How simulation data is handled
Simulation data is the use-case information you enter and the report generated from it. Do not enter confidential, personal, or regulated information.
Information used for a report
To generate a report, the app sends the organization type, country and optional state or region, business area, and AI-system description to the OpenAI’s gpt-4o-mini model through the configured Replit AI Integrations connection. The description is sent as entered; remove sensitive details before submitting it.
Information stored by this app
The app stores those simulation inputs and the generated result. Signed-in simulations are associated with the account. Anonymous simulations are associated with the browser session and can be linked to an account after sign-in. Designated administrators can review stored simulation records.
Saved drafts and PDFs saved to a report are also stored in the app’s database. The app’s API request logger records only the HTTP method, route template, response status, and duration—not request or response bodies, URL parameter values, query strings, headers, or cookies. Simulation, draft, history, and PDF failures use fixed error labels instead of logging raw error details.
Earlier versions logged API response bodies, so historical server logs may still contain scenario inputs, generated reports, and saved PDF data. Those existing logs have not been deleted by this change. This logging change does not alter database storage or establish AI-provider, hosting-platform, or backup retention guarantees.
Report retention and deletion
Simulation inputs, reports, and saved PDFs have no automatic expiry in this app. This applies to both signed-in and anonymous simulations. Signing out or closing the browser does not delete stored reports. There is no self-service report or account deletion control.
Draft deletion removes the selected draft from the app’s database; it does not delete reports generated from it. We have not verified a retention period for server logs or backups, and do not promise a deletion deadline or removal from provider records, logs, backups, or downloaded copies.
AI provider terms and limits
OpenAI’s published API policy says API data is not used to train or improve its models unless data sharing is explicitly enabled. Its default abuse-monitoring logs may contain prompts and responses and are retained for up to 30 days, with longer retention permitted when required by law or reasonably necessary to protect its services or others from harm. These are OpenAI’s published defaults, not a verified guarantee for this product’s managed connection.
The owner has not confirmed the connection’s training/data-sharing settings, any special retention controls, or Replit’s proxy retention terms. We therefore do not promise that your inputs are never used for training, that retention is limited to 30 days across all services, or that this product has zero data retention.
Sources: OpenAI API data policy and Replit AI Integrations documentation.
Privacy questions and requests
Email denise@welchconsulting.ai for privacy questions or requests. The owner has confirmed that this inbox is monitored for privacy requests. No response-time or deletion completion guarantee is published. Do not include confidential information, sensitive personal data, or the full scenario in your email.
Site analytics
We use HeyCatch for page views, clicks, navigation, and server-confirmed sign-up and subscription events. Signed-in analytics uses your internal user ID, email, name, plan, and account creation date. Click autocapture is configured to mask text and element attributes. The business-event properties added by this app do not include scenario descriptions or report contents. We have not verified HeyCatch’s retention terms.
Payments
The free simulator does not require payment details. Paid subscriptions are handled through Stripe checkout and its billing portal.
Do not submit sensitive information
Use a generalized, non-sensitive scenario. Do not enter confidential, personal, or regulated information. The provider-specific settings and log and backup retention periods described above remain unconfirmed.