Privacy Policy

This Privacy Policy explains how Panoramic Solutions, LLC, the company that operates OpenDecision ("OpenDecision," "we," "us," or "our"), collects, uses, shares, and protects information in connection with our websites, the Juukbox application, the Otis AI assistant, decision space functionality, and related services (the "Services"). This Policy is incorporated into our Terms of Service.

A note on names, because you will meet all three. OpenDecision is the company. Juukbox is the product you sign into and the name on the wordmark there. Otis is the AI assistant inside it. This Policy covers all of them, on every domain we serve them from.

Panoramic Solutions, LLC is the data controller for the personal information described in this Policy. You can reach us by email at matt@opendecision.com. Full contact details are in Section 12.

1. Information We Collect

a. Account Information

You can use OpenDecision without an account. If you create one, we collect your email address, and if you sign in with Google or with Microsoft we also receive your name and profile image from that provider. We never receive your password. The alternative is a one-time code sent to your email address, which involves no third-party identity provider at all.

Using the Services without signing in still creates an account for you, silently, so that the decision space you start belongs to something and is still there when you come back. It holds no name and no email address, and we do not know who you are. If you later sign in, we link the two so your work carries over, which means from that point the earlier activity is associated with your named account.

b. Your Content

We collect the content you create or submit to the Services, including decision profiles, criteria and weights, Otis AI conversation messages, notes, uploaded files, and feedback. You retain ownership of Your Content as described in our Terms.

On files specifically: we accept an attachment as you give it to us. We do not restrict the file type, we do not scan uploads for malware, and we do not inspect them beyond extracting text so that Otis can read them. Files stay until you delete them, and deleting a decision space does not currently delete the files inside it. Do not upload anything you would not want stored.

c. Automatically Collected Information

When you use the Services, we automatically collect certain technical information, including:

• IP address, browser type, operating system, and device identifiers
• Pages viewed, links clicked, and features used
• Timestamps of requests and sessions
• Referrer URLs, including whether you arrived from an AI answer engine (Perplexity, ChatGPT, Gemini, Claude, Bing Copilot)
• Anonymous session identifiers for users who have not signed in
• Standard web server logs of each request our API receives, which record the IP address, the referring page, and the browser's user-agent string. These are kept by our hosting provider on its own default schedule, currently about a week, rather than on one we set

d. Cookies and Similar Technologies

We use cookies and similar technologies, including browser storage, for session management, authentication, product analytics, error diagnostics, and bot protection. What is set today:

• od_ai_source: set on our marketing site when you arrive from an AI answer engine, recording which one. It is written once, kept for 30 days, and contains nothing but the name of the engine
• Your sign-in session, which Supabase keeps in your browser's local storage under the key sb-open-decision-auth-token rather than in a cookie. Clearing site data for this domain signs you out
• Analytics cookies and browser storage set by PostHog (US Cloud) to measure product usage, set on your first visit
• Analytics cookies set by Google Analytics on both sites, where analytics storage is permitted: _ga, which distinguishes browsers from one another, and a _ga_ cookie holding session state for the site you are on
• od_visit: set separately by the app at juukbox.ai and by our website at www.opendecision.com, where analytics storage is permitted, each holding its own random visitor identifier, a random identifier for the current visit, the time of your most recent activity, and a short code standing for the campaign tags of the link you arrived through, so that a return visit is counted as the same browser and a visit ends after 30 minutes without activity. The two are never linked to each other. On www.opendecision.com we also record the paths of the pages you read during a visit. It holds nothing else and names nobody
• Cookies and tokens set by Cloudflare Turnstile to verify that requests come from a real browser
• Cookies set by Google when the Google sign-in script loads, which happens on the app's sign-in surfaces. This is described in Section 1e, because it is the one worth reading

These are not all set in the same place. Product analytics and the Google sign-in script run in the OpenDecision app at juukbox.ai. Our marketing site at www.opendecision.com loads Google Analytics and our own visit record described above, and no product analytics or error-reporting software of its own. The two sites are measured as two separate Google Analytics properties and two separate visit records, and we do not link your activity across them.

Cookies stay with the site that set them. The app's analytics cookies are scoped to .juukbox.ai and this site is on opendecision.com, so neither site can read the other's. They were visible on both while the app shared this domain; moving the product to its own domain ended that.

Analytics loads when you first open either site. You can prevent it: if your browser sends a Global Privacy Control signal we honour it and no analytics runs at all, on either site and for every analytics provider we use; you can block or clear cookies for a site in your browser; and you can ask us to delete the analytics data associated with you. If you are in the EEA or the UK, analytics storage is off by default and no analytics cookie is set unless you are outside that region. Section 11a has the detail. Disabling required cookies may prevent you from signing in or using parts of the Services.

Juukbox also keeps its own record of visits to the app, in our own database. When a visit begins we record the page you landed on, the site that referred you (the site only, never the address of the page), any campaign tags in the link you followed, and the short label some sites add to their links to say where they sent you, and when you start a decision space we note the page you started it from. The record holds no IP address, no browser or device details, and nothing you type. If you are signed in when a visit begins, the visit is linked to your account. It honors Global Privacy Control: if your browser sends the signal, no visit is recorded. If you are in the EEA or the UK, nothing is stored on your device for it, and each page you open is recorded as a visit of its own.

On juukbox.ai we also record the paths of the public pages you read, such as product and plan pages. Our website at www.opendecision.com keeps the same kind of record of its own visits, under the same rules: the page you landed on, the site that referred you, any campaign tags, and the paths of the pages you read, with no IP address and no browser or device details. It is never linked to your Juukbox account or to your visits to juukbox.ai. We compare the address a request comes from against a list of our own team's addresses to leave our team's visits out of our numbers; your address is not kept.

The same record notes what is done with the products in the app: which products were shown in a list and where, which product pages and plans were opened and how, when a link from Juukbox to a vendor's site was followed (the kind of link, such as free trial or pricing, and the vendor's site only, never the address of the page), when a link to a product was copied or shared, how long a decision space was open on screen, the sections of a space you open and the time they are on screen, and the filters you apply to a space's product list. Inside a decision space each of these is linked to that space. We also keep a snapshot of the products Quick Match ranked highest for a decision space, and their order, each time its requirements change. None of this holds anything you type, an IP address, or browser or device details. It follows the same rules as visits: if your browser sends Global Privacy Control none of it is recorded, and none of it is stored on your device.

e. Google Sign-In and One Tap

The app can load Google's Identity Services script from accounts.google.com/gsi/client, which is what lets you sign in with Google and what shows the Google One Tap prompt. Whenever that script is requested, Google receives your IP address, your browser and device details, and the page you are on, it can see whether you are already signed in to a Google account, and it can set its own cookies in your browser. That happens because the file is fetched from Google, before you choose anything in the prompt.

We request it only where a sign-in is plausibly next: when you open the sign-in dialog, when you reach for the account control, when you arrive on the app's home page, and when you start a decision space. It is not requested on shared-link pages, on mobile browsers, or once you are signed in, and reading a product page does not trigger it. One Tap is configured not to select an account for you, so it cannot sign you in unless you pick an account in the prompt. Google's handling of this information is governed by the Google Privacy Policy. To prevent it entirely, block third-party scripts from accounts.google.com in your browser.

f. Messages You Send Us

When you send us a message through a contact form, we collect your name, your email address, the category you selected, your message, and the page you sent it from. We store the message in our database and also deliver it by email, through Resend, to an internal OpenDecision address so that a person can read and reply to it. We use it to answer you and to keep a record of the exchange.

2. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Services
• Authenticate you and keep your account secure
• Generate AI-powered decision matches and responses through Otis AI (see Section 4 below)
• Send transactional messages (sign-in codes, account notifications)
• Analyze usage patterns to improve product quality and relevance
• Detect, prevent, and respond to fraud, abuse, and security issues
• Create aggregated, de-identified insights, such as counts and trends showing which requirements come up in a category, which we may share with vendors, analysts, or other third parties, including for a fee (see Section 3)
• Comply with legal obligations and enforce our Terms

Authorized members of our team may review decision spaces and Otis conversations to support users and improve the Services.

We do not sell your personal information. Aggregated, de-identified insights are not personal information. We do not use Your Content to train our own foundation AI models.

3. How We Share Information

We share personal information with service providers ("subprocessors"), contractors, and partners who help us operate the Services, and otherwise only as this section describes, including when you consent. Each may use it only to help us run the Services and is contractually bound to protect it. We do not share personal information with the vendors of the products we list. Our current subprocessors are:

Cloudflare Turnstile

We use Cloudflare Turnstile to protect the Services from bots and abuse. Turnstile runs invisibly in your browser and analyzes signals such as IP address, user-agent, browser characteristics, and interaction patterns to verify that requests come from legitimate users. No CAPTCHA-style challenge is shown to most visitors. Cloudflare processes this information as our subprocessor under its Turnstile Privacy Addendum, which is incorporated by reference into this Policy.

Other People in Your Decision Space

A decision space can be shared with colleagues through a link you generate. Anyone who opens that link joins the space as a member, so treat the link the way you would treat the contents of the space: whoever holds it can join, and forwarding it forwards the access.

Once someone is a member, everyone in the space can see the same things, and that includes each other. The member list shows every member's display name, avatar, and email address, including yours and including people who contributed and later left. Everyone can also see the criteria and weights, the shortlist, the notes written on products, the files attached to them, and who did each of those things. If you would rather a colleague not have your email address, do not join their space with an account that carries it.

You can set a password on a share link, give it an expiry, or revoke it. Revoking a link stops new people joining. It does not remove anyone who already joined, which you do from the member list.

Aggregated Insights

We may share aggregated, de-identified insights with vendors, analysts, and other third parties, including for a fee. These are only counts and trends, such as which requirements come up most often in a category. They never include individual conversations, names, email addresses, companies, or any other information that identifies you.

We do not report any figure drawn from fewer than 5 people. We do not attempt to re-identify anyone from these insights, and recipients are contractually barred from trying. Buying insights never affects how products are ranked or matched. This applies only to conversations from October 9, 2026 onward.

We may also disclose information (i) with your consent, (ii) to comply with valid legal process or government requests, (iii) to protect the rights, property, or safety of OpenDecision, our users, or the public, or (iv) in connection with a merger, acquisition, or sale of assets, with notice to you where practical.

4. AI Processing Disclosure

OpenDecision's Otis AI assistant and research features use third-party large language models, currently Google Gemini. When you interact with Otis AI, your messages, decision criteria, and related inputs are transmitted to Google for inference. Google acts as a subprocessor and is subject to Google's AI Gemini API terms. We use the paid tier of that API, under which Google does not use what we send to improve its products and does not have people review it. Otis sometimes needs current information from the web, and when it does, Google searches on its behalf using what you asked about.

a. What Reaches the Model

The prompt we send to Gemini can contain more than the sentence you typed. Depending on what you are asking Otis to do, it can include any of the following, so treat all of it as capable of reaching Google:

• Your message, your criteria and their weights, and the products in your decision space
• Uploaded documents: we extract the text on our own servers and send that text to Gemini rather than the file. The file name and any note you attached go with it
• Uploaded images: sent to Gemini whole, as the image itself. We run no text recognition of our own, so whatever is legible in the picture is read by Gemini rather than by us
• The work in the space and the people in it: notes written on products, status labels, who shortlisted what, the names of attached files, and the names of the people involved. You are called "you" rather than named. A colleague can be identified by their display name or their email address

Not every request carries all of it, and which parts travel with a given question changes as we improve Otis. Rather than describe a moving target, the list above is the outer limit of what can go.

b. Links You Add to a Decision Space

If you put links in a decision space, our servers fetch those pages so that Otis can read them, and part of what we fetch goes into the prompt sent to Gemini. One consequence is worth stating plainly: the request comes from our infrastructure rather than from your browser, so the site you linked to learns that someone using OpenDecision linked to it. We may keep a copy of what we fetch so we do not have to fetch it again. Please do not link to pages you would not want fetched and summarized, including private documents that are reachable by anyone holding a secret URL.

c. AI Observability

We use Langfuse, a US-hosted AI observability service run by ClickHouse, Inc., to record traces of Otis conversations so that we can debug and improve answer and match quality. A trace can include the message you sent in the words you wrote it, the prompt built around it, and your account identifier, which means a trace is linkable back to you rather than anonymous. We do not run this in every environment.

d. Voice Input

The microphone button in the app uses the speech recognition built into your browser (the Web Speech API), not a service we operate. In Chrome the audio is sent to Google and in Safari it is sent to Apple, under that browser vendor's own privacy terms rather than ours. We never receive or store the audio. We receive only the text your browser transcribes, which we then treat exactly like text you typed. If you would rather not send audio to your browser vendor, type instead of using the microphone.

AI-generated responses may contain errors, biases, or omissions, and Otis will sometimes be confidently wrong. Verify anything you are going to act on. Otis is a starting point for your evaluation, not advice of any kind, and not a recommendation to buy. We do not use Your Content to train our own models.

5. International Data Transfers

Our infrastructure and subprocessors are primarily located in the United States. If you access the Services from outside the United States, your information will be transferred to, stored, and processed in the United States. For users in the European Economic Area, United Kingdom, or Switzerland, we rely on Standard Contractual Clauses approved by the European Commission as the lawful basis for these transfers.

6. Data Retention

• Active accounts: we retain Your Content for as long as your account is active
• Anonymous sessions: a decision space you started without signing in is kept so that you can come back to it. We do not currently delete these on a schedule, and we will say so here when we start to. You can ask us to delete one at any time under Section 7
• Deleted accounts: ask us and we will permanently delete Your Content within 30 days, except where the law requires us to keep something. Section 7 covers how
• Backups: encrypted backups are retained for disaster recovery, on the schedule our database provider operates, and deleted content persists in them until they age out
• Analytics: usage events are attached to a profile keyed to your account, so they are not anonymous. We retain them for as long as your account is active, and delete the profile when you ask us to under Section 7. Counts and aggregates that name nobody may be kept indefinitely
• Visit records: Juukbox's own record of visits, and of what is done with products during them, follows the same rule as analytics. When an account is deleted, the visits and activity recorded under it keep no link to it
• Transactional records: retained as required for tax, accounting, and legal compliance (typically 7 years)

7. Your Rights

Regardless of your jurisdiction, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and Your Content
• Object to or restrict certain processing
• Request a portable copy of Your Content in a common format
• Withdraw consent where processing is based on consent

To exercise these rights, email matt@opendecision.com. We will respond within the time required by applicable law (typically 30 days).

8. Security

Your data is encrypted in transit and at rest, access to it is enforced in the database itself rather than only in application code, and administrative actions are written to append-only audit tables. The product has no passwords: you sign in with Google, with Microsoft, or with a one-time code sent to your email address, so there is no password of ours for anyone to steal or for you to reuse. Protect the account you sign in with, and turn on multi-factor authentication with that provider.

We have not completed a SOC 2 or ISO 27001 audit and have not had a third-party penetration test, and we do not claim otherwise. No system is perfectly secure. If you are evaluating us and need detail beyond this, ask and we will answer.

9. Children

The Services are not directed to children and are intended for business use. You must be at least 18 years old to use the Services. We do not knowingly collect personal information from anyone under 18. If we discover that we have, we will delete it promptly and close the account.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated by email or in-product notice at least 14 days before taking effect. The "Effective Date" at the top of this page indicates when the most recent changes were made.

October 13, 2026: Section 1 now describes the record our website at www.opendecision.com keeps of its own visits and the pages read there, that it is never linked to juukbox.ai, and that on juukbox.ai we also record the paths of the public pages you read, such as product and plan pages.

October 13, 2026: Section 1 now also names the sections of a decision space you open and the time they are on screen, and the filters you apply to a space's product list.

October 12, 2026: Section 1 now describes what Juukbox's own record notes about products: what was shown and opened, clicks to vendor sites (the kind of link and the site only), product shares, time in a decision space, Quick Match ranking snapshots and the categories of requests for products we do not yet list. Section 2 says that authorized members of our team may review decision spaces and Otis conversations. Section 6 covers the new records.

October 9, 2026: Section 3 now explains that we may share aggregated, de-identified insights about what buyers look for, including for a fee, and the limits on them: counts and trends only, nothing that identifies you, and no figure from fewer than 5 people. It also names the contractors and partners who help us run the Services, and says we do not share personal information with the vendors of the products we list. Section 2 lists aggregated insights as a use, and Sections 2 and 11b say why they are not a sale of personal information.

October 9, 2026: Section 1 now describes the record Juukbox keeps of visits to the app, what it holds and what it never holds, and the od_visit entry it keeps in your browser. Section 6 says how long visit records are kept.

August 31, 2026: Section 3 now describes what sharing a decision space with colleagues exposes, including that members can see each other's email addresses, which this Policy had never mentioned. Section 4 is shorter, because implementation detail about how Otis works is not something you need in order to know what happens to your data. We also corrected statements that no longer matched the product, or never did: how and when the Google sign-in script loads, which sign-in providers exist, what happens to anonymous decision spaces and to uploaded files, and how long analytics about you is kept. Section 8 no longer implies a security audit we have not had. The Policy now names Juukbox, which is what the app you sign into is called.

September 2, 2026: we are retiring our error monitoring service, so it no longer appears in this Policy. We also now say plainly that we use the paid tier of the Gemini API, under which Google does not use what we send to improve its products. Langfuse is named by its actual company, ClickHouse, Inc., and Microsoft is described as the independent controller it is rather than as a subprocessor of ours.

August 25, 2026: named the company behind OpenDecision, added Sentry, Langfuse and our cache host to the subprocessor list, and set out in Section 4 what actually travels with a question you ask Otis.

11. Jurisdiction-Specific Rights

a. European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) or equivalent laws, including the right to lodge a complaint with your local supervisory authority. The legal bases we rely on are:

• Contract: processing necessary to provide the Services to you
• Legitimate interest: product improvement, security, and fraud prevention
• Consent: where you actually give it, for example by opting in to marketing communications
• Legal obligation: to comply with applicable laws

If you are in the EEA or the UK, analytics storage is denied by default. We tell Google Analytics this before it loads, so no analytics or advertising cookie is set for you and no advertising identifier is collected. We measure page views in a form that does not identify your browser between visits.

Three further things you can do. Your browser's Global Privacy Control signal, if you send one, stops analytics loading at all: we read it before anything starts, on both sites and for every analytics provider we use. You can block or clear cookies for a site in your browser. And you can write to matt@opendecision.com to have the analytics data associated with you deleted.

b. California Residents

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell personal information. The aggregated, de-identified insights described in Section 3 are not personal information. To exercise your rights, contact us using the information in Section 12.

c. Other US State Residents

Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have similar rights under their state privacy laws, including the right to access, correct, delete, and opt out of targeted advertising. We do not engage in targeted advertising or the sale of personal information as defined by these laws. To exercise your rights, contact us using the information in Section 12.

d. Canada, Australia, and Other Jurisdictions

Users in Canada, Australia, and other jurisdictions have rights under their applicable privacy laws (PIPEDA, Privacy Act 1988, and others). Contact us to exercise them.

12. Contact Us

Questions about this Privacy Policy or your personal information? Email matt@opendecision.com.

The data controller responsible for your personal information is Panoramic Solutions, LLC. Written requests, including requests to exercise the rights in Section 7 and Section 11, can be sent to the email address above, and we will provide a postal address on request.