Your California Privacy Rights
Last Updated: November 12, 2025
1. Scope of this Notice
This document supplements the Simola Privacy Policy and provides specific information for residents of California. It describes your rights under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA).
2. Your Rights under the CCPA/CPRA
As a California resident, you have the following rights regarding your personal information:
- Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we have shared it.
- Right to Delete: You have the right to request the deletion of your personal information that we have collected, subject to certain exceptions (for example, if we need to retain the information to complete a transaction, for security purposes, or for legal compliance).
- Right to Correct: You have the right to request the correction of inaccurate personal information that we maintain about you. You can update much of your Account Information directly within your account settings.
- Right to Opt-Out of Sale / Sharing: You have the right to opt-out of the "sale" of your personal information or the "sharing" of it for cross-context behavioral advertising. Simola does not sell your personal information for monetary value, nor do we "share" it for cross-context behavioral advertising purposes.
- Right to Limit Use and Disclosure of Sensitive Personal Information (SPI): You have the right to limit the use and disclosure of your SPI. Simola does not use or disclose SPI beyond what is necessary to provide the services you have requested (e.g., using account credentials for login) and for other permitted business purposes.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. This means we will not deny you services, charge you different prices, or provide a different level or quality of service.
3. Information We Collect (Right to Know)
In the last 12 months, we have collected the following categories of personal information, as described in our Privacy Policy. We do not knowingly collect information from individuals under the age of 18.
| Category of Information | Business Purpose for Collection | Shared with (Categories of 3rd Parties) |
|---|---|---|
| A. Identifiers (e.g., name, email address, company name, IP address) |
Provide & operate the service; Process transactions; Security & fraud prevention; Communicate with you | Service Providers (Hosting, Payment); Legal Authorities (if required); Business Transfer partners |
| B. Customer Records Information (e.g., payment transaction details processed by our partners) |
Process transactions | Service Providers (Payment) |
| C. Internet or Network Activity (e.g., interaction with our service, browser type, device info) |
Improve & personalize the service; Security & fraud prevention | Service Providers (Hosting, Analytics); Legal Authorities (if required) |
| D. Geolocation Data (e.g., approximate location from IP address) |
Security & fraud prevention; Improve & personalize the service | Service Providers (Hosting, Analytics) |
| E. Professional Information (e.g., your company name) |
Provide & operate the service | Service Providers (Hosting, Payment) |
| F. Other Information You Provide (e.g., Simulation Data, support messages) |
Provide & operate the service; Communicate with you | Service Providers (Hosting); Legal Authorities (if required) |
4. Data Retention
We retain your personal information for as long as needed to fulfill the purposes for which it was collected and to comply with our legal obligations. Our retention periods are detailed in Section 5.2 of our Privacy Policy, but can be summarized as:
- Account Information: Retained for the duration of your account’s existence. This data is permanently deleted from all systems within 90 days of account deletion.
- Campaign Data (including Simulation Data): Automatically and permanently deleted 90 days after the campaign is marked as completed, closed, or becomes inactive.
5. How to Exercise Your Rights
To exercise your Right to Know, Right to Delete, or Right to Correct, please submit a "verifiable consumer request" by contacting us at: privacy@simola.io.
Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf (an "authorized agent"), may make a verifiable consumer request related to your personal information.
We will need to verify your identity before processing your request. This may require you to provide sufficient information to match our records (such as your account email address) or to log in to your account to confirm your identity.
You have the right to opt-out of the "sale" or "sharing" of your personal information. To exercise this right, please click here: Do Not Sell or Share My Personal Information.