Last updated: October 2026
This Privacy Policy explains how Simular, Inc. (“Simular,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit our websites or access or use our software, cloud services, AI agents, browser and computer-use tools, APIs, integrations, and related services (collectively, the “Services”).
This Policy is written for website visitors, individual account holders, and people who use the Services as authorized users of a business or other organization. When an organization uses the Services and Simular processes personal information on that organization’s behalf, the organization may determine the purposes and means of that processing and its own privacy notice and contractual terms may also apply.
If you connect or authorize a third-party account or service, such as Google Workspace, Slack, GitHub, Linear, Calendly, a practice-management system, or another application, the Services may access information from that service within the permissions you grant and as necessary to perform the actions you request.
We use personal information to:
To perform requested tasks, the Services may send relevant task context to AI model providers or other service providers acting for Simular. Depending on the workflow, this context may include prompts, files, tool outputs, or screen observations necessary to complete the task.
Simular does not use Customer Data, user inputs, or generated outputs submitted to or created through the Services to train public, generalized, or foundational artificial intelligence models by default without your affirmative, express consent. Enterprise agreements or a Business Associate Agreement may set forth additional binding commitments regarding Customer Data.
We do not use Protected Health Information (“PHI”) for generalized or cross-customer model training unless expressly authorized in writing under an applicable Business Associate Agreement and permitted by law.
We use service providers and subprocessors to help operate the Services, such as cloud infrastructure providers, AI model providers, diagnostic and crash-reporting providers (such as Sentry), analytics and security vendors, support tools, payment processors, and other vendors. We require service providers to handle personal information under contractual restrictions appropriate to their role and the nature of the information.
Where the Services process PHI under a Business Associate Agreement, Simular will use subprocessors for PHI only as permitted by that agreement and applicable law. Simular may maintain a current list of relevant subprocessors on a dedicated subprocessor page or make that list available to enterprise customers on request.
A third-party application, account, or service that you or your organization independently selects, contracts for, and directs the Services to access is not necessarily a Simular subprocessor merely because the Services interact with it. Your use of those third-party services is governed by your relationship with the third party, including its terms and privacy practices. Where Simular independently engages a third party to perform functions for Simular, that third party is treated according to its role as a Simular service provider or subprocessor.
Simular’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.
The general-purpose Services are not intended for processing PHI. Healthcare customers may use PHI only through services, workflows, environments, or features that Simular has expressly designated in writing as eligible for PHI processing (“HIPAA-Enabled Services”) and only under an executed Business Associate Agreement (“BAA”).
Certain HIPAA-Enabled Services are designed for administrative healthcare workflows and may use local execution on a customer-controlled device together with approved cloud or AI processing as needed to perform the requested workflow. The specific handling of PHI, including permitted uses, subprocessors, retention, security obligations, and return or destruction, is governed by the applicable BAA and service configuration.
The Services are not intended to provide diagnosis, treatment recommendations, clinical decision support, or other outputs to be relied upon for a clinical determination unless Simular expressly agrees to such use in writing under terms specifically addressing that use.
We limit human access to Customer Content to authorized personnel with a legitimate need to access it, such as when access is requested by the customer, necessary to provide support or maintain the Services, needed to investigate a security issue, or required by law. Personnel with access are subject to confidentiality and access-control requirements, and access may be logged or otherwise monitored as appropriate to the system and use case.
We retain personal information for as long as reasonably necessary to provide the Services, maintain security and business records, comply with legal obligations, resolve disputes, and enforce agreements, taking into account the nature and sensitivity of the information, the purpose of processing, and applicable legal or contractual requirements.
Retention may vary by product, workflow, and deployment. Some execution environments or temporary workspaces are designed to be short-lived, while account records, workflow history, generated deliverables, logs, backups, or other information may be retained for longer periods. Enterprise agreements or a BAA may establish additional retention or deletion requirements.
You may request deletion of personal information as described below. When deletion is required, we will delete or de-identify information from active systems within a reasonable period, subject to applicable exceptions. Information in backups, archives, security logs, or systems from which immediate deletion is not reasonably practicable may remain protected and isolated until deleted through the applicable lifecycle.
We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, and destruction. Our security and compliance program is designed to evolve with the Services, the sensitivity of the data we process, and applicable contractual and legal obligations. No method of transmission, storage, or processing is completely secure, and we cannot guarantee absolute security.
We may use independent assessments, control frameworks, monitoring tools, and compliance-management systems as part of our security program. References to a framework or compliance program do not mean that Simular has obtained a certification or attestation unless we expressly state that the certification or attestation has been completed.
We may disclose personal information:
We do not sell Customer Content. We do not use Customer Content or Google user data for targeted advertising. If our use of website analytics, cookies, or similar technologies is treated as a “sale” or “sharing” of personal information under applicable law, we will provide any required disclosures and choices.
Depending on where you live and subject to applicable exceptions, you may have rights to request access to, correction of, deletion of, or portability of personal information; to object to or restrict certain processing; to withdraw consent where processing is based on consent; and to receive information about certain disclosures or processing activities. You may also have the right not to be discriminated against for exercising applicable privacy rights.
To submit a privacy request, contact support@simular.ai. We may need to verify your identity or authority before completing a request. If you use the Services through an organization and Simular processes your information on that organization’s behalf, we may direct your request to that organization or assist it in responding.
Simular is based in the United States, and personal information may be processed in the United States and other countries where Simular or its service providers operate. Where required by applicable law, we use appropriate transfer mechanisms and safeguards for cross-border transfers, which may include contractual protections or other legally recognized mechanisms.
The Services are not directed to children under 18, and we do not knowingly collect personal information from children under 18 through the Services. If you believe a child has provided personal information to us in violation of this Policy, please contact us.
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Services, by email, or by another reasonable method before the changes take effect when required by law. The “Last updated” date above indicates when this Policy was most recently revised.
Simular, Inc.
Attn: Privacy & Compliance
1209 Orange Street
Wilmington, New Castle, Delaware 19801
Email: support@simular.ai