Privacy Policy
Who we are
Market Physics Engine is operated by Zologic (contact@zologic.nl), based in the Netherlands. Zologic is the data controller for all personal data processed through this service, as defined under GDPR Article 4(7). The service is available at marketphysics.eu.
What data we collect
- Account data — your email address and a hashed password, collected when you register. Used only for authentication and to identify your account.
- Pitch text — the idea description you enter before running a simulation. Stored in your run history so you can reload previous results. Sent to Groq for inference only (see below). Not used for training any model.
- Simulation results — IFI score, adoption curve, persona output, and friction scores for each run. Stored in your account and visible only to you.
- Subscription data — your Stripe customer ID and subscription tier (free / pro / team). Payment details are handled entirely by Stripe and never touch our servers.
- Usage metadata — number of simulations run per month, used solely to enforce tier limits. Not used for profiling or analytics.
What we do not collect
- We do not collect or store payment card details — Stripe handles this end-to-end.
- We do not use third-party analytics trackers (no Google Analytics, no Meta Pixel, no Hotjar).
- We do not collect CVs, resumes, or personal documents. Only the text you type into the pitch field is stored.
- We do not build user profiles or use your data for advertising of any kind.
Legal basis for processing (GDPR Article 6)
We process your personal data under the following legal bases:
| Data | Legal basis | Reason |
|---|---|---|
| Account data | Contract (Art. 6(1)(b)) | Necessary to provide the service you signed up for |
| Pitch text & simulation results | Contract (Art. 6(1)(b)) | Core service delivery — without this there is no simulation |
| Subscription & usage data | Contract (Art. 6(1)(b)) | Required to enforce tier limits and process payments |
| Service security & improvement | Legitimate interest (Art. 6(1)(f)) | To operate, secure, and maintain the platform |
Cookies
We use only strictly necessary, first-party session tokens. No third-party cookies are set and no cookie consent banner is shown because we set no non-essential cookies.
- Authentication token — stored in your browser's localStorage to keep you logged in between sessions. First-party only. Expires on sign-out or after 14 days of inactivity. Not used for tracking or advertising.
How your data is stored and secured
All data is stored on a private server located in the European Union (Lithuania). The database is not publicly accessible and access is restricted to authorised operators only. All traffic is served exclusively over HTTPS with TLS enforced. Backups are encrypted and purged after 7 days.
AI-generated content and international data transfers
When you run a simulation, your pitch text is sent to Groq's API (servers located in the United States) to generate stakeholder personas and plain-language narrative summaries. This constitutes an international transfer of personal data under GDPR Chapter V.
This transfer is safeguarded by Standard Contractual Clauses (SCCs) as provided in Groq's Data Processing Agreement. We do not instruct Groq to retain your data beyond the request. Your pitch text is not used to train any AI model. Third-party processing by Groq is governed by their privacy policy.
Data retention and deletion
Simulation runs are stored for as long as your account is active. You can delete individual runs at any time from the Run History panel in the app.
If you close your account, your personal data and all simulation results are deleted within 30 days. Encrypted backups containing your data are purged within 7 days of the next backup cycle following deletion.
To request account deletion, email contact@zologic.nl. We will confirm and complete the deletion within 7 days.
Third-party services
- Stripe — payment processing. Acts as an independent data controller for payment data. Transfers to the US are covered by Stripe's Privacy Shield and SCCs. Stripe Privacy Policy →
- Groq — LLM inference for persona and narrative generation. US-based. Transfers safeguarded by Standard Contractual Clauses. Groq Privacy Policy →
Your rights under GDPR
If you are based in the EU or EEA, you have the following rights:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — request that we limit how we use your data
- Portability — request your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
- Complaint — lodge a complaint with the Dutch data protection authority at autoriteitpersoonsgegevens.nl
To exercise any of these rights, contact us at contact@zologic.nl. We will respond within 30 days.
Changes to this policy
We may update this policy as the product evolves. Material changes will be communicated by email to registered users at least 14 days before they take effect. The date at the top of this page always reflects the most recent revision.
Contact
Data controller: Zologic
Email: contact@zologic.nl
Country: Netherlands