Privacy Policy

1. Introduction

SimFusion Inc. ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website, applications, and services (collectively, the "Services").

By using SimFusion, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please do not use our Services.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Account Information: Name, email address, company name, and password when you register
• Billing Information: Payment details and billing address (processed securely by our payment providers)
• Profile Information: Avatar, bio, and preferences you choose to provide
• Communication Data: Records of your correspondence with our support team

2.2 Usage Data

We automatically collect information about how you interact with our Services:

• Log Data: IP address, browser type, pages visited, time spent, and referring pages
• Device Information: Operating system, device type, and screen resolution
• Feature Usage: Which features you use and how frequently
• Error Reports: Technical issues and crash reports to improve stability

2.3 User Content

We store the models, simulations, data files, and custom blocks you create ("User Content"). This includes:

• Block diagram configurations and connections
• Custom code for user-defined blocks
• Uploaded datasets and simulation results
• Project metadata and collaboration settings

3. How We Use Your Information

3.1 Providing Services

We use your information to:

• Create and manage your account
• Provide, maintain, and improve our Services
• Process payments and send billing notifications
• Enable collaboration features and sharing
• Provide customer support and respond to inquiries

3.2 Research and Development

We analyze usage patterns to improve our platform. This analysis is performed on aggregated, anonymized data. We never use your specific models, data, or simulations to train AI models or for any purpose without your explicit consent.

3.3 Communications

We may contact you regarding:

• Service updates and maintenance notifications
• Security alerts and account changes
• Product announcements (with opt-out options)
• Responses to your support requests

4. Data Storage and Security

4.1 Security Measures

We implement industry-standard security practices:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• SOC 2 Type II certified data centers
• Role-based access controls and multi-factor authentication

4.2 Data Retention

We retain your data for as long as your account is active. Upon account deletion:

• Personal information is permanently deleted within 30 days
• User Content is deleted according to your specified retention settings
• Anonymized usage data may be retained for analytical purposes
• Legal obligations may require retention of certain records

5. Data Sharing and Third Parties

5.1 Service Providers

We engage trusted third parties to perform functions on our behalf:

• Cloud Infrastructure: AWS, Google Cloud Platform
• Payment Processing: Stripe (payment information is never stored on our servers)
• Email Services: SendGrid for transactional emails
• Analytics: Plausible (privacy-focused, no cookies)

5.2 Legal Requirements

We may disclose your information if required by law, regulation, or legal process, or to protect our rights, property, or safety, or that of our users or the public.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change in ownership or control of your personal information.

6. Your Rights and Choices

6.1 Access and Control

You have the right to:

• Access all personal data we hold about you
• Correct inaccurate or incomplete information
• Delete your account and associated data
• Export your data in standard formats
• Object to certain processing activities

6.2 Account Settings

Manage your privacy preferences through your Account Settings:

• Update profile information
• Change notification preferences
• Manage connected applications
• View and download your data
• Delete your account

6.3 Marketing Communications

You can opt out of marketing emails at any time by clicking the "unsubscribe" link in our emails or updating your preferences in account settings. Transactional emails (billing, security) cannot be disabled.

7. Cookies and Tracking

7.1 Essential Cookies

We use essential cookies necessary for the functioning of our Services, such as authentication and session management. These cannot be disabled.

7.2 Analytics

We use privacy-focused analytics (Plausible) that does not use cookies or collect personal data. No tracking scripts from third-party advertisers are ever used.

8. International Data Transfers

SimFusion operates globally. Your data may be transferred to and processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by the European Commission.

9. Children's Privacy

Our Services are not intended for children under 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through our Services at least 30 days before they take effect. The "Last updated" date at the top of this page indicates when this policy was last revised.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@simfusion.io
• Address: SimFusion Inc., 123 Innovation Drive, Suite 400, San Francisco, CA 94105, USA
• DPO: dpo@simfusion.io (for EU data protection inquiries)

12. Specific Rights by Region

12.1 European Economic Area (EEA), UK, and Switzerland

Under GDPR, you have additional rights including the right to data portability, restriction of processing, and to lodge a complaint with a supervisory authority. Our legal basis for processing is primarily contractual necessity and legitimate interests.

12.2 California Residents (CCPA/CPRA)

California residents have the right to know what personal information is collected, the right to delete personal information, the right to opt-out of the sale of personal information (we do not sell data), and the right to non-discrimination for exercising privacy rights.

12.3 Other Jurisdictions

Residents of Brazil (LGPD), Canada (PIPEDA), Australia, and other jurisdictions may have additional rights under local privacy laws. Contact us for jurisdiction-specific information.