Draft prepared for Simenity. Have a qualified lawyer review it before publishing, and replace every highlighted field in square brackets with your own details.
In short
We read the pages you submit only to run your simulations.
We never sell your data or your pages.
Your pages and runs stay private to your workspace.
You can export or delete your account, pages and runs at any time.
01Who we are
Simenity is operated by Vornox OPC Private Limited (“Simenity”, “we”, “us”), a company registered in India with its registered office at [registered office address]. We are the data controller (and, under India’s Digital Personal Data Protection Act, 2023, the data fiduciary) for the personal data described in this policy.
If you use Simenity as part of a company workspace, your company decides what pages to test and who has access. For personal data inside the pages your company submits, we act on its behalf as a processor.
02What this policy covers
This policy covers the Simenity website, the Simenity app, and any emails or support conversations with us. It does not cover the third-party websites you ask us to read, or the ad networks we simulate; they have their own policies.
03What we collect
Information you give us
- Account details: name, email address, password (stored hashed), company name and role if you give them.
- Pages you submit: the URLs you paste, the content we read from them, and any context, variants or audience descriptions you add.
- Billing details: plan, billing address and tax details. Card numbers are entered with our payment processor and never reach our servers.
- Messages: anything you send to support or through the contact form.
Information collected as you use Simenity
- Usage: the runs you start, features you use, and settings you choose.
- Device and log data: IP address, browser type, operating system, pages viewed and timestamps, used for security and to keep the service working.
- Cookies and browser storage: see the cookie policy.
04How we use it
- To run simulations and show you the results.
- To create and secure your account, and to prevent abuse.
- To bill you for paid plans.
- To answer support requests and send messages about your account and the service.
- To improve Simenity, using aggregated and de-identified usage data.
- To send product news, only if you opt in. You can unsubscribe from any marketing email.
- To meet legal obligations, such as tax and accounting records.
We do not use the content of your pages to train models that serve other customers, and we do not sell personal data.
05Our legal basis
Where the EU or UK GDPR applies, we rely on: performance of our contract with you (running the service and billing); our legitimate interests (security, preventing abuse, improving the product), balanced against your rights; your consent (marketing emails and non-essential cookies), which you can withdraw at any time; and legal obligation (tax and accounting).
Under India’s Digital Personal Data Protection Act, 2023, we process personal data for the purposes you consent to when you create an account, and for the legitimate uses the Act allows.
06Who we share it with
We share personal data only with service providers who help us run Simenity, under contracts that limit their use of it to providing their service to us:
| Category | What they do | Provider |
|---|---|---|
| Cloud hosting | Runs the app and stores data | [provider] |
| Payments | Takes card payments and manages subscriptions | [provider] |
| AI model providers | Processes page content during a simulation | [provider] |
| Sends account and product emails | [provider] | |
| Product analytics | Measures how the app is used | [provider] |
We may also disclose data if the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or acquisition, in which case we will tell you before your data falls under a different policy.
Simenity is not affiliated with the ad networks it simulates. We do not send your pages or results to them.
07International transfers
Our providers may process data outside the country where you live, including in India, the United States and the European Union. Where the GDPR applies, we rely on adequacy decisions or standard contractual clauses for those transfers.
08How long we keep it
- Account data: for as long as your account is open, then deleted within 30 days of closing it, except where we must keep records for longer.
- Pages and runs: until you delete them or close your account.
- Billing records: as long as tax law requires, usually up to 8 years.
- Logs: up to 90 days, unless needed to investigate a security incident.
09How we protect it
Data is encrypted in transit and at rest. Access inside Simenity is limited to the people who need it to run the service, and every access is logged. No system is perfectly secure; if a breach affects your personal data, we will tell you and the relevant authorities as the law requires.
10Your rights
Depending on where you live, you can ask us to: access the personal data we hold about you; correct it; delete it; export it in a portable format; restrict or object to some processing; withdraw consent; and nominate someone to exercise your rights if you cannot. You can do most of this in your account settings, or by writing to privacy@simenity.com. We reply within 30 days.
If you are unhappy with our answer, you can complain to your local data protection authority, or in India to the Data Protection Board of India.
11Children
Simenity is a business tool and is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
12Changes to this policy
If we make a material change, we will tell you by email or in the app at least 14 days before it takes effect. The date at the top of this page shows when it last changed.
13Contact and grievances
Email privacy@simenity.com, or write to Vornox OPC Private Limited, [registered office address].
Grievance officer: [name], grievance@simenity.com. We acknowledge grievances within 48 hours and aim to resolve them within 30 days.
