Who we are
This policy explains how Decurion (“we”, “us”) handles information. Decurion is a secure platform for organizations that serve people: Casework, Benefits & Assistance, Finance, Transportation, Forum, Workforce, Front Door, Outreach & Engagement, Inventory & Assets, and Insights & Reporting, on one record.
It covers this website and the Decurion service. Where we handle records on behalf of an organization, that organization’s agreement with us and its own notices also apply.
Our two roles
We handle information in two different roles, and the rules differ for each.
- On behalf of organizations. When an organization uses Decurion, the records of the people it serves belong to that organization and to those people. We process them only to provide the service, as the organization instructs, and under a written agreement that includes HIPAA-aligned safeguards where health information is involved.
- For our own business. When you visit this site, contact us, or manage an account, we handle a small amount of information for our own purposes, as described below.
What we collect
We collect only what we need.
- Contact details you choose to send us, such as your name, organization, email, and message.
- Account details for staff who sign in, such as name, role, and work email.
- Basic technical information, such as browser type and pages visited, used to keep the site working.
- Records an organization places in the service, which we hold for that organization and do not use for any other purpose.
How we use information
We use information to:
- Provide, secure, and support the service.
- Reply to your questions and arrange demos you ask for.
- Keep an audit trail of who viewed or changed a record, and when.
- Meet our legal obligations and enforce our agreements.
We do not sell personal information. We do not use records in the service for advertising.
When information is shared
Records move between organizations only when the person has given a clear, recorded consent, or when the organization that holds the record directs it as allowed by law. Every share is written to the record.
We use a small number of service providers, such as cloud hosting, under written agreements that limit what they may do. We may also disclose information when the law requires it, and we will tell the affected organization unless we are not allowed to.
How we protect information
Our safeguards include:
- Encryption in transit and at rest.
- Role-based access, so staff see only what their role needs.
- A full audit trail of every view and change.
- HIPAA-aligned administrative, physical, and technical practices.
No system is perfect. If we learn of a breach that affects your information, we will notify the right people as the law and our agreements require.
How long we keep it
We keep records in the service for as long as the organization’s agreement says, then return or delete them as directed. We keep our own business information only as long as we need it, or as the law requires.
Your choices and rights
You can ask to see, correct, export, or delete information we hold about you. If your information is held by an organization that uses Decurion, we will point your request to that organization, which decides how to respond, and we will help it do so.
Organizations can export their data in standard formats at any time. Organizations own their data and can leave as their agreement allows.
Children
This website is not directed to children. Organizations that serve young people may hold their records in the service under the organization’s own consent and guardian rules.
Changes and contact
We will post any change to this policy here and update the date at the top. If a change is significant, we will tell organizations in advance.
Questions or requests: hello@godecurion.com. Disputes are handled under the governing law stated in your agreement.