Data protection

Privacy Policy

CrushSim places particular importance on protecting your personal data. This policy explains what data is collected, why, and what your rights are.

Last updated · June 23, 2026

1.Data controller

The data controller is CrushSim, reachable at hello@crushsim.com. This policy applies to all services accessible through the CrushSim platform.

2.Data collected

  • Account data: email address, password (encrypted), language and preferences.
  • Usage data: simulation sessions, entered content, generated reports, activity history.
  • Voice data: temporary audio recordings needed for voice simulations.
  • Payment data: handled exclusively by Stripe; CrushSim stores no banking details.
  • Technical data: IP address, browser type and logs needed for the security of the service.

3.Purposes and legal basis

Data is processed for the following purposes:

  • Provide, operate and improve the service (performance of the contract).
  • Manage subscriptions, payments and billing (performance of the contract and legal obligation).
  • Ensure security, prevent fraud and abuse (legitimate interest).
  • Communicate with you about your account and support (performance of the contract).

4.AI conversations and content

The text and voice recordings submitted during simulations are transmitted to our artificial-intelligence providers solely to generate responses and training reports. Voice recordings are not kept beyond what is necessary to process the session.

5.Processors and sharing

CrushSim neither sells nor rents your data. It may be shared with processors strictly necessary to operate the service, bound by confidentiality obligations:

  • Supabase — database hosting and authentication.
  • Stripe — payment and subscription processing.
  • AI providers (OpenAI, Anthropic) — generation of simulations and reports.
  • Resend — sending of transactional emails.

Some of these providers may be located in different countries; in that case, any data transfer is governed by appropriate contractual safeguards.

6.Retention period

Data is kept for as long as necessary to provide the service and while the account is active. When the account is deleted, personal data is erased or anonymised, subject to applicable legal retention periods (notably for accounting and billing).

7.Your privacy rights

Depending on your state of residence, you may have the following rights over your data:

  • Right of access, rectification and erasure of your data.
  • Right to restriction of and objection to processing.
  • Right to portability of your data.
  • Right to withdraw your consent at any time, without retroactive effect.
  • Right to lodge a complaint with the data protection authority applicable in your jurisdiction.

To exercise these rights, contact us at hello@crushsim.com. You will receive a reply within one month.

8.Cookies

CrushSim uses cookies strictly necessary to operate the service (authentication, language preference, security). No third-party advertising cookie is placed without your consent.

9.Security

Appropriate technical and organisational measures are implemented to protect your data against unauthorised access, loss or alteration (password encryption, secure connections, restricted access).

As no system is infallible, CrushSim cannot guarantee absolute security, but undertakes to notify any data breach under the conditions provided for by law.

10.Contact

For any question about this policy or the processing of your data: hello@crushsim.com.