Privacy Notice

Submission Bridge LLC operates Economic Twin. This notice explains how we handle personal information when you visit our site, create an account, use our analyst or API, or purchase services.

Effective September 8, 2026 · Version 2026-09-08

1. Information we collect

• Account and contact information: email, optional display name, authentication identifiers and provider information, verification and access status, contact requests, and records of policy acceptance. Google sign-in shares the account information needed to authenticate you. Authentication credentials are handled by our authentication provider.
• Your research: prompts, conversations, inputs you submit, query criteria, saved simulations, generated reports, lists, and associated identifiers and metadata. Material you submit may contain personal information; submit only information you are authorized to provide.
• Usage and technical information: request timestamps, account-linked activity, API key identifiers and scopes, credit and compute usage, model/token usage, request outcomes, IP addresses, browser/device information, and diagnostic or error events. Infrastructure providers may also record access and security logs.
• Billing and team information: plan, Stripe customer and transaction references, purchase and subscription status, credit grants and adjustments, invoices or related billing records, team membership, invited email addresses, and invitation status. Stripe collects payment information during checkout; our application does not receive your full payment-card number or security code.
• Business-source information: public registers, filings, licensed datasets, and company websites can contain names, business addresses, phone numbers, and business contact details relating to individuals. Public business information is distinct from private account information.

2. Synthetic people and public business data

Simulated residents, households, and their modeled purchases are synthetic statistical representations, not records of identifiable people's observed behavior. They do not describe your activity as an account holder. Business records and source documents can contain information about real people acting in a business capacity. Business-list products make selected source-derived business information available to customers; purchasing a list does not establish permission for unrestricted outreach or other uses.

3. How we use information

We use information to authenticate and manage accounts; respond to requests; run and save research; generate and deliver simulations and exports; process purchases; administer credits, subscriptions, and team seats; detect abuse and unauthorized access; troubleshoot and improve the service; maintain records; and meet legal obligations. We may use aggregated information that does not identify you to understand service performance and usage.

We do not publish or sell private prompts, saved research, or account contact information as business-list products. Account creation and privacy acknowledgment do not subscribe you to unrelated marketing. Service communications may include verification, security, billing, policy, and product-operation notices.

4. Providers and other disclosures

We use Google Cloud and Firebase for hosting, storage, authentication, and related infrastructure, and Stripe for payments and billing. Depending on the feature and configured model, research inputs and relevant tool results may be processed by AI providers such as OpenAI, Anthropic, or Google. Cloudflare may process traffic where enabled. Your browser may make requests to configured mapping and imagery providers. These providers receive the information needed for their roles and process it subject to applicable contracts and their own terms where they act independently.

Do not submit information that you are not permitted to share with the providers needed to process your request. This notice does not promise zero provider retention, exclusively local processing, or a particular AI-provider training setting. We do not grant a general right to make your private research public.

Authorized personnel may access information as needed for support, operations, security, and legal compliance. Team administration exposes membership and shared billing or usage information needed to manage seats and credits; membership is not permission to read another user's private research. Information may also be disclosed with your direction, to comply with law or lawful process, to protect rights and safety or investigate abuse, or as part of a merger, financing, acquisition, or business transfer with appropriate protections.

5. Browser storage and tracking

Authentication uses browser storage to maintain your session. We also store interface preferences and use operational diagnostics to understand errors and performance. Third-party services may use their own storage when you interact with them, including sign-in or checkout. You can manage browser storage through your browser, but disabling it may prevent sign-in or other features from working.

We do not use the current site to serve behavioral advertising. Browser "Do Not Track" signals do not currently change our essential service processing. Acknowledging this notice is not blanket consent to optional tracking. If we introduce processing requiring an additional choice or consent, we will provide it as required by applicable law.

6. Retention

We retain information for as long as reasonably needed for the purposes described here. Relevant criteria include whether your account remains active, whether research is saved for your use, subscription and transaction history, security and abuse investigations, dispute resolution, backup cycles, and legal recordkeeping obligations. Different records may therefore be retained for different periods.

Deleting a conversation does not necessarily delete its separately saved simulations, exports, usage records, or backups. Account closure requests trigger review of associated records; we may retain information required for accounting, fraud prevention, legal obligations, or disputes, and restricted backup copies subject to applicable retention and deletion procedures. Providers may retain information under their own applicable processing terms. We do not promise immediate deletion of every copy or indefinite availability of saved outputs.

7. Your choices and requests

Use available account and conversation controls to manage your information. To request access, correction, deletion, account closure, or information about our handling of personal information, contact our contact-request form. Choose the privacy category and identify the account or business record involved and the request; do not send passwords or payment-card details. We may reasonably verify your identity and authority before acting, and will respond within any applicable legal deadline.

Depending on where you live and the law that applies, you may have rights to access or obtain a copy of personal information, correct it, delete it, restrict or object to certain processing, withdraw consent where consent is the basis, or opt out of certain disclosures. Applicable exceptions may limit a request, including obligations to retain records and rights involving public-source information. An authorized representative may contact us with evidence of authority. We will explain an applicable refusal and available appeal process. You may also raise concerns with your relevant privacy regulator. We do not penalize you for exercising rights provided by law.

Our business-data products distribute source-derived business contact information. Whether that activity is a regulated "sale" or otherwise subject to opt-out rights depends on the information and applicable law. You may contact us to request review or removal of personal information in a business record. We do not represent that all information is outside privacy law merely because it is business-related or publicly available.

8. Location, audiences, and security

We operate from the United States, and we and our providers may process information in the United States and other countries where services operate. Those countries may have different privacy protections. Where applicable law requires safeguards for a transfer or a specific processing basis, we must satisfy those requirements; use of the service is not a waiver of them.

The service is intended for adults aged 18 and older and is not directed to children. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action. Please do not submit sensitive health, biometric, government-ID, financial-account, or similar personal data that the service is not designed to handle.

We use measures including encrypted transport, authentication, access controls, and server-side handling of private service credentials. No service can guarantee absolute security. We do not claim SOC 2 certification or attestation. Our Security page describes current controls.

9. Updates and contact

We may update this notice as our service and practices change. We will update its effective date and provide additional notice of material changes where required. Where new processing requires consent, we will request it rather than treating a notice update as consent.

For privacy questions, rights requests, or legal notices, contact Submission Bridge LLC at our contact-request form. You will receive a request reference after submitting. Our Terms of Service address service use and disputes; they do not remove nonwaivable privacy rights.