Privacy Policy

PreFlight Audiences LLC Effective Date: March 7, 2026

This Privacy Policy describes how PreFlight Audiences LLC ("PreFlight," "we," "us," or "our") collects, uses, and protects information when you use our website and platform at preflightaudiences.com (the "Service").

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address and name (provided during registration)
• Password (stored only in hashed form; we never store or have access to your plaintext password)
• Authentication data if you sign in via Google OAuth (your Google account identifier and profile avatar)

Billing Information

If you subscribe to a paid plan, we collect and store:

• Stripe customer and subscription identifiers
• Subscription tier, status, and billing period

Payment card details are processed and stored entirely by Stripe, Inc. We never receive, store, or have access to your full card number, CVV, or other sensitive payment credentials.

Usage Data

We automatically collect limited technical data to maintain the security and functionality of the Service:

• IP address and browser user agent (stored alongside authentication tokens for session security)
• Activity timestamps (last active date, account creation date)
• Aggregate usage metrics (number of simulations run, reports generated, credits consumed)

User-Generated Content

When you use our platform features, we store:

• Saved Audiences: filter specifications, semantic queries, and generated persona data associated with your audience segments
• Campaign Simulations: content you submit for testing (titles, descriptions, image/video descriptions), simulation configuration, and simulation results including agent responses, attention scores, conversion decisions, and qualitative feedback
• Interview Sessions: research goals, discussion guides, interview transcripts, uploaded research documents, and synthesized focus group reports

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your transactions and manage your subscription
• Authenticate your identity and secure your account
• Generate audience insights, run simulations, and produce reports based on your configurations
• Send transactional communications related to your account (verification emails, password resets, billing notices)
• Monitor aggregate usage to enforce plan limits and detect abuse

We do not use your information for advertising, and we do not sell your personal information to third parties.

3. About Our Audience Data

PreFlight is an audience intelligence platform. It is important to understand how our platform data works:

• Our audience personas are modeled from real, anonymized population data. They are statistically derived from publicly available, aggregate-level datasets including the U.S. Census Bureau American Community Survey, CDC PLACES health data, MIT Election Data + Science Lab election returns, and Association of Religion Data Archives surveys. No individual person's data is used to create a persona.
• We do not track, profile, or collect data on real consumers. The personas our platform generates are anonymized statistical models of the U.S. population, not representations of identifiable individuals.
• Census and demographic data is aggregate and public. We store population-level distributions (age, income, education, employment, health behaviors, etc.) at the city and county level. This data contains no personally identifiable information.
• Simulation results are AI-generated. The responses, opinions, and behaviors produced by our simulation engine are generated by large language models informed by population-level data. They do not reflect the views or data of any identifiable person.

4. Information Sharing

We share your information only in the following limited circumstances:

• Service Providers: We use third-party services to operate the platform, including Stripe (payment processing), cloud hosting providers (data storage and computing), and AI model providers (simulation and analysis). These providers access only the data necessary to perform their functions and are bound by their own privacy obligations.
• Legal Requirements: We may disclose information if required by law, subpoena, court order, or governmental regulation, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes.

5. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

• Password hashing (we never store plaintext passwords)
• Encrypted data transmission (HTTPS/TLS)
• Token-based authentication with expiration and rotation
• Database access controls and connection security

No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

• Account data is retained for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.
• User-generated content (saved audiences, simulation results, interview sessions) is retained as long as your account is active and deleted when you delete the associated content or your account.
• Authentication tokens expire automatically (email verification: 24 hours; password reset: 1 hour; refresh tokens: 30 days) and are cleared upon expiration.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Object to certain processing of your data

To exercise any of these rights, contact us at the email address listed below. We will respond within 30 days.

8. Cookies and Tracking

We use essential cookies and local storage for authentication and session management. We do not use third-party advertising cookies or cross-site tracking technologies.

If we integrate analytics tools in the future, this policy will be updated to reflect that change.

9. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page. If we make material changes, we will notify you by email or by posting a prominent notice on the Service prior to the change becoming effective.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

PreFlight Audiences LLC Email: luke@preflightaudiences.com