Privacy Policy

Last updated September 15, 2026

DECA Portal is a private, invite-only workspace for a small DECA chapter team. This policy explains what the portal stores, how it is used, and who it is shared with.

Information we store

• Account — your name, email address, and a securely hashed password.
• Team work — projects, tasks, notes, calendar items, competitive-event entries, practice role-plays and their grades, and knowledge-base documents you add. These are visible to every approved member of the team.
• AI chats — your conversations with Dex and any files you attach to them. Chats are private to your account; teammates cannot see them.
• Uploads — images, PDFs and text files you attach to chats or projects are stored in our database.
• Technical — an encrypted session cookie that keeps you signed in, and basic device / browser information sent with your requests.

How it is used

To run the portal: answer your questions with the AI coach, keep the team's projects and calendar in sync, grade practice runs, and send approval notices. Nothing is sold or used for advertising.

Service providers

• Hosting — Vercel.
• Database — Supabase (Postgres).
• Email — Resend delivers verification codes and notices.
• AI — Anthropic (Claude). When you use Dexor Practice mode, your message, recent chat history, attached files, and relevant team data (projects, calendar, event entries) are sent to Anthropic to generate a response, which may include web searches. Don't attach anything you wouldn't want processed this way.

How it is protected

Passwords are stored hashed. Sessions use encrypted, HTTP-only cookies. New accounts need administrator approval before they can see anything. The site is served over HTTPS.

Your choices

You can delete your own chats at any time. To correct or delete your account and its data, ask the administrator (the team admin can remove accounts from the Team page).

Changes

Changes will be posted on this page with a new date above.