1. Introduction
Simulation OS ("we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at sim-os.ai ("the Service"). Please read this policy carefully. By using the Service, you consent to the practices described herein.
2. Information We Collect
2.1 Information You Provide
- Account information: email address and optional display name when you register.
- Simulation data: YAML configurations, simulation parameters, and results you create.
- Support communications: messages you send to our support team.
2.2 Information Collected Automatically
- Usage data: pages visited, features used, simulation run frequency, and interaction patterns.
- Device information: browser type, operating system, screen resolution, and device identifiers.
- Log data: IP address, access times, and referring URLs.
2.3 Payment Information
Payment processing is handled entirely by our payment provider, Paddle (Paddle.com Market Limited), which acts as the Merchant of Record. We do not collect, store, or have access to your full credit card number or payment details. Paddle processes your payment data in accordance with PCI DSS requirements and their own Privacy Policy.
3. How We Use Your Information
We use your information to:
- Provide, operate, and maintain the Service.
- Process your account registration and manage your subscription.
- Run simulations and deliver results to you.
- Send transactional communications (e.g., account confirmations, billing notifications).
- Improve, personalize, and optimize the Service.
- Monitor and analyze usage trends and system performance.
- Detect, prevent, and address technical issues or abuse.
- Comply with legal obligations.
4. Data Sharing and Disclosure
We do not sell your personal information. We may share information with:
- Payment provider (Paddle): to process subscriptions and payments. Paddle acts as the Merchant of Record and may collect additional information as described in their privacy policy.
- Infrastructure providers: cloud hosting and database services that process data on our behalf under strict confidentiality agreements.
- Legal requirements: when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
5. Data Retention
- Account information is retained as long as your account is active.
- Simulation data is retained until you delete it or your account is terminated.
- Usage logs are retained for up to 12 months for analytics and security purposes.
- Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.
6. Data Security
We implement industry-standard security measures to protect your information, including encryption in transit (TLS), encryption at rest, API key authentication, and rate limiting. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: request a copy of the personal data we hold about you.
- Correction: request correction of inaccurate personal data.
- Deletion: request deletion of your personal data and account.
- Portability: request your data in a structured, machine-readable format.
- Objection: object to processing of your personal data for certain purposes.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Cookies and Tracking
The Service uses local storage to save your preferences (theme, API key, sidebar state) and session data. We do not use third-party tracking cookies. Our payment provider Paddle may use cookies as part of the checkout process, subject to their own cookie policy.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.
10. Children's Privacy
The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.
12. Contact
If you have questions or concerns about this Privacy Policy, contact us at [email protected].