Privacy notice

The operator of this service acts as controller for account and billing data, and as processor for the scenario content, evidence and transcripts a customer submits. Named controller details and a contact address are provided on request and in the customer agreement.

Account data: name, work email, organisation, role, authentication metadata and sign-in events. Usage data: pages visited, features used, timestamps, coarse device information and error diagnostics. Customer content: scenarios, uploaded documents, evidence items, simulation transcripts, generated reports and any voice recordings a user chooses to create.

Do not upload special-category data, regulated health or payment card data, or material you are not permitted to disclose to a processor.

To provide and secure the service, authenticate users, run the simulations a customer requests, produce reports, support customers, meet legal obligations, and improve reliability. Legal bases where applicable: performance of a contract, legitimate interests in operating and securing the service, consent where separately requested, and compliance with law.

Simulations are produced with third-party model providers listed in the subprocessors page. Prompts and content necessary to produce a response are transmitted to those providers. Where a provider offers it, we use configurations that exclude customer content from provider model training. Output is synthetic and may be inaccurate; it is decision support, not advice.

Customer content is retained for the life of the account unless a shorter period is agreed in writing. Deleting a scenario, run or evidence item removes it from the application and from backups within the backup rotation window. Account and billing records are kept for the period required by law.

Depending on where you live you may request access, correction, deletion, portability, or restriction of your personal data, and may object to certain processing. Requests are handled through the contact address in the customer agreement; where we act as processor, we refer end-user requests to the customer.

The service and its providers may process data outside your country. Where required, we rely on approved transfer mechanisms such as standard contractual clauses with our providers.

Material changes to this notice are announced in the application before they take effect.