Privacy Policy

Last updated: 2026-07-06

This is a small, solo-operated service. The privacy policy is short and accurate.

Who we are

simulis (simulis.io) is operated by Naran Labs, a sole proprietorship registered in British Columbia, Canada. "We" in this policy means Naran Labs. Contact: snaran@simulis.io.

What we collect

• Email address — when you sign in, so we can issue magic links and contact you about your account.
• IP-hash — your IP address is salted and hashed into an opaque token for anonymous-tier rate-limiting and abuse prevention. We do not store the raw IP.
• Payment metadata — Stripe handles all card data. We see only the customer ID, subscription state, and pack purchases. We never see card numbers.
• Chat content — your messages are sent to Anthropic's Claude API to generate responses. We don't store chat history server-side at MVP. Logs may briefly contain truncated request data for debugging.
• Usage counters — daily and monthly message counts per account, used for plan enforcement.

What we don't collect

• No marketing tracking. No third-party analytics scripts.
• No persistent chat logs beyond Anthropic's API retention.
• No advertising IDs, no fingerprinting, no cross-site tracking.

Business messaging (Inbox Copilot)

If you connect a business's Facebook Page or Instagram professional account to our Inbox Copilot (via Meta's official login flow), we additionally process:

• Messages and comments sent to your connected business accounts — received via Meta's APIs so we can draft replies for your approval. Message content, our drafts, and your approve/edit decisions are stored to run your queue, review log, and per-class statistics.
• Your business website content — crawled at your direction to ground drafts in your actual products, prices, and policies. Every drafted claim carries its source.
• Connection tokens — the Meta access tokens you grant, stored encrypted and used only to receive and send messages on the accounts you connected.

We act as a processor of your customers' messages on your behalf. Platform data is handled in accordance with Meta's Platform Terms; we do not sell it, use it for advertising, or use it to train models beyond serving your account. Disconnecting your account stops all processing; see deletion below.

Data deletion

To delete your data:

1. Account data: use the delete option on your Account page, or email snaran@simulis.io from your account email with the subject "Delete my data". We confirm deletion within 30 days.
2. Inbox Copilot data: disconnecting a Facebook Page or Instagram account (in the product, or by removing the app in your Meta settings) stops processing immediately; stored messages, drafts, and tokens for that connection are deleted within 30 days. You may also request immediate deletion by email as above.
3. End customers: if you messaged a business that uses our copilot and want your messages removed from our systems, contact that business, or email us at snaran@simulis.io with the business name — we will delete your message content within 30 days.

Sub-processors

• Vercel — hosting and serverless functions.
• Upstash (Redis) — session and quota storage.
• Stripe — payments and billing.
• Resend — transactional email (sign-in links, deletion confirmations).
• Anthropic — AI model serving chat responses.

Retention

Account data lives until you delete the account. After deletion, a tombstone marker is kept for 30 days to prevent immediate re-registration with the same email; the data row itself is replaced when you re-register or naturally expires shortly thereafter.

Email

We send only transactional email — sign-in links, payment receipts (via Stripe), and deletion confirmations. No marketing email.

Cookies

One cookie: gs_session, an HttpOnly session token, set when you sign in. It's strictly necessary for authentication. No tracking cookies.

Your rights

Delete your account from the Account page to remove your data. For specific access or correction requests, reply to your sign-in email.

Contact

Email snaran@simulis.io, or reply to your sign-in email — both go to a real inbox.

simulis is a product of Naran Labs, British Columbia, Canada.