Privacy

Two kinds of data

Project SIMS handles two entirely separate categories, and conflating them is the source of most confusion about platforms like this one.

Your account data is what you give us when you use the product: your name, work email, organisation, password hash, session records, and the studies you create. We use it to operate your account and for nothing else. It is not sold, not shared with advertisers, and not used to train any model.

Platform behavioural data is publicly visible activity collected from TikTok, Instagram, YouTube and X — posts, engagement counts, follower relationships, public comments and transcripts. This is the substrate cohorts are compiled from. It concerns third parties, not you.

What we do with behavioural data

• Accounts are aggregated into cohorts of at least 100. Cohorts below that floor are discarded at construction, not hidden at display time.
• Cohort descriptions contain aggregate counts and unattributed verbatim text. They do not contain names, handles, or channel identifiers.
• Individual account records are retained so operators can audit whether a cohort is built from the accounts it claims. They are admin-gated, never sent to a language model, and never included in an export.
• We do not ingest private messages, purchased contact lists, or anything behind a login the account holder did not make public.

Passwords and sessions

Passwords are hashed with bcrypt at cost 11 and are never stored, transmitted, or logged in plaintext. Session tokens are random 256-bit values; only a SHA-256 hash of the token is stored, so a database read cannot be replayed as a login. Sessions expire after 14 days, and suspending an account destroys its live sessions immediately.

Retention

• Account records: for the life of the account, then 30 days.
• Session records: until expiry, then until the next purge.
• Audit log entries: 24 months — they are the record of privileged action.
• Studies and their results: until you delete them.

Data subject requests

If you appear in the behavioural data and want your account excluded, write to privacy@projectsims.io with the handle and platform. Exclusion removes the account from cohort construction going forward and from existing membership tables. Where an account was part of an already-published aggregate, the aggregate is rebuilt rather than annotated.

For your own account data, the same address handles access, correction, export and deletion requests. We respond within 30 days.

Sub-processors

The data plane runs on bare-metal hardware we operate directly. The application database is Convex. Simulation calls are made to Anthropic’s API and carry only cohort aggregates and the stimulus you wrote — never account-level rows, and never your personal data.