Privacy Policy
1. Introduction
Bay Area Experiences Ventures ("Company," "we," "us," or "our") operates Simulacrum at simulacrumai.io (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your personal information, with particular focus on the resume data you upload to the Service.
By using the Service, you agree to the collection and use of information in accordance with this policy. This policy is incorporated into and subject to our Terms of Service.
2. Information We Collect When You Upload a Resume
When you choose to upload a resume or import your LinkedIn profile, we collect the following categories of personal information:
- Resume file: The raw document you upload (PDF or DOCX), stored in our file storage system.
- Extracted Data: Structured data extracted from your resume, including employment history, education, skills, professional accomplishments, compensation history (if present), and contact details.
- Generated Content: AI-generated analysis of your Extracted Data, including Expertise Zones, income projections across five layers, agent action recommendations, and Growth Command Center outputs.
- Consent Record: A timestamp, IP address, and record of the specific consent you provided before the upload, including the version of this Privacy Policy and our Terms of Service you agreed to.
- Metadata: File type, upload timestamp, and usage data (which features you interact with).
3. How We Use Your Resume Data
We use your resume data exclusively for the following purposes and do not use it for any other purpose without your explicit consent:
- Generating your Simulacrum wealth simulation — extracting Expertise Zones, mapping income streams across Layers 1 through 5, and generating AI agent action recommendations.
- Powering AI agent actions — resume content informs the prefill inputs for all 49 agent actions across the five income layers.
- Personalizing your Growth Command Center — your Expertise Zones and Simulation progress are displayed in your GCC dashboard.
- Enabling advisor visibility — if you explicitly grant an advisor or partner access to your Simulation via Settings / Visibility, your Simulation data (but not your raw resume file) becomes visible to that advisor in read-only mode.
4. Sub-Processors — Resume Data
The following third-party service providers process your resume data on our behalf. Each is bound by contractual data processing obligations consistent with applicable privacy law:
| Sub-Processor | Purpose | Data Transferred | Location |
|---|---|---|---|
| Anthropic, PBC | AI analysis of resume content — Expertise Zone extraction, income projections, agent action generation | Full resume text and structured extraction | United States |
| SendGrid (Twilio) | Transactional email delivery (account verification, notifications, retention warnings) | Email address, name | United States |
| Stripe | Payment processing (optional, only if you purchase a simulation) | Payment card data (processed directly by Stripe, not stored by us) | United States |
Anthropic is our primary sub-processor for resume data. Anthropic is contractually prohibited from using your resume content to train AI models. For details, see Anthropic's Privacy Policy and their API data processing terms.
5. Data Retention
Your resume file, Extracted Data, and Generated Content are retained for up to 15 months from the date of your last sign-in to Simulacrum. If you do not sign in for 15 consecutive months:
- You will receive an email notification at your registered address 30 days before scheduled deletion.
- If you sign in within 30 days of that notification, your retention window resets and no data is deleted.
- If you do not sign in, all account data (resume files, Extracted Data, Simulation records, agent action outputs, GCC data, and advisor access records) will be permanently deleted.
Consent records are permanently retained as a legal audit trail, even after account deletion, as required by applicable law.
Data requested for deletion by the user will be permanently deleted within 90 days of the request, regardless of the last sign-in date.
6. Your Rights
6.1 All Users
- Access: You may request a copy of your personal data by contacting simi@simulacrumai.io.
- Deletion: You may delete your resume and all associated Simulation data at any time from your account settings. Full account deletion is available in Settings / Account.
- Correction: You may update your resume text and profile information directly in the Service.
- Consent withdrawal: You may withdraw your consent for data processing by deleting your resume. Note that withdrawal will result in deletion of all Simulations generated from that resume.
6.2 California Residents (CCPA)
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act:
- Right to know what personal information we collect and how we use it.
- Right to delete personal information we have collected about you (subject to certain exceptions).
- Right to opt out of the sale of personal information. We do not sell your personal information.
- Right to non-discrimination for exercising your CCPA rights.
To exercise your CCPA rights, contact us at simi@simulacrumai.io or use the deletion tools in your account settings.
6.3 EEA / UK Residents (GDPR / UK GDPR)
If you are located in the European Economic Area or the United Kingdom, you have additional rights under the GDPR / UK GDPR, including the right to data portability and the right to lodge a complaint with your local supervisory authority. To exercise your rights, contact simi@simulacrumai.io. Our legal basis for processing your resume data is your explicit consent, which you provide through the consent gate before uploading.
7. Security
We implement industry-standard security measures to protect your personal information, including encrypted storage of sensitive tokens (LinkedIn access tokens), HTTPS for all data in transit, and access controls limiting who can view your resume data. However, no method of transmission over the internet or method of electronic storage is 100% secure.
8. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact simi@simulacrumai.io.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email at your registered address and update the "Last Updated" date at the top of this page. If the changes affect how we process your resume data, you may be asked to provide renewed consent before your next upload.
10. Contact
For privacy-related questions, data access requests, or deletion requests:
simi@simulacrumai.io
Bay Area Experiences Ventures · Santa Clara, California