LEGAL

Privacy Policy

Last updated: June 2026

1. Who We Are

Assembly (“we,” “us,” or “our”) is a multi-agent market-simulation platform. Our website is assemblysimulator.com. You can contact us at team@assemblysimulator.com.

This policy explains exactly what we store, why, who processes it on our behalf, and the choices you have.

2. Account Information

Running a simulation requires an account. When you sign up, we store:

Your email address and, if you provide one, your name.
Authentication data. If you sign up with email and password, your password is stored only in hashed form by our auth provider — we never see or store it in plain text. If you sign in with Google, we receive your email and basic profile from Google; we never receive your Google password.
Account metadata such as account creation time and last sign-in time.
Session cookies required to keep you logged in. These are essential, not advertising or tracking cookies.

Accounts and authentication are managed for us by Supabase, our database and auth provider.

3. What We Collect and Store

We store the information you submit to the product:

Product briefs. When you submit a brief, its contents — product name, description, pricing, launch geography, launch status, target customers, competitors or alternatives, website URL, and any additional context — are sent to our simulation engine to run your simulation.
Your product one-liner. The optional short description you can add is stored with your run and shown on your report. It is for display only and is not sent to the simulation engine.
Simulation history. We store a record linking your account to each simulation you run — the product name, your one-liner, an internal run identifier, status, and timestamps — so your runs appear under “Previous Simulations” and you can re-open their reports.
Run outputs. The personas, ballots, debate transcript, and Market Reaction Report generated for your brief are retained (cached) so you can re-access your run without re-running it.
Credits. We store your credit balance and a record of your simulation usage so we can apply usage limits. If you use the “Request more credits” form, we receive the name, email, product one-liner, and company stage you provide so we can respond.
Contact & waitlist submissions. The name, email, and message you send via the contact or waitlist forms so we can respond and manage access.

4. How We Use Your Data

We use the data above only to:

Authenticate you and keep your account secure.
Run the simulations you request and return your reports.
Show you your own simulation history and reports.
Track and apply your credit balance, and respond to credit, contact, and waitlist requests.
Understand product usage and growth in aggregate (for example, how many simulations are run) to operate, support, and improve the Service.
Maintain, debug, and protect the Service against abuse (for example, enforcing rate limits and usage caps).

5. What We Don't Do

We do not place advertising or behavioral-tracking cookies. We do not track you across other websites or build advertising profiles. We do not sell or rent your personal data, and we do not share it with third parties for their own marketing.

6. Synthetic vs Real Data

Personas, ballots, debate turns, and Market Reaction Reports are synthetic — generated by AI for one specific brief and run scope, grounded in publicly available market evidence. They are not real interviews, real customers, or genuine market forecasts, and they do not represent specific real individuals. We do not store the identities of real people in our persona substrate.

7. Sub-processors

To deliver the Service we rely on a small number of trusted third-party providers that process data on our behalf:

Supabase — account, authentication, and database storage.
Vercel — application hosting.
Resend — transactional and confirmation email.
Our simulation engine and its large language model and cloud infrastructure providers — which process the contents of your brief while your run is being generated.

Each provider receives only what it needs to perform its task. We do not share your data with these providers for marketing or profiling, and the specific tools, retrieval sources, and orchestration that make up Assembly's simulation engine are part of our proprietary methodology and are not disclosed here.

8. Data Storage and Security

Your data is stored on managed cloud infrastructure (Supabase and Vercel) with industry-standard access controls and encryption in transit (HTTPS/TLS). Access to your simulations is restricted to your authenticated account; our application enforces server-side that you can only view runs you created. We apply rate limiting, usage caps, and other safeguards to protect the Service against abuse.

No method of transmission or storage is perfectly secure, but we work to protect your information and to limit what each provider can access.

9. Data Retention

We retain your account information for as long as your account is active, and your submitted briefs and run outputs for the operational lifetime of the simulation so you can re-open them.

When you delete (archive) a simulation, its cached report is erased and it no longer appears in your history. We retain a minimal record of the run (its internal identifier and timestamps) so we can enforce usage and credit limits and protect against abuse. You can request full deletion of your account and data at any time (see below).

10. Your Rights & Deletion

You have the right to:

Request a copy of the data we hold about you.
Request deletion of your account, briefs, run outputs, or contact records.
Correct inaccurate account information.
Opt out of any non-essential communications from us.

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA) or the EU/UK General Data Protection Regulation (GDPR). Email team@assemblysimulator.com to exercise any of these rights; we aim to honor deletion requests within 7 business days, and we will not discriminate against you for exercising them.

11. Cookies & Local Storage

We use only essential cookies required to sign you in and keep your session active. We also use your browser's local storage to remember interface preferences (such as your light/dark theme and sidebar layout). We do not use tracking or third-party advertising cookies.

12. Children's Privacy

Assembly is a business tool intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 16.

13. Changes to This Policy

We may update this policy as the product evolves. When we do, we will update the date at the top of this page. Continued use of Assembly after changes constitutes acceptance of the updated policy.

14. Contact

Questions about this policy? Reach us at team@assemblysimulator.com.