dekud.
Privacy Notice Effective: [DATE] · v0.1

What we keep, and what we never do.

Dekud runs a public record. Some things here are permanent by design — so this notice tells you exactly what is collected, why, how long it stays, and the control you hold over it.

DRAFT — pending legal review. This document describes our intended commitments in plain terms. The binding version will be finalized with counsel before public launch.
Article 1

Who we are

Dekud is a discussion platform where reported content is judged by a randomly drawn jury of real users, sworn under oath, on sealed ballots. This notice explains how Dekud ("we," "us") handles personal data for anyone who uses the service ("you").

For any privacy question, contact us at hello@dekud.com.

Article 2

What we collect

We collect only what the service needs to work:

We do not sell your data, and we do not show third-party advertising trackers.

Article 3

How long we keep it

Retention is deliberate, not indefinite:

Article 4

The two permanences

Dekud is built around a public record. Two things are permanent by design, and you should understand them before you take part:

The verdict record

When a case closes, its verdict, sealed ballots, and the evidence shown to the jury become part of the permanent public record. This is what makes the court accountable — and it does not disappear when a case ends.

The reporter's mark

A report that is found to be malicious carries a permanent mark against the reporter who filed it (reporter_sealed_until). Deterrence is symmetric: filing a case is not a free action.

Because these are structural, they cannot be quietly removed. Where the platform makes something impossible by design — for example, silently editing a post after it is under trial — we commit to that here as a promise, not merely a technical fact.

Article 5

The control you hold

Within the limits of Article 4, you hold real control:

To exercise any of these, contact hello@dekud.com.

Article 6

Deleting your account

You can delete your account at any time. When you do, your account data is removed. Note that content already sealed into the public record (Article 4) — closed verdicts and the evidence shown to a jury — remains part of the record, because the court's accountability depends on it. This limit is disclosed here so it is never a surprise.

Article 7

Legal basis and your regional rights

We aim to comply with the Saudi Personal Data Protection Law (PDPL) and, for users in the European Union, the General Data Protection Regulation (GDPR).

Depending on where you live, you may have rights to access, correct, export, or erase your personal data, and to object to certain processing. The permanences in Article 4 are a core feature of the service and are disclosed to you before you take part; where the law provides exceptions for records kept in the public interest or for the establishment of legal claims, those may apply. Counsel will finalize this language.

Article 8

Minors

Dekud is not intended for people under the age required by their local law to consent to data processing. We do not knowingly collect data from minors. If you believe a minor has registered, contact hello@dekud.com and we will act.

Article 9

Security

We protect your data with encryption in transit (HTTPS), hashed passwords, rate limiting, and regular security review. No system is perfectly secure, but we treat your data as something held in trust.

Article 10

Changes to this notice

If we change how we handle your data, we will update this notice and its effective date. Material changes will be communicated before they take effect.

Article 11

Who processes your data

Dekud itself is small, but the service stands on specialized providers. Each receives only what its function requires, under its own security commitments:

We do not sell your data, and these providers process it only to run their part of the service.