Legal
Last updated: October 2026
Data controller
Simporter, Inc. (“Simporter,” “we,” “us”) is the data controller for personal data collected through our website, portal, and research services. Simporter is incorporated in the United States and provides AI-powered consumer research services to enterprise clients.
Data Protection Contact: hello@simporter.com
A Data Processing Agreement (DPA) is available upon request for enterprise clients. Contact us at the address above to obtain a copy.
Data collection
Account data. When you sign up, request a demo, or subscribe to our newsletter, we collect your business email address, full name, company name, and job title. This data is used to create your account, deliver research, and communicate about your projects.
Research data. Briefs, deliverables, and project files you submit or receive through the portal. Your research data belongs to you. We do not use client data to train AI models or share it with other clients.
Usage and analytics data. We collect information about how you interact with our website, including pages visited, time on page, referral source, browser type, and device type. This data is collected via Google Analytics through Google Tag Manager and is used to improve the user experience.
Cookies. We use essential and analytics cookies as described in the Cookies section below.
Synthetic panels. When using synthetic panels, Simporter generates simulated respondents. No real consumer PII is collected or stored in the synthetic panel process. Human-respondent research projects are governed by separate consent and data-handling procedures.
Legal bases
Under the General Data Protection Regulation (GDPR), we rely on the following legal bases for processing personal data:
Data use
We do not sell your personal data. We do not use your research data to train models. We do not share personal data with third parties for their own marketing purposes.
Retention
Account data: retained while your account is active and for up to 12 months after account deletion, unless a longer period is required by law (for example, for tax or billing records).
Research deliverables: retained in your portal until you delete them or close your account. After account closure, deliverables are permanently deleted within 12 months.
Analytics data: aggregated and anonymized after 26 months. Individual session data is not retained beyond this period.
Email communications: transactional email logs are retained for 90 days. Newsletter consent records are retained for the duration of your subscription plus 12 months.
GDPR rights
If you are located in the EU/EEA or a jurisdiction with equivalent privacy protections, you have the following rights regarding your personal data:
To exercise any right, email hello@simporter.com. We will acknowledge your request within 72 hours and respond substantively within 30 days. If we need more time (up to 60 additional days for complex requests), we will notify you of the extension and the reason.
If you believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local data protection authority.
CCPA rights
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:
To submit a CCPA request, email hello@simporter.com with the subject line “CCPA Request.” We will verify your identity and respond within 45 days.
Cookies
Our website uses cookies to operate and to understand how visitors use the site. Analytics cookies are loaded only after you provide consent through our cookie consent banner. You can change your preference at any time via your browser settings.
| Cookie | Type | Duration | Purpose |
|---|---|---|---|
| Session cookie | Essential | Session | Maintains login state and CSRF protection |
| Cookie consent preference | Essential | 12 months | Stores your cookie consent choice (managed by our CookieConsent banner) |
| Google Analytics (_ga, _gid) | Analytics | 24 months / 24 hours | Measures site traffic and usage patterns. Loaded only after consent. |
Security
Subprocessors
We use the following subprocessors to deliver our services. Each processor is bound by contractual obligations to protect your data:
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | United States |
| Stripe | Payment processing | United States |
| Google Analytics (via GTM) | Website analytics | United States |
| Resend | Transactional email delivery | United States |
Requests
For any privacy-related request (access, correction, deletion, portability, or questions about this policy), email hello@simporter.com. Please include “Privacy Request” in the subject line along with a description of your request.
Terms of service
By accessing or using Simporter’s website, portal, or services, you agree to the following terms. These terms apply to all users, including visitors, trial users, and enterprise subscribers.
Simporter provides AI-powered consumer research, concept testing, and market analysis tools delivered through our web portal and API. Service availability, features, and capacity are governed by your subscription agreement or capacity agreement with Simporter.
You agree not to: (a) use the services for any unlawful purpose; (b) attempt to reverse-engineer, decompile, or extract source code from the platform; (c) share account credentials with unauthorized parties; (d) upload malicious code or attempt to compromise system security; (e) use automated scraping tools against the platform beyond approved API access.
Your data: you retain all ownership rights to the research data, briefs, and materials you provide to Simporter. We do not claim ownership of your content.
Our platform: Simporter retains all rights to the platform, software, models, algorithms, user interface, documentation, and proprietary methodologies. Your subscription grants a non-exclusive, non-transferable license to use the services during the term of your agreement.
Aggregated insights: Simporter may use anonymized, aggregated data (which cannot identify you or your company) to improve the platform and produce industry benchmarks.
Token balances and pricing are subject to the terms of your capacity agreement. Unused Pilot tokens expire after 90 days. Annual tokens convert at renewal per your agreement terms. All fees are non-refundable unless otherwise stated in your agreement.
To the maximum extent permitted by applicable law, Simporter’s total aggregate liability for any claims arising from or related to the services shall not exceed the total fees paid by you to Simporter in the 12 months preceding the claim. Simporter shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including lost profits, data loss, or business interruption.
The services are provided “as is” and “as available.” Simporter makes no warranties, express or implied, regarding the accuracy, completeness, or reliability of research outputs. AI-generated insights are intended to inform decisions, not replace professional judgment.
Either party may terminate the agreement with 30 days written notice. Upon termination, your access to the portal will be revoked. You may export your research data before the termination date. Simporter will delete your data in accordance with the retention periods described in this policy.
These terms are governed by the laws of the State of Delaware, United States, without regard to conflict-of-law principles. Any disputes arising under these terms shall be resolved in the state or federal courts located in Delaware.
We may update these terms from time to time. Material changes will be communicated via email to active account holders at least 30 days before taking effect. Continued use of the services after the effective date constitutes acceptance of the revised terms.
Reach out at hello@simporter.com. We are happy to walk through our privacy and security posture with your IT or procurement team, and to provide a DPA upon request.