Privacy policy

NewReLLM is a product of TheMotionBridge B.V., a company registered in the Netherlands ("we"). This policy explains how we handle personal data when you visit newrellm.com (the "website") and when you take part in a NewReLLM simulation at solo.newrellm.com (the "platform").

1. On the website

What you send us. When you use the contact form, we receive your name, work email, company and, if you add it, a description of your decision. The form sends this to us by email; the website does not store it.

Analytics. With your consent, Google Analytics collects usage data such as pages visited, referring site, device and approximate location, using cookies. Vercel Web Analytics measures aggregate traffic without cookies and without tracking you across sites, so it runs without consent.

Abuse prevention. To limit spam, we keep a hashed form of your IP address, stored with Upstash, for up to one hour. Our host keeps standard server logs, including IP addresses and browser type.

The demo. When you play the demo on the homepage, we count which options are chosen, without any personal data, to show how others played.

Insights by email. If you subscribe, we collect your email address, where you signed up (including an event reference, if the link you used had one) and when you confirmed. We use these only to email you new insights, after you confirm your address. Resend sends these emails from its EU region (Ireland). Every email includes an unsubscribe link, and you can ask us to delete your address at any time by emailing contact@newrellm.com.

Listening and AI prompts.Audio versions of insights are stored and served by Vercel, our host, like the rest of the website. The "Ask your AI" links open ChatGPT, Claude or Perplexity with the prompt shown on the page. We send nothing to those services ourselves; what happens next is covered by your account with them.

2. On the platform

Participants join by invitation from their organisation. We process their name, email and everything they do in the simulation: decisions, messages to stakeholders, deliverables, scores and debriefs. We use this to run the simulation, produce the participant's debrief and give their organisation the reports it has agreed to receive. Who can see what is set out on our confidentiality and data handling page.

The stakeholders in a simulation are voiced by AI models from Anthropic and, as a fallback, OpenAI. What a participant writes is sent to these providers to generate replies. Under their standard API terms, it is not used to train their models and is kept by the provider for up to 30 days.

There are no analytics or advertising cookies on the platform.

3. Legal basis

• Contract: running a simulation your organisation has engaged us for, and answering your enquiries.
• Legitimate interests: cookieless website analytics, security and abuse prevention.
• Consent: analytics cookies on the website and the confirmed insights email subscription.

4. Who we share data with

We share personal data only with the providers that run our services:

• Supabase (database and sign-in), Vercel (hosting), Trigger.dev (background processing) and Resend (email, sent from its EU region) in the EU
• Upstash (spam limits and anonymous demo counts on the website), in the EU
• Anthropic and OpenAI (AI models), in the United States
• Google (website analytics, with consent), which may process data in the United States

Transfers outside the EU rely on appropriate safeguards, such as the EU–US Data Privacy Framework or Standard Contractual Clauses. We do not sell, rent or trade personal data, and we use no advertising trackers.

5. Cookies

The website uses essential cookies, including one that remembers your cookie choice, and Google Analytics cookies only with your consent. You can change your choice at any time through Cookie Settings in the footer.

6. How long we keep it

• Enquiries: for as long as the conversation or business relationship lasts.
• Simulation content: for the term agreed with the participant's organisation, or until deletion is requested.
• Platform technical logs: deleted automatically after 60 to 90 days.
• Google Analytics data: according to Google's retention settings (by default 14 months).

7. Your rights

Under the GDPR you can ask to access, correct or delete your data, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. To do so, email contact@newrellm.com. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Changes

We may update this policy. Changes are posted on this page with a new date.

9. Contact

TheMotionBridge B.V., the Netherlands
contact@newrellm.com