Privacy Notice
Simeras, Inc.
Effective date: October 16, 2026
Version: 1.0
This Privacy Notice explains what information Simeras, Inc. ("Simeras," "we," "us," or "our") collects when you visit simeras.ai (the "Site"), contact us, do business with us, or apply to work with us, how we use it, and the choices you have. Simeras is a Delaware corporation based in New York, New York, and is the controller of the personal information described in this Notice unless we say otherwise.
This Notice covers the Site and our business relationships. Access to the Simeras platform by a customer's personnel is governed by the customer's written agreement with us and the data processing agreement that forms part of it; Section 6 explains how that interacts with this Notice.
1. The Site collects very little
The Site is an informational website. It does not require or offer accounts, does not accept customer data, and does not provide any simulation, prediction, or other AI-generated service to visitors.
We do not use analytics services, advertising pixels, or tracking cookies on the Site, and we do not sell personal information or share it for cross-context behavioral advertising.
Server logs. The Site is delivered through Cloudflare, which provides content delivery and security for us. Cloudflare and our hosting provider automatically record basic request logs when you access the Site: IP address, browser and device type, the pages requested, the referring page, timestamps, and error and performance information. We use these logs to operate and secure the Site. We do not use them to build profiles of visitors. Logs are retained for a short rolling period and then deleted or reduced to aggregate counts.
Cookies. The Site itself sets no cookies. Cloudflare may set cookies that are strictly necessary for security, such as distinguishing people from automated traffic. These do not track you across sites and do not require consent under European or UK law. We do not set analytics, preference-tracking, or marketing cookies. If that changes, we will update this Notice first.
Fonts, maps, and scripts. The Site serves its typefaces, scripts, and the animated city map from our own domain. Your browser does not contact Google Fonts or any other third-party service to render the page. The map credits OpenStreetMap as a data source; the Site does not load anything from OpenStreetMap when you visit.
Contacting us. The Site invites you to email us. When you do, we receive your email address, your name if you include it, and whatever you write. We use it to respond to you and, if you are inquiring on behalf of a company, to follow up about our services.
2. Information we collect in the course of business
If you are a prospective or existing customer, investor, partner, vendor, or adviser, or you represent one, we collect and keep business contact information: name, employer, title, business email and phone number, the content of our correspondence and meetings, and notes about the relationship. We obtain it from you, from your colleagues, from publicly available professional sources, and from introductions.
If we share financing materials with you through a tracked link or data room, the provider of that tool records your email address, which pages you viewed, for how long, and whether you downloaded a file. We use this to manage a financing process and to know who has seen what.
3. Job applicants
We hire through direct outreach and referrals rather than a careers page. If you are considered for a role, we collect what you send us (résumé, contact details, work history, references) and what we learn in interviews. We use it to evaluate your candidacy, communicate with you, and meet legal obligations. We do not use automated tools to make or materially assist hiring decisions. We keep applicant information for twelve months after a decision unless you ask us to delete it sooner or agree to be considered for future roles.
4. How we use information, and our legal bases
| Purpose | Information | Legal basis (EU and UK) |
|---|---|---|
| Operate and secure the Site | Server logs, strictly necessary cookies | Legitimate interests (security and reliability) |
| Respond to inquiries and pursue business relationships | Contact details, correspondence | Legitimate interests (running our business); performance of a contract where one exists |
| Conduct a financing | Investor contact details, data-room activity | Legitimate interests (raising capital) |
| Evaluate candidates | Applicant information | Legitimate interests (hiring); legal obligations |
| Comply with law, enforce agreements, protect rights | Any of the above | Legal obligation; legitimate interests |
We do not send marketing email unless you have asked for it, and you can opt out at any time.
5. How the simulation is built, and what it does not contain
Simeras operates a simulation of consumer behavior. The simulated population consists of computer-generated entities whose characteristics are drawn from licensed and public statistical sources. The population is designed so that no entity is created from, represents, or can be linked to an identifiable person, and we do not collect information from survey participants, panelists, or members of the public to build it.
Some of the sources we license to keep the simulation current, such as news and market data, may include information about identifiable people, for example the author of an article. We use such information only to derive aggregate signals for the simulation, we remove direct identifiers when we ingest it, we do not use it to create or describe any simulated entity, and we delete it on the schedule our licenses and this Notice require. Our legal basis under the GDPR and UK GDPR is our legitimate interest in operating the simulation; you may object at any time using the contact in Section 14. Because this information comes from third parties rather than from the individuals concerned, this Section is our notice under Article 14 of the GDPR.
Where we hold information in de-identified or aggregated form, we maintain it in that form, do not attempt to re-identify it except to test whether our de-identification methods work, and require anyone who receives such information from us to commit to the same.
6. Customers and the Simeras platform
Our customers are companies. When a customer uses our platform, its personnel access a workspace under the customer's agreement with us, and we process the information the customer provides as the customer's service provider (a "processor" under European law) under a data processing agreement. We ask customers to provide market and outcome data in aggregated or de-identified form; we do not need, and ask customers not to send, names or other direct identifiers of their own customers. We do not use customer data to train models offered to other customers, and we delete it on the customer's written request as the agreement provides.
We are the controller of platform account information (names, business emails, credentials, and access logs of a customer's authorized users) for the limited purposes of administering accounts and keeping the platform secure. Account information is kept for the life of the account and twelve months after it closes; access logs for twelve months.
7. How we share information
We share personal information only with:
- Service providers that host the Site, run our email and documents, manage our contacts, provide our data room, and process payments, each acting on our instructions and under contract;
- Professional advisers, such as lawyers, accountants, and auditors;
- Actual and prospective investors and their advisers, under confidentiality obligations, where business information about a customer relationship is relevant to a financing;
- Authorities, where required by law, legal process, or to protect rights, safety, and security; and
- A successor, in connection with a merger, acquisition, financing, or sale of assets, subject to this Notice.
We do not sell personal information, we have not sold or shared it in the preceding twelve months, and we do not disclose it to third parties for advertising.
8. International transfers
We are based in the United States and process information here. If you are in the European Economic Area, the United Kingdom, or Switzerland, your information is transferred to the United States. Where we act as a processor for a customer in those regions, our data processing agreement incorporates the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. For information we collect directly, we rely on those clauses with our service providers and on the safeguards described in this Notice. You may ask us for more information about our transfer arrangements.
9. Retention
We keep personal information only as long as needed for the purposes above:
| Category | Retention |
|---|---|
| Site server logs | 30 days, then deleted or aggregated |
| Inquiries and business contacts | While the relationship is active, plus 24 months |
| Data-room and financing records | Until the financing closes, plus 12 months |
| Applicant information | 12 months after the decision |
| Platform account information | Life of the account, plus 12 months; access logs 12 months |
| Customer-provided data | As the customer agreement provides; deleted on written request |
We may keep information longer where the law requires or to resolve a dispute, and we may keep aggregated information that does not identify anyone indefinitely.
10. Security
We protect information with access controls limited to named staff, encryption in transit and at rest, and logging of administrative access. Our simulation runs on infrastructure we operate. We have not yet completed a SOC 2 examination; we describe our current practices to customers on request. No system is perfectly secure, and we will notify affected people and customers of any personal-data breach as the law and our agreements require.
11. Your rights and choices
Everyone. You may ask us what personal information we hold about you, ask us to correct or delete it, and object to or ask us to restrict its use. Email [email protected]. We will verify your request and respond within the time the law allows. We will not treat you differently for exercising your rights.
European Economic Area, United Kingdom, and Switzerland. You have the rights of access, rectification, erasure, restriction, portability, and objection, including the right to object to processing based on our legitimate interests. You may withdraw consent at any time where we rely on it. You may also lodge a complaint with your data protection authority; in the UK, that is the Information Commissioner's Office. If you complain to us first, we will acknowledge your complaint within 30 days.
California. California residents have the rights to know, delete, and correct, and the right to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of; we treat a Global Privacy Control signal as a request to opt out of any future sale or sharing. You may use an authorized agent, and we may ask the agent for proof of authority. The categories of personal information we collect, for the audiences in Sections 1 to 3 and 6, are identifiers, professional or employment-related information, and internet or other electronic network activity information. We do not collect sensitive personal information, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.
Other US states. Residents of states with comprehensive privacy laws may have similar rights of access, correction, deletion, and portability, and the right to opt out of targeted advertising, sales, and profiling. We do none of those three. Contact us as above to exercise any right; if we decline a request, we will tell you why and how to appeal.
12. Children
The Site and our services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children. The simulation includes entities with demographic attributes of every age group; these are computer-generated and do not correspond to any real child. If you believe a child has provided us personal information, contact us and we will delete it.
13. Changes to this Notice
We may update this Notice. We will post the revised version here with a new effective date and, for material changes affecting customers, notify customer administrators. We will not expand how we use information already collected without providing notice and, where the law requires, obtaining consent.
14. Contact
Simeras, Inc.
Registered office: 251 Little Falls Drive, Wilmington, DE 19808, USA
[email protected]
© 2026 Simeras, Inc. All rights reserved.