Privacy Policy

1. Introduction

This Privacy Policy explains how SimDuo, Inc. (“SimDuo,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information in connection with our website, public demo, SaaS platform, subscriptions, credit packs, trial-advocacy simulations, AI-generated scoring, and related services.

SimDuo provides trial-advocacy training simulations using fictional case materials. Users conduct spoken examinations of AI avatars and receive AI-generated scores and feedback evaluated against a proprietary rubric.

This Privacy Policy is written for the current version of SimDuo. The current version uses mock cases supplied by SimDuo and does not require users to upload real client files or real confidential matter materials. Users must not submit real client confidential information, attorney-client privileged information, attorney work product, protected health information, financial account information, sensitive student records, or other sensitive non-public information.

2. Scope

This Privacy Policy applies to:

1. visitors to the SimDuo website;
2. Public Demo users;
3. individual subscribers;
4. users who purchase or use credit packs;
5. Authorized Users of law firms, law schools, clinics, companies, or other Organizations;
6. instructors, administrators, and Organization account owners; and
7. individuals who communicate with us by email, form, or other business channels.

If you use SimDuo through an Organization, that Organization may control certain data associated with your use. In that context, SimDuo may process personal information on behalf of the Organization, subject to our agreement with that Organization.

3. Personal Information We Collect

3.1 Account Information

When you create or use an Account, we may collect:

1. name;
2. email address;
3. authentication credentials handled by our authentication provider (SimDuo does not receive your raw password);
4. role or title;
5. Organization membership;
6. seat assignment;
7. account status;
8. authentication records;
9. user permissions; and
10. support communications.

Authentication and database functions are provided through a reputable third-party cloud database and authentication provider.

3.2 Public Demo Lead Information

When you use the Public Demo, we may collect:

1. name;
2. email address;
3. institution or organization;
4. role or title;
5. areas of interest;
6. marketing-follow-up consent;
7. IP address for rate-limiting and abuse prevention;
8. demo transcript;
9. demo score and truncated feedback report; and
10. demo metadata and diagnostic logs.

3.3 Session Information

When you conduct a Session, we may collect and process:

1. live microphone audio, captured and streamed in real time;
2. speech-to-text transcript of your questions;
3. AI witness answers;
4. full Session transcript;
5. Session duration;
6. exam type;
7. selected witness;
8. witness temperament or settings;
9. credit consumption and plan information;
10. AI-generated numerical score;
11. AI-generated written feedback and coaching suggestions; and
12. diagnostic and error logs.

SimDuo persistently stores the text transcript, scores, written feedback, Session metadata, and diagnostic logs. SimDuo does not store raw microphone audio or avatar video recordings; your voice is processed in real time only to produce the transcript and drive the live Session.

3.4 Billing Information

We use Stripe to process payments. SimDuo may store:

1. Stripe customer ID;
2. Stripe subscription ID;
3. plan type;
4. subscription status;
5. credit balance;
6. purchase history;
7. invoice status;
8. payment status; and
9. limited billing metadata.

SimDuo does not store full card numbers, card verification values, or full bank account credentials.

3.5 Product Analytics and Diagnostic Logs

We may collect limited behavior and diagnostic event logs, such as:

1. login events;
2. page or feature usage;
3. Session start and end events;
4. credit usage events;
5. error logs;
6. device/browser type;
7. approximate location inferred from IP address (including by our infrastructure providers);
8. performance data; and
9. security and rate-limiting data.

3.6 Communications

If you contact us, request support, book a demo, respond to marketing, or communicate by email, we may collect your name, email address, organization, role, message contents, and related communications metadata. SimDuo uses a third-party business email and productivity provider for these communications.

4. Microphone, Voice Capture, and Transcription

The Service requires microphone access to conduct spoken simulations. Your browser or device will generally ask for permission before enabling microphone access.

By starting a Session or Public Demo, you consent to SimDuo and its providers capturing, streaming, processing, and transcribing your voice to provide the Service. This processing is necessary to:

1. allow the AI avatar to understand your questions;
2. generate AI witness responses;
3. create a transcript;
4. score your performance against the rubric;
5. generate written feedback;
6. maintain usage and credit records;
7. troubleshoot errors; and
8. protect the security and reliability of the Service.

We do not use voice information to identify you biometrically or create a voiceprint for identity verification.

5. How We Use Personal Information

We use personal information for the following purposes:

1. to provide, operate, and maintain the Service;
2. to create and manage Accounts;
3. to authenticate users;
4. to provide live AI avatar Sessions;
5. to transcribe spoken examinations;
6. to generate scores, feedback, and reports;
7. to administer subscriptions, credits, and billing;
8. to provide the Public Demo;
9. to follow up with Public Demo leads who consent to marketing contact;
10. to provide support and respond to inquiries;
11. to manage Organization accounts, seats, classes, and users;
12. to monitor usage, diagnose issues, and improve reliability;
13. to detect, prevent, and respond to abuse, fraud, security incidents, and prohibited uses;
14. to enforce our Terms of Service;
15. to comply with legal obligations;
16. to maintain business, accounting, and tax records; and
17. to develop and improve the Service using aggregated, de-identified, or anonymized information.

Identifiable data and product improvement. SimDuo does not use identifiable Session transcripts, demo transcripts, scores, or written feedback for human review, product or model evaluation, prompt or model improvement, training, fine-tuning, or internal quality assurance, except (a) as reasonably necessary to provide, secure, troubleshoot, or support the Service (and, for Public Demo data, to operate, evaluate, and improve the Public Demo and to inform follow-up communications), or (b) with your consent or, for Organization accounts, the consent of your Organization. Any use of this information for product improvement, model evaluation, or benchmarking is performed only on aggregated, de-identified, or anonymized data.

6. AI Processing

SimDuo uses AI systems to provide the Service. Depending on the feature, personal information or Customer Content may be processed by third-party providers for:

1. real-time avatar interaction;
2. speech-to-text transcription;
3. voice and video rendering;
4. real-time audio/video transport;
5. transcript analysis;
6. rubric-based scoring;
7. written feedback generation; and
8. abuse detection, diagnostics, and reliability.

For scoring and feedback, SimDuo sends Session transcripts and related rubric context to a third-party large-language-model provider to generate AI scoring and coaching feedback.

Under the commercial/API terms of the AI provider SimDuo uses, the provider does not, by default, use inputs or outputs submitted through its API to train its models. Such use occurs only on an opt-in basis — for example, if a customer submits explicit feedback or bug reports, or enrolls in the provider’s developer partner program. The provider retains API data for a limited period for operational and abuse-detection purposes. SimDuo has not enrolled in any program that would permit the provider to train on your data.

7. Mock-Case Data Posture

The current Service is designed for mock trial-advocacy training using fictional cases supplied by SimDuo. Users must not provide real client matter information or privileged information.

Sessions are processed by third-party technology providers and stored as transcripts; therefore, users should not treat the Service as a privileged channel for real client communications. SimDuo does not act as a lawyer, law firm, litigation consultant, expert witness, or privilege-preserving service provider unless expressly agreed in a separate signed written agreement.

8. Organization Accounts and Admin Access

If you access SimDuo through an Organization, the Organization may be able to:

1. create, invite, suspend, or remove users;
2. assign roles and seats;
3. assign specific witness examinations;
4. view usage activity;
5. view credits and billing information;
6. access transcripts, scores, feedback, and reports;
7. download or export Organization Data;
8. request deletion or retention of Organization Data; and
9. manage training groups and Organization settings.

Instructors and Organization Administrators can view the Sessions of students in their Organization — including transcripts, per-category scores, and written feedback — through the Organization roster and per-student drill-down. Organizations are responsible for informing their Authorized Users of this visibility.

If your Account is provided by an Organization, direct privacy questions about Organization-controlled use to that Organization first. SimDuo may refer certain requests to the Organization.

9. How We Share Personal Information

We do not sell personal information in the ordinary meaning of “sell.”

We may share personal information as follows:

9.1 Service Providers and Subprocessors

We share information with service providers that help us operate the Service. We describe them here by function. The categories of providers include:

SimDuo maintains a current list of its subprocessors and will provide it, together with applicable data-processing terms, to Organization customers on request or under a data-processing agreement.

9.2 Organizations

If you use SimDuo through an Organization, we may share your Organization Data with that Organization and its Administrators according to the Organization’s account settings and agreement.

9.3 Legal, Safety, and Compliance

We may disclose personal information if we believe disclosure is necessary to:

1. comply with law, subpoena, court order, or legal process;
2. enforce our Terms of Service;
3. protect the rights, safety, property, or security of SimDuo, users, providers, or others;
4. investigate fraud, abuse, security incidents, or prohibited uses;
5. respond to government or regulatory requests; or
6. preserve records in connection with a dispute.

9.4 Business Transfers

We may disclose or transfer personal information in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, diligence process, or similar corporate transaction.

9.5 Aggregated or De-Identified Information

We may use and share aggregated, anonymized, or de-identified information that does not reasonably identify an individual or Organization.

10. Marketing Communications

If you submit a Public Demo lead form or otherwise consent to marketing, we may contact you about SimDuo products, demos, pilots, updates, and related offerings.

You may opt out of marketing emails by using the unsubscribe link in an email or by contacting info@simduo.com. Even if you opt out of marketing, we may still send transactional or service-related messages.

11. Cookies and Similar Technologies

SimDuo uses strictly-necessary cookies and local storage to keep you signed in, secure the Service, and remember basic preferences. SimDuo does not use third-party advertising cookies or cross-site tracking. If SimDuo adds non-essential analytics or advertising technologies, it will update this section and provide any legally required consent or opt-out controls.

12. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy — including to provide the Service; comply with legal, tax, and accounting obligations; resolve disputes; prevent fraud; and maintain security. When personal information is no longer needed for these purposes, we delete or de-identify it. Some records are retained longer where required by law (for example, billing and tax records), and information may persist in encrypted backups until those backups cycle.

If you request deletion, we will delete or de-identify eligible information unless retention is required or permitted by law, Organization instruction, dispute preservation, security needs, billing obligations, backups, or legitimate business purposes.

13. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These may include access controls, authentication, encryption in transit, hosted database security controls, provider security controls, logging, monitoring, and internal access limitations.

No system is completely secure. Users are responsible for safeguarding credentials, devices, browsers, microphones, networks, and Organization access.

14. International Data Transfers

SimDuo is based in the United States. Personal information may be processed in the United States and other countries where SimDuo or its providers operate.

If GDPR, UK GDPR, Swiss data-protection law, or other international privacy laws apply, appropriate transfer mechanisms may be required, such as standard contractual clauses, data-processing agreements, or participation in recognized data-transfer frameworks.

SimDuo does not intentionally target or market to the EEA, UK, or Switzerland, but may accept users located there. Where it does, SimDuo relies on standard contractual clauses and a data-processing agreement for such transfers and honors applicable data-subject rights.

15. Privacy Rights

Depending on your location and the nature of your relationship with SimDuo, you may have rights to:

1. access personal information;
2. correct personal information;
3. delete personal information;
4. receive a copy of personal information;
5. object to or restrict certain processing;
6. withdraw consent where processing is based on consent;
7. opt out of marketing communications;
8. appeal certain privacy-rights decisions, where applicable; and
9. lodge a complaint with a regulator, where applicable.

To exercise rights, contact info@simduo.com.

If your data is controlled by an Organization, we may direct your request to that Organization or process the request according to the Organization’s instructions.

We may verify your identity before responding. We may decline or limit requests where permitted by law, including where information is needed for legal compliance, security, fraud prevention, dispute resolution, billing, backups, or Organization-controlled records.

16. U.S. State Privacy Notices

Certain U.S. state privacy laws may provide additional rights. SimDuo will comply with applicable state privacy laws to the extent they apply.

17. GDPR / UK GDPR Notice

If GDPR or UK GDPR applies, SimDuo’s legal bases may include:

1. Contract: to provide the Service, accounts, subscriptions, credits, Sessions, scoring, and support;
2. Consent: for microphone access, Public Demo marketing follow-up, optional marketing communications, and certain cookies where required;
3. Legitimate interests: to secure, maintain, analyze, improve, and troubleshoot the Service; prevent abuse; communicate with users; and develop the business;
4. Legal obligation: to comply with tax, accounting, legal, regulatory, and law-enforcement obligations; and
5. Legal claims: to establish, exercise, or defend legal claims.

Where SimDuo processes Organization Data on behalf of an Organization, the Organization may be the controller and SimDuo may act as processor or service provider, depending on applicable law and the agreement.

18. Children and Students

SimDuo’s self-service Service is intended for adults. You must be at least 18 years old to create a self-service Account, consistent with the Terms of Service. The Service is not directed to, and SimDuo does not knowingly collect personal information from, children under 13.

Under-18 individuals may use SimDuo only through an Organization — such as a law school, university, high school, or mock-trial or pre-law program — that has entered into a written agreement with SimDuo. In that case, the Organization is responsible for obtaining any required parental or guardian consent, providing required notices, and determining and meeting its obligations for any student or education records. SimDuo does not market the self-service Service directly to minors.

19. Educational Records

If a law school, university, clinic, or educational institution uses SimDuo, Session transcripts, scores, reports, and usage data may be considered education records under applicable law or school policy. The educational institution is responsible for determining its legal obligations and providing required notices and consents.

20. Professional, Confidential, and Privileged Information

Do not submit real client confidential information, privileged communications, attorney work product, or real matter materials. SimDuo’s current Service is not designed to receive such information.

21. Automated Decision-Making

The Service generates automated scores and feedback for training purposes. These outputs are not legal advice, certification decisions, employment decisions, bar-admission decisions, academic grades by SimDuo, or determinations of professional competence.

22. Third-Party Links and Services

SimDuo is not responsible for the privacy practices of third-party services it does not control, such as the payment processor’s checkout and billing pages; review their privacy notices before using them.

23. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice by posting the updated policy, emailing users, or using another reasonable method. Continued use of the Service after the effective date means you acknowledge the updated policy.

24. Contact Us

Questions or requests may be sent to:

SimDuo, Inc.

Email: info@simduo.com