Privacy Policy

This Privacy Policy describes how PaRo Technologies ("we," "us," or "our") collects, uses, discloses, and safeguards personal information when you use PaRoNetSim at https://netsim.parotechnologies.com and related applications, labs, and services (the "Service").

Controller / operator contact: support@paronetsim.com (privacy) or support@paronetsim.com (general support).

This Policy applies to personal information we process about learners, instructors, administrators, and visitors who create an account or use the Service. It does not apply to third-party websites or services that we do not control, even if linked from the Service.

Depending on how you use the Service, we may collect:

• Account information — email address, authentication credentials (passwords are hashed and managed by our auth provider; we do not store plaintext passwords), optional username/display name, skill preferences, and similar profile fields you provide.
• Security information — multi-factor authentication (MFA) factor metadata (for example, that a TOTP authenticator is enrolled). We do not receive the secret codes from your authenticator app after setup.
• Learning and progress data — lab and scenario progress, completions, XP, streaks, achievements, quiz attempts and scores, concept views, class memberships, and related activity needed to operate the product.
• User-created content — LabForge documents, topologies, notes, or other materials you create, import, or share (including content marked public if you choose that visibility).
• Communications with AI features — prompts and context you send to in-product assistants (for example, mentor/chat features) so we can generate responses. Do not submit secrets, passwords, or personal data about others that you are not authorized to share.
• Usage and device data — pages or labs accessed, approximate timestamps, browser/app type, and similar technical data needed for security, debugging, and reliability.
• Payment-related data — if paid plans are enabled, our payment processor handles card details. We may receive subscription status, customer identifiers, and limited billing metadata (we do not store full card numbers on our servers).
• Support communications — information you send when you email us or request help.

• Directly from you (registration, profile, labs, quizzes, chat, support).
• Automatically through the Service (session storage, necessary cookies/local storage, logs).
• From service providers that process data on our behalf (see Subprocessors).

We use personal information to:

• Provide, secure, and maintain accounts and the Service
• Save and display learning progress, quizzes, achievements, and class features
• Authenticate users, enforce MFA where required, and prevent abuse
• Operate AI learning aids you choose to use
• Process payments and entitlements when billing is enabled
• Respond to support requests and communicate about the Service
• Monitor reliability, fix bugs, and improve educational features
• Comply with law and enforce our Terms

We do not sell your personal information. We do not use student learning data for third-party targeted advertising.

Where the GDPR or UK GDPR applies, we process personal data on these bases:

• Contract — to provide the Service you request (account, labs, progress sync).
• Legitimate interests — security, fraud prevention, product improvement, and limited analytics necessary to run a safe educational platform, balanced against your rights.
• Consent — where required (for example, optional marketing email if we offer it — you may withdraw consent at any time).
• Legal obligation — when we must retain or disclose information to comply with law.

Optional AI assistants may send your prompts and limited lab/scenario context to a third-party model provider to generate a response. Outputs can be inaccurate. Do not rely on AI output as official vendor documentation, certification advice, or professional counsel. See also our Terms of Service.

We share personal information only as needed to operate the Service, including with:

• Supabase — authentication, database, and related backend infrastructure (supabase.com/privacy).
• Hosting / edge delivery — for example, Vercel, to serve the application.
• AI / LLM providers — when you use mentor or chat features (prompts and necessary context only).
• Payment processors — such as Stripe, if and when paid subscriptions are enabled.
• Error monitoring — such as Sentry, if configured, with data minimized and sensitive fields scrubbed where implemented.
• Professional advisors and authorities — when required by law or to protect rights, safety, and the Service.

Service providers may process data only under our instructions and applicable data protection terms, except where they act as independent controllers (for example, for their own billing or security logs).

We and our providers may process information in the United States and other countries. Where required, we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses) offered by our providers. By using the Service, you understand that your information may be transferred to jurisdictions with different data-protection laws than your own.

We use necessary cookies and browser storage to keep you signed in, remember preferences, and operate the Service. See our Cookie Notice for details. We do not currently use advertising cookies.

We retain account and learning data for as long as your account remains active and as needed to provide the Service, resolve disputes, enforce agreements, and meet legal obligations. Server logs are retained for shorter operational periods according to our providers' defaults unless a longer period is required for security investigations.

We use industry-standard measures appropriate to the nature of the data, including encrypted transport (HTTPS), access controls, row-level security in our database where applicable, and optional MFA. No method of transmission or storage is 100% secure.

Depending on your location, you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated personal data
• Export or receive a copy of certain data (portability)
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Appeal or lodge a complaint with a supervisory authority (EEA/UK) or contact your state attorney general (US)

To exercise these rights, email support@paronetsim.com. We may need to verify your identity. We will respond within the time required by applicable law.

California (CCPA/CPRA): We do not sell personal information or share it for cross-context behavioral advertising. California residents may request know, delete, and correct rights using the contact above. We will not discriminate against you for exercising privacy rights.

The Service is intended for users who are at least 13 years old, or who use the Service with a parent, guardian, or school's authorization where required by law. We do not knowingly collect personal information from children under 13 without appropriate consent. If you believe a child has provided personal information improperly, contact us and we will take appropriate steps.

If a school or instructor uses PaRoNetSim with students, the school is responsible for obtaining any required consents and for using the Service in a manner consistent with student-privacy laws applicable to that institution (for example, FERPA in the United States where it applies).

PaRoNetSim is an independent network learning and simulation platform. It is not affiliated with, endorsed by, sponsored by, or certified by Cisco Systems, Juniper Networks, Fortinet, Palo Alto Networks, Arista Networks, Hewlett Packard Enterprise, Dell Technologies, Ubiquiti, MikroTik, Huawei, F5, Check Point, or any other network vendor. All product names, trademarks, and registered trademarks are the property of their respective owners. Vendor names are used only to identify compatible learning topics, command styles, and simulated device behavior. PaRoNetSim does not include, distribute, emulate, or run proprietary vendor operating system images, firmware, or software. All labs, explanations, command outputs, and simulations are independently created for educational purposes.

PaRoNetSim does not include, distribute, emulate, or run proprietary vendor operating system images, firmware, or software. All labs, explanations, command outputs, and simulations are independently created for educational purposes.

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Material changes may also be communicated by email or in-product notice when appropriate. Continued use of the Service after the effective date of changes constitutes acceptance of the updated Policy to the extent permitted by law.

Privacy requests: support@paronetsim.com
General support: support@paronetsim.com

Related documents: Terms of Service · Cookie Notice

Governing law reference for disputes about the Service generally: the State of California, United States of America (see Terms). This Policy is designed to align with common privacy frameworks (including GDPR/UK GDPR principles and CCPA/CPRA "do not sell" practices) based on our current product; it is not a substitute for advice from a qualified attorney in your jurisdiction.