DecisionMind is a scientific multi-criteria decision making (MCDM) platform operated by SCIMIND TEKNOLOJİ YAZILIM EĞİTİM VE DANIŞMANLIK ANONİM ŞİRKETİ (“SciMind,” “we,” or “us”), a company registered in Gaziantep, Türkiye. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.
Who operates this service
- Registered name
- SCIMIND TEKNOLOJİ YAZILIM EĞİTİM VE DANIŞMANLIK ANONİM ŞİRKETİ
- Registered address
- Çamtepe Mah. Mahmut Tevfik Atay Bulvarı 4/A Blok Z-18, Şahinbey / Gaziantep, Türkiye
- Trade registry no
- 81496
- MERSIS no
- 0757109977600001
- Tax office and number
- Şahinbey V.D. 7571099776
SciMind is the data controller for the personal data described in this policy. You can reach us at the address above or at [email protected].
1. Data Collection
We collect the following types of information:
- Account information: Name and e-mail address. You sign in with Google or with a one-time code sent to your e-mail; no password is stored.
- Decision data: Decision matrices, criteria weights, and analysis parameters you upload or configure.
- Usage data: Features used, analyses run, and timestamps, recorded in our own logs to operate and secure the service.
- Technical data: Browser type, device information, IP address, and locale preferences.
2. How We Use Your Data
- To provide, maintain, and improve the DecisionMind platform.
- To process your MCDM analyses and generate reproducible results.
- To authenticate your identity and manage your account.
- To send essential service notifications (e.g., analysis completion, security alerts).
- To conduct anonymized, aggregated research on MCDM methodology usage patterns.
3. Data Storage & Security
Your data is stored in a PostgreSQL database on servers operated by SciMind, where the application also runs. We implement industry-standard security measures including:
- Encryption at rest and in transit (TLS 1.3).
- Data isolation: every query is scoped to your account, and the database is additionally closed to direct access by row-level security (RLS) policies.
- Regular security audits and dependency vulnerability scanning.
- Automated backups with point-in-time recovery capabilities.
4. Third-Party Services
We use the following third-party services:
- Sign-in with Google, when you choose it.
- Google (Gemini API)
- Language model behind the analysis assistant: it receives your messages and the facts of the current analysis the answer needs (such as criterion names, method choices and results). Processing may take place outside Türkiye.
- OpenRouter
- Alternative route to language models for the same assistant; it may pass a request to model providers such as Anthropic or Google. Processing takes place outside Türkiye.
- E-mail delivery
- Delivers sign-in codes and service e-mails to your address (Resend or the SMTP service SciMind configures).
- Sentry
- Error monitoring: technical error reports, sent without your name or e-mail address.
- Hosting
- The servers and the database that run DecisionMind, operated by SciMind.
- Cloudflare
- Domain name resolution (DNS).
- DecisionMind platform
- Plans, payments and invoices. Payment processors are engaged by the platform, not by this product; this product only reads your plan.
We do not sell, rent, or trade your personal information to any third party.
Some of these providers, in particular the language-model providers, process data outside Türkiye. Such transfers are made only for the purpose stated above and under Article 9 of the Turkish Personal Data Protection Law (KVKK) and, where it applies, Chapter V of the GDPR. The KVKK Information Notice gives the details.
6. Your Rights
You have the right to:
- Access your personal data and download your analysis history.
- Rectify inaccurate personal information.
- Delete your account and all associated data permanently.
- Export your decision matrices and results in standard formats (CSV, PDF).
- Withdraw consent for optional data processing at any time.
If you are located in the European Economic Area (EEA), you additionally have rights under GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.
When you delete your account, your data is erased with it. Two things remain: records the law requires us to keep, such as invoices, and a one-way hashed form of your e-mail address with the number of free analyses used, kept so that the free plan cannot be claimed again by re-registering.
7. Contact
For privacy-related inquiries, data requests, or concerns, please contact us at:
[email protected]We aim to respond to all privacy inquiries within 30 days.