Privacy Policy

Account information. Name, email address, and password hash when you register. If you sign in with a third-party provider, we receive the basic profile info that provider shares.

Conversations and content. Prompts, generated responses, uploaded files/images, and any documents (PDF/Word/Excel/PowerPoint) you generate, so your chat history persists across sessions and devices.

Billing information. Wallet balance and transaction history. Card details are handled entirely by our payment processor (Paystack). We never receive or store your full card number.

Connected third-party accounts. If you connect a GitHub account (for Agent Mode code generation), or a Meta, Google, or TikTok Ads account (for Ads Studio / Social Media Manager), we store an encrypted access token and the minimum account metadata needed to act on your behalf (e.g. repository names, ad account IDs, connected Page/Instagram business names). We request the narrowest permission scopes each feature needs, and never post, publish, or spend on your behalf without an explicit action you initiate.

Usage data. Device/browser type, IP address, timestamps, feature usage, and error logs, used to keep the Service reliable and secure.

CLI/API usage. If you use the SimulAI CLI or API key, we log requests (model used, token counts, timestamps) for billing and abuse prevention: the content of your prompts is handled the same as in-app conversations.

• Operate, maintain, and personalize the Service, including SmartRoute model selection and conversation memory.
• Process wallet top-ups and charge for usage.
• Act on your explicit instructions through connected accounts: e.g. opening a pull request you requested, or publishing an ad campaign you approved.
• Detect fraud, abuse, and prompt-injection attempts, and enforce our Terms.
• Send transactional emails (billing receipts, security alerts) and, if you opt in, product updates.
• Improve the Service, including model routing quality. Using aggregated, anonymized success/failure statistics, never the content of individual conversations, without your consent.

We are a gateway/orchestration layer. Your requests are processed by these providers under their own privacy terms, in addition to ours:

• OpenRouter and the underlying model providers (OpenAI, Anthropic, Google, DeepSeek, and others). To generate AI responses to your prompts.
• Paystack: to process wallet funding and payments.
• Meta, Google Ads, and TikTok for Business: only if you explicitly connect an account in Ads Studio or Social Media Manager, to read and manage the ad accounts/Pages you authorize.
• GitHub: only if you explicitly connect an account in Agent Mode, to read and write code in repositories you authorize.

We do not sell your personal data, and we do not share your conversation content with advertisers.

Data is stored in encrypted databases with access restricted to authorized systems and personnel. Third-party access tokens (GitHub, Meta, Google, TikTok) are encrypted at rest and only decrypted transiently to make an authorized API call on your behalf. When Agent Mode runs code in the cloud, it executes inside an isolated, single-use container that is destroyed immediately after the run completes.

We retain your account and conversation data for as long as your account is active, plus a limited period afterward for legal, tax, and fraud-prevention purposes. Deleting a conversation removes it from your account view and from active storage on our next cleanup cycle. Disconnecting a third-party account (GitHub, Meta, Google, TikTok) immediately revokes and deletes the stored access token.

You can access, correct, export, or delete your data at any time:

• In-app: Settings → Account to update your details; Settings → Integrations to disconnect GitHub, Meta, Google, or TikTok at any time; the chat sidebar to export or delete individual conversations.
• By request: email [email protected] to request a full export or permanent deletion of your account and associated data. We respond within 30 days.

If you connected a Facebook, Instagram, or Google account and later remove SimulAI's access from that provider's own settings, we are notified and delete the corresponding stored token on our side as well.

We use strictly necessary cookies/local storage to keep you signed in and remember preferences (theme, per-conversation color tags). We do not use third-party advertising trackers on the Service itself.

The Service is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

SimulAI is operated from Nigeria. If you access the Service from outside Nigeria, your data may be processed in Nigeria and in the countries where our infrastructure and third-party providers (listed above) operate.

We may update this policy as the Service evolves. Material changes will be announced in-app or by email; the "Last updated" date above always reflects the current version.

Questions about this policy or your data: [email protected].