Privacy Policy
Last updated: [[DATE]]
1. Who we are
This policy explains how [[LEGAL ENTITY NAME]] ("we", "us") handles personal information when you use Brainwave Neurosim (the "Service"). Questions or requests: contact@brainwaveneurosim.com.
2. The short version
The Simulator runs entirely in your browser. It does not collect any clinical or patient data, because it never touches any — every signal it shows is computer-generated. We collect the minimum needed to give you an account, keep the Service working, and understand roughly how it is used.
3. What we collect
- Account information — your email address, and any name, role or institution you choose to give us when requesting or being granted access.
- Authentication records — sign-in events and one-time codes, handled by our access provider ([[Cloudflare Access / Outseta]]), used to let you in and to detect misuse.
- Feedback you send us — anything you submit through a feedback form or email, including what you choose to tell us about your teaching context.
- Aggregate usage analytics — privacy-friendly, cookie-free measurements such as page views, approximate country, browser type and referrer. We use [[Cloudflare Web Analytics / Plausible]], which does not track individuals across sites or build advertising profiles.
- Technical logs — standard server and security logs (including IP address) kept briefly by our hosting provider to operate and protect the Service.
- Billing information — once paid plans launch: subscription status and invoices. Card payments are processed by [[PAYMENT PROVIDER]]; we never receive or store your full card number.
What we do not collect: no patient data, no real EEG or physiological recordings, and no health information about you. Your settings inside the Simulator are held in your browser for the session and are not transmitted to us. The only item stored locally on your device is a small flag recording that you acknowledged the educational-use disclaimer.
4. Why we use it
- to create your account and let you sign in;
- to operate, secure and troubleshoot the Service;
- to respond to your enquiries and feedback;
- to understand overall usage so we can improve the tool;
- to administer subscriptions and billing (once paid plans launch);
- to meet legal obligations.
We do not sell your personal information, and we do not use it for third-party advertising.
5. Who we share it with
We share personal information only with service providers who help us run the Service, and only as needed:
- Hosting and access control — [[Cloudflare]] (site hosting, authentication gate, security, analytics).
- Membership and billing — once paid plans launch: [[Outseta / Stripe / Lemon Squeezy]].
- Forms and email — [[form / email provider]].
We may also disclose information where required by law.
6. Overseas storage
Our providers operate globally, so your information may be stored or processed outside New Zealand and Australia, including in [[COUNTRIES / REGIONS]]. We take reasonable steps to ensure it is protected by comparable safeguards, as required by Information Privacy Principle 12 of the NZ Privacy Act 2020 and Australian Privacy Principle 8.
7. How long we keep it
We keep account information while your account is active and for [[RETENTION PERIOD]] afterwards, then delete or anonymise it. Technical logs are kept only briefly. Billing records are retained as long as tax and accounting law requires.
8. Security
The Service is served over HTTPS and sits behind an authentication gate. We use reputable providers and limit access to personal information to those who need it. No system is perfectly secure, but we will notify you and the relevant regulator of any privacy breach that causes serious harm, as required by law.
9. Cookies
We use only what is necessary: a session cookie set by our access provider so you stay signed in. Our analytics is cookie-free. We do not use advertising or cross-site tracking cookies.
10. Your rights
You may ask us to access or correct the personal information we hold about you, ask us to delete it, or complain about how we have handled it — email contact@brainwaveneurosim.com. We will respond within [[e.g. 20 working days]].
If you are unhappy with our response, you can complain to the Office of the Privacy Commissioner (New Zealand) or the Office of the Australian Information Commissioner.
11. Children
The Service is intended for clinicians, educators and tertiary students. It is not directed at children, and we do not knowingly collect information from them.
12. Changes
We may update this policy. Material changes will be notified by email or in-app before they take effect, and the "last updated" date above will change.