification — you can ask us to correct any inaccurate or incomplete data.
- Right to erasure — you can request that we delete your personal data, subject to any legal obligations we may have to retain it.
- Right to restriction — you can ask us to restrict the processing of your data in certain circumstances.
- Right to data portability — you can request your data in a structured, commonly used, machine-readable format.
- Right to object — you can object to processing based on legitimate interest or direct marketing at any time.
To exercise any of these rights, please contact us at build@decouplr.io. We will respond to your request within one month.
9. Cookies
Our website uses the following types of cookies:
- Essential cookies — these are necessary for the website to function correctly, including session management. They do not require your consent and cannot be disabled.
- Analytics cookies — we use Google Analytics to collect anonymised data about how visitors use our website, such as which pages are visited and how long users spend on the site. These cookies are only set if you provide your consent via the cookie banner displayed when you first visit our site. You can change your preference at any time using the Cookie Settings link in the footer.
10. Data security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it. All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security). Data stored on our servers is encrypted at rest. Access to personal data is restricted to authorised personnel on a need-to-know basis, and we regularly review our security practices to ensure they remain effective.
11. Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your data.
12. Contact and complaints
If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us at build@decouplr.io.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can contact the ICO at ico.org.uk or by telephone on 0303 123 1113.