Privacy Policy
Last updated 3 September 2026
Decimio is operated by Sodasoft. This policy explains what personal data we process, why, and what rights you have under the GDPR.
Data about our users
When you request access or hold an account we process your name, business email address, company name and sign-in activity. The legal basis is performance of a contract and our legitimate interest in running the service.
Data you process using Decimio
Decimio returns business contact information about individuals in a professional capacity: name, job title, employer, professional profile URL and business contact details. When you upload or generate this data, you are the controller and Decimio is your processor. You are responsible for having a lawful basis for your outreach and for honouring objection and erasure requests from the people in your lists.
Retention
Access requests are kept for 24 months. Workspace data is kept for as long as the account is active and deleted within 30 days of account closure.
Sub-processors
We use infrastructure and data suppliers to operate the service. A current list is available to account holders on request.
Your rights
You may request access, correction, erasure, restriction or portability of your personal data, and object to processing. Write to privacy@decimio.com.