Legal
Privacy Policy
Information we collect
How we use information
AI Training
Outbound Communication
Cookies and Tracking
Data Retention
Privacy Statement
Version 1 - May 20, 2025
This Privacy Policy explains how Simming (“Simming,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information when you access or use our websites, applications, APIs, AI agents, multi-agent systems, and communications gateways (including SMS, email, and voice) (collectively, the “Services”).
This Privacy Policy applies to personal information processed by Simming in connection with the Services. It does not apply to third-party websites, services, or applications that may be linked to or integrated with our Services.
Privacy Policy
“Personal Information” means information that identifies, relates to, describes, or could reasonably be linked to an individual.
“Customer Content” means data, prompts, contact lists, messages, files, and other content submitted by you or on your behalf to the Services.
Information we Collect
2.1. Information You Provide
We may collect:
Account information (name, email address, phone number, company name, role).
Billing information (billing address, payment method details processed by our payment providers).
Support and communications (messages you send to us, feedback, requests).
Profile and configuration data (agent settings, avatar/brand preferences, voice/tone instructions).
2.2 Information You Upload or Generate Through the Services
We may collect and process:
Prompts, messages, and instructions provided to agents.
Outputs generated by our AI systems.
Knowledge base content you connect or upload.
Contact data you provide for outreach (e.g., names, phone numbers, email addresses).
Communications metadata (delivery status, timestamps, routing, opt-out flags) when you use SMS/email/voice gateways.
You represent and warrant that you have all rights and legal bases required to provide such information to us.
2.3 Automatic Data Collection
We may automatically collect:
Device and usage data (IP address, browser type, OS, device identifiers, time zone, access logs).
Analytics data (pages visited, clicks, session duration, feature usage).
Cookies and similar technologies as described below.
How we use information
We may use Personal Information to:
Provide, operate, and maintain the Services.
Create and manage accounts and authenticate users.
Process transactions and send billing-related notices.
Enable AI features and generate Outputs.
Deliver communications you initiate through our gateways (SMS/email/voice).
Personalize and improve the Services, including performance, safety, and reliability.
Monitor for security, fraud, abuse, or policy violations.
Comply with legal obligations and enforce our Terms of Service.
Communicate with you about updates, support, and administrative messages.
Market our Services to you where permitted by law; you may opt out of marketing communications.
AI Training and model improvement
4.1. Service Improvement
We may use limited data, including prompts, agent configurations, and Outputs, to:
Improve the Services,
Enhance accuracy, safety, and performance,
Detect abuse or harmful use.
4.2 Customer Controls
Where offered in your plan or by written agreement, you may have options to limit certain uses of your Customer Content for model improvement. If such options exist, they will be described in your plan, enterprise order form, or documentation.
4.3 De-Identification
We may de-identify or aggregate information so it cannot reasonably be linked to you or any individual. We may use such de-identified or aggregated data for any lawful purpose.
How we share information
We may share Personal Information with:
Service providers that help us operate the Services (hosting, analytics, support, payment processing, security).
Communications infrastructure partners (e.g., telecom carriers, email delivery providers) to deliver messages you send through the Services.
Professional advisors (legal, accounting, auditors).
Affiliates within our corporate group.
Law enforcement or government authorities when required by law.
Other parties in connection with a business transaction (merger, acquisition, financing, asset sale).
We do not sell Personal Information for money.
Outbound Communication
If you use our SMS/email/voice features, you are responsible for:
obtaining and maintaining required consent and opt-in approvals,
providing legally required disclosures and opt-out mechanisms,
ensuring compliance with applicable laws (including, where relevant, TCPA, CAN-SPAM, CTIA guidance, and local equivalents).
We may suspend or disable communications features if we suspect noncompliance.
Cookies and Tracking
We use cookies, pixels, and similar technologies to:
keep you logged in,
remember preferences,
analyze traffic and usage,
improve performance,
measure marketing effectiveness.
You can control cookies through your browser settings. Some features may not function properly without cookies.
Data retention
We retain Personal Information as long as reasonably necessary to:
provide the Services,
comply with legal obligations,
resolve disputes,
enforce agreements.
We may retain aggregated or de-identified data for longer periods.
Security
We implement reasonable administrative, technical, and organizational measures designed to protect information. However, no system is perfectly secure, and we cannot guarantee absolute security.
Compliance and Regulatory Alignment
Simming maintains a security and privacy program designed to align with applicable legal, regulatory, and industry standards.
11.1 HIPAA
Where Simming acts as a service provider to customers subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), we support HIPAA-aligned handling of Protected Health Information (“PHI”) and may enter into Business Associate Agreements (“BAAs”) upon request and subject to applicable terms. For more information on HIPAA and BAAs, see the U.S. Department of Health & Human Services guidance.
11.2 Information Security
Our safeguards follow recognized frameworks, including ISO/IEC 27001–aligned practices, and are continually assessed to protect the confidentiality, integrity, and availability of information.
11.3 Customer Responsibility
Customers remain responsible for ensuring their use of the Services complies with applicable laws and regulations.
International data transfers
If you access the Services from outside the country where our servers are located, your information may be transferred, stored, and processed in other countries. Where required, we use appropriate safeguards for cross-border transfers.
Your privacy rights
12.1. U.S. State Privacy Rights
Depending on your state of residence, you may have rights to:
access,
correct,
delete,
portability,
opt out of certain targeted advertising or profiling.
12.2. EEA/UK Rights (If Applicable)
If you are located in the EEA/UK, you may have rights to:
access,
rectification,
erasure,
restriction,
objection,
data portability,
withdraw consent.
To exercise rights, contact us using the details below. We may require verification of identity и may deny requests where permitted by law.
Children's Privacy
The Services are not directed to children under 13 (or under 16 where applicable). We do not knowingly collect Personal Information from children. If you believe a child has provided Personal Information, contact us for removal.
Third-party services
Our Services may allow you to connect third-party tools (CRMs, email services, analytics, model providers, etc.). Your use of those third-party services is governed by their own privacy policies and terms.
Changes to these terms