Data we handle
- Signed-in account identifiers, primarily email and an optional display name.
- Workspace names, member roles, project configuration, repository metadata, simulation evidence, usage totals, audit events, and support cases.
- Composio connected-account and GitHub repository identifiers when an administrator connects GitHub. WorldModel does not ask customers to paste GitHub tokens.
- Stripe customer, subscription, status, and plan identifiers when billing is configured. Card details remain with Stripe.
- Project context, approved model and environment data, journey definitions, and prompts sent to OpenAI only when a user invokes the project assistant.
How data is used
Data is used to operate tenant workspaces, authorize actions, map selected repositories, execute and verify simulations, meter plan usage, prepare reports, administer subscriptions, investigate support requests, and preserve an operational audit trail. The pilot does not sell personal information or use workspace repository content for advertising.
Service providers and disclosures
The product relies on Vercel for hosting and Turso for durable data. GitHub and Composio receive requests only after a workspace administrator starts the hosted GitHub connection; OpenAI receives bounded project context only after a user invokes the assistant; and Stripe receives checkout information only when billing is configured and a user starts checkout. Information may also be disclosed when required by law or necessary to protect the service and its users.
Retention and requests
WorldModel stores account, workspace, audit, evidence, and assistant inputs and outputs in its durable database. OpenAI response storage is disabled by default; a deployment operator can explicitly enable provider-side response state only after adopting an appropriate retention policy. Signed-in users can download a role-aware JSON export from Workspace → Settings. Workspace owners can create a reversible deletion-review request there; the current workflow preserves a seven-day cancellation window and does not automatically erase data. Account-level correction or deletion requests can be opened through Workspace → Support. Workspace records otherwise remain retained while the pilot workspace is active and as reasonably needed for security, support, billing, and disputes. Identity verification may be required before a request is fulfilled.
International and regulated use
WorldModel does not currently promise a particular data residency, GDPR compliance program, HIPAA eligibility, or processing of children’s data. Do not submit regulated personal data, credentials, or production secrets during the pilot.