Privacy Policy

We collect the following information when you use Behavioural Engines:

• Account data — name, email address, and authentication credentials managed by Clerk
• Simulation data — parameters and results of simulations you run, stored in our database (NeonDB/PostgreSQL) against your user ID
• Usage data — daily simulation counts stored ephemerally in Redis for quota enforcement (auto-expires at UTC midnight)
• Payment data — billing is handled entirely by Stripe. We do not store card details. We store your Stripe subscription status in your Clerk account metadata
• Analytics — anonymised page view data via Google Analytics and Vercel Analytics
• Error reports — if an error occurs, technical details (stack trace, browser/OS, request path) may be sent to Sentry to help us fix it

If you respond to an experiment survey via a shared link, no account is required and we do not collect your name or email. We store:

• Your choices — the options you selected in each task, and the behavioural parameters fitted from them
• A respondent token — a random identifier kept in your browser's local storage so the same device receives the same result and cannot submit twice
• An anonymised network identifier — a one-way salted hash derived from your IP address, used solely to flag possible duplicate submissions. The raw IP address is never stored, and the hash cannot be linked across different experiments

Your responses and fitted parameters are shared with the person who created the experiment. When an experiment is deleted, its survey link is disabled and results are no longer accessible to the creator; you may request permanent erasure of your response data at any time by contacting us.

• To provide and operate the simulation platform
• To enforce fair usage quotas
• To manage your subscription and billing
• To store your simulation history for retrieval
• To communicate account and subscription updates

Simulation data is stored in a PostgreSQL database hosted on NeonDB (EU region). Authentication is handled by Clerk with industry-standard encryption. Payments are processed by Stripe with PCI-DSS compliance.

Redis quota data expires automatically and contains no personally identifiable information beyond hashed IP addresses for anonymous users.

We use the following third-party services:

• Clerk — authentication and user management
• Stripe — payment processing
• Railway — backend hosting
• NeonDB — database hosting
• Google Analytics & Vercel Analytics — anonymised usage analytics
• Sentry — error monitoring and crash reporting

Each provider operates under their own privacy policy and data protection standards.

Simulation history is retained for the lifetime of your account. Experiment response data is retained while the experiment exists. You may request deletion of your data at any time by contacting us. Account deletion removes all associated simulation records.

Under UK GDPR and applicable data protection law, you have the right to: access your data, correct inaccuracies, request deletion, and object to processing. Contact us to exercise any of these rights.

We use session cookies required for authentication (via Clerk) and analytics cookies (via Google Analytics, which can be blocked with standard browser controls or extensions). We do not use tracking cookies for advertising. Survey respondents receive a random token in browser local storage (not a cookie) used only to prevent duplicate submissions.

Data-related enquiries: joespeed@behaviouralengines.com