Privacy Policy

1. Introduction

This Privacy Policy describes how DECA Analytics ("DECA," "we," "us," or "our") collects, uses, stores, and protects information provided by users ("you" or "your") when accessing and using the DECA Portal (the "Portal").

The Portal is a secure digital platform designed to support DECA's services, including but not limited to incentives, compliance, advisory, and access to capital engagements. This Privacy Policy applies to all Portal users, including clients, authorized representatives, and DECA personnel.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide through the Portal, which may include:

  • Name, email address, and contact information
  • Organization details and role information
  • Login and authentication credentials
  • Business, financial, operational, technical, and compliance-related information
  • Supporting documentation and files uploaded through the Portal

2.2 Automatically Collected Information

When you access or use the Portal, we may automatically collect certain technical information, including:

  • IP address
  • Browser type and device information
  • Operating system
  • Log data and usage activity

This information is used to maintain security, system performance, and operational monitoring.

3. How We Use Information

We use collected information to:

  • Provide and support DECA services
  • Facilitate intake, workflows, document management, and reporting
  • Communicate with users regarding their engagement
  • Prepare, submit, and support applications, filings, reports, and communications with government agencies, as authorized
  • Generate structured outputs and draft materials, including AI-assisted content, subject to human review
  • Maintain, secure, and improve the Portal
  • Comply with legal, regulatory, and contractual obligations

DECA does not sell or disclose your information to third parties unless required by law or authorized by you.

4. User Responsibilities and Information Accuracy

Users are responsible for ensuring that information submitted through the Portal is accurate, complete, and timely.

DECA is not responsible for delays, errors, or outcomes resulting from incomplete or inaccurate information provided by users.

Use of the Portal does not alter or replace client responsibilities under any applicable service agreement with DECA.

5. Use of Artificial Intelligence

Certain features of the Portal may use AI-assisted tools to help structure information, generate draft reports, or improve consistency and efficiency.

AI tools do not make eligibility determinations, approvals, or final decisions.

All outputs are reviewed and validated by DECA personnel.

Client data is used solely to support the applicable engagement and is not used to train public or external AI models.

6. Data Security

DECA implements administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction. These safeguards include:

  • Encryption of data in transit and at rest
  • Role-based access controls
  • Secure authentication mechanisms
  • Ongoing system monitoring

While we take security seriously, no system can be guaranteed to be completely secure. Users are responsible for protecting their login credentials and notifying DECA of any suspected unauthorized access.

7. Access and Confidentiality

Access to information in the Portal is restricted to:

  • Authorized users associated with the applicable organization
  • Authorized DECA personnel assigned to the engagement

Information submitted through the Portal is treated as confidential and used solely for the purposes described in this Policy.

8. Generated Content and Proprietary Materials

The Portal may generate reports, templates, workflows, or other outputs as part of DECA's services.

Client-provided data remains confidential.

Certain materials, methodologies, templates, and workflows generated through the Portal may constitute proprietary intellectual property of DECA.

Use of the Portal does not grant ownership or license rights to DECA's proprietary materials beyond the scope of the applicable engagement.

9. Platform Monitoring and Acceptable Use

DECA may monitor Portal activity for security, compliance, system integrity, and performance purposes.

Monitoring is conducted to protect users and the platform, not for surveillance.

Unauthorized access, misuse, or attempts to compromise the Portal may result in restricted access or other appropriate actions.

10. Third-Party Services

The Portal may integrate with third-party service providers, such as cloud hosting, authentication, analytics, or communication tools, to support its functionality.

These providers are engaged under contractual obligations designed to protect confidentiality and security. Their use of information is governed by their own privacy policies, and DECA is not responsible for their independent practices.

11. Data Retention

Information is retained for as long as necessary to:

  • Support active and historical engagements
  • Meet legal, regulatory, and contractual obligations
  • Maintain appropriate business records

Retention periods may vary depending on the nature of the information and applicable requirements.

12. Governing Law

This Privacy Policy is governed by the laws of the Commonwealth of Puerto Rico, without regard to conflict-of-law principles.

13. Relationship to Client Agreements

This Privacy Policy governs use of the Portal only.

It does not replace, amend, or supersede any services agreement, engagement letter, or other contractual arrangement between DECA and its clients. In the event of a conflict, the applicable services agreement shall control.

14. Changes to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time to reflect changes in the Portal, applicable laws, or business practices. Updates will be effective immediately upon posting within the Portal or through other appropriate communication.

Continued use of the Portal after changes are posted constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy or how your information is handled, please contact us at support@deca.pr.

By accessing or using the DECA Portal, you acknowledge that you have read, understood, and agree to this Privacy Policy.