1. Introduction
Culture Circuit ("we," "our," or "us") operates the Culture Circuit platform, including the Culture Circuit Google Meet™ Add-On (collectively, the "Service"). This Privacy Policy describes how we collect, use, store, and share your information when you use our Service.
By using Culture Circuit, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you create an account or sign in via Google OAuth, we collect:
- Email address
- First and last name
- Profile picture (if provided by OAuth provider)
- Job title (optional)
- Organization name and affiliation
2.2 Simulation Data
When you participate in simulations, we collect:
- Messages and chat content during simulations
- AI feedback and coaching responses
- Simulation performance metrics and analytics
- Resolution plans and collaborative outputs
2.3 Google Meet™ Add-On Data
When using the Culture Circuit Google Meet™ Add-On, we additionally collect:
- Google Meet™ meeting identifiers (for session binding)
- Google Meet™ participant identifiers
- Google ID tokens for authentication
We do not record, store, or access your Google Meet™ audio, video, or screen sharing content.
2.4 Technical Data
- Browser type and version
- IP address (for rate limiting and security)
- Usage patterns and feature interactions
3. How We Use Your Information
- To provide, maintain, and improve the Culture Circuit platform
- To authenticate your identity and manage your account
- To deliver AI-powered coaching and feedback during simulations
- To generate simulation reports and analytics
- To facilitate real-time communication during simulations via the Meet Add-On
- To send important service notifications (e.g., simulation invitations)
- To comply with legal obligations
4. Data Sharing and Disclosure
We do not sell your personal information. We may share data with:
- Your Organization: Organization administrators can view simulation reports and member activity within their organization.
- AI Providers: Simulation messages may be sent to AI providers (OpenAI, Anthropic) for real-time feedback. Messages are not stored by AI providers beyond processing.
- Service Providers: We use Stripe for payment processing and email services for notifications.
- Legal Requirements: We may disclose information if required by law or to protect our rights.
5. Data Security
We implement industry-standard security measures including:
- TLS/HTTPS encryption for all data in transit
- Encrypted storage for sensitive data (OAuth tokens, AI provider keys)
- bcrypt password hashing
- JWT-based authentication with short-lived tokens
- Rate limiting and CSRF protection
- Role-based access control (RBAC)
6. Data Retention
We retain your data for as long as your account is active. Simulation data is retained for organizational reporting purposes. You may request deletion of your account and associated data by contacting us at privacy@culturecircuit.co.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access and receive a copy of your personal data
- Correct inaccurate personal data
- Request deletion of your personal data
- Object to or restrict processing of your data
- Data portability
- Withdraw consent at any time
8. Google API Services User Data Policy
Culture Circuit's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
9. Children's Privacy
Culture Circuit is not intended for use by children under 13. We do not knowingly collect personal information from children under 13.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice.
11. Contact Us
If you have questions about this Privacy Policy, please contact us:
Google Meet™ and Google Workspace™ are trademarks of Google LLC.