Privacy

In force from 28 September 2026

This page explains what personal data DecisionOne collects, why, and what you can do about it. DecisionOne is run by Sqwish Labs, a company in the United Kingdom ("we"). Write to [email protected] with any question about it.

What we collect

When you sign in with Google, we get your name, email address, profile picture link and Google's id for your account. We never see your Google password.
Your account holds your place on the waitlist, who referred you and whom you referred, your credits and your API keys. We keep a fingerprint of each key, not the key itself.
Each API request carries context, questions and the answers you allow. We answer and discard this content, unless you ask us to keep the decision (store: true) so you can send feedback on it later. Kept decisions and their feedback are deleted after 90 days.
Datasets you upload, and the models fine-tuned on them, stay until you delete them or close your account.
We count each account's decisions and tokens by day and model, with response times and error rates. That's what the usage page shows, and what bills will be based on. For 90 days we also keep request metadata: the request ID, time, endpoint, requested and served models, outcome, fallback or error code, decision and token counts, and server time. This history contains no prompts or answers.
Our server logs record IP addresses, browser details and times. We use them to keep the service secure and to apply rate limits.
One session cookie keeps you signed in. We use no advertising or analytics cookies.

How we use it

To run the service you asked for: answering decisions, training and serving your models, and showing your usage. The legal basis is our contract with you.
To run the waitlist, referrals and credits, also under that contract.
To keep the service secure and reliable, which is our legitimate interest.
To email you about your account and changes to the service. We send marketing emails only if you agree to them.

Your data and our models

We don't use your requests, kept decisions, datasets or feedback to train the models we offer to anyone else. They are used to serve you, and to train models that only your account can call.

Who else handles it

These providers run parts of the service for us under contract, each only for its own job:

DigitalOcean: our servers, in the Netherlands, and database backups;
Cloudflare: the network in front of the service;
Microsoft Azure: encrypted file backups, in the UK;
Temporal: running fine-tuning, labelling and prompt-tuning jobs;
GPU providers that run the models, in Europe where we can;
Google: signing you in.

When you run prompt tuning or teacher labelling, the rows involved are sent to the language model provider that does that step, currently Microsoft Azure or DigitalOcean. We don't sell personal data.

Some providers process data outside the UK and the European Economic Area. Where they do, we rely on adequacy decisions or standard contractual clauses.

How long we keep it

Account data: while your account is open, then deleted within 30 days of closing it, except anything the law requires us to keep.
Kept decisions and their feedback: 90 days.
Request history metadata: 90 days. Daily usage totals are kept with your account.
Datasets and fine-tuned models: until you delete them or close your account.
Backups: encrypted, and used only to recover the service. Monthly copies are kept for 12 months, so deleted data can take up to a year to leave them.

Your rights

You can ask to see, correct, export or delete your personal data, object to or restrict how we use it, and withdraw consent you gave. Write to [email protected] and we'll reply within a month. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Children

DecisionOne is not for anyone under 16, and we don't knowingly collect their data.

Changes

If this page changes, the date at the top changes too. We'll email account holders before any change that affects them materially.

Terms · DecisionOne