Privacy Policy

Last updated: February 12, 2026

1. Introduction

Simbel AI L.L.C. ("we", "us", or "our") operates the Simbel AI platform at simbel.ai and app.simbel.ai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, company name, and password when you register.
  • Payment Information: Payment details processed securely by Stripe. We do not store your full credit card number.
  • Campaign Data: Business information, brand details, target audience data, and campaign briefs you provide.
  • Media Files: Images, videos, and other media you upload to your Media Library.
  • Contact Lists: Email addresses and phone numbers you upload for WhatsApp and email campaigns.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, actions taken, and session duration.
  • Device Information: Browser type, operating system, device type, and IP address.
  • Analytics: We use Cloudflare Web Analytics for privacy-friendly, cookieless analytics.

2.3 Third-Party Platform Data

When you connect social media accounts (Instagram, Facebook, Twitter/X, LinkedIn), we receive authorization tokens and basic profile information. We access platform analytics data to provide our analytics features.

3. How We Use Your Information

  • Provide the Service: Generate campaigns, create content, publish posts, and deliver analytics.
  • AI Processing: Your campaign data is processed by AI models to generate marketing content and strategies. We use multiple AI providers (OpenAI, Anthropic, DeepSeek).
  • Improve the Service: Aggregate, anonymized usage data helps us improve features and fix issues.
  • Communications: Send transactional emails (password resets, campaign notifications) and, with your consent, product updates.
  • Billing: Process payments and manage subscriptions through Stripe.
  • Security: Detect, prevent, and address technical issues and unauthorized access.

4. Data Sharing & Third Parties

We share data only as necessary:

  • AI Providers: Campaign data is sent to AI model providers (OpenAI, Anthropic, DeepSeek) for content generation. These providers process data per their own privacy policies and do not use your data for model training.
  • Social Platforms: Content is published to connected platforms (Instagram, Facebook, etc.) as you direct.
  • Stripe: Payment information is processed by Stripe, Inc. per their privacy policy.
  • Supabase: Database hosting and authentication services.
  • Twilio: WhatsApp messaging delivery.
  • Resend: Email delivery services.

We do not sell your personal information to third parties. We do not share data with advertisers.

5. Data Storage & Security

Your data is stored on secure infrastructure provided by Supabase (PostgreSQL database) and Supabase Storage (media files). We implement industry-standard security measures including:

  • Encrypted data transmission (TLS/HTTPS)
  • JWT-based authentication with token refresh
  • Role-based access control (RBAC)
  • Rate limiting on authentication endpoints
  • Security headers (HSTS, CSP, X-Frame-Options)
  • Webhook signature verification

6. Data Retention

  • Active Accounts: Data is retained as long as your account is active.
  • Completed Campaigns: Campaign analytics and learnings are retained for continuous improvement of future campaigns.
  • Cancelled Accounts: Account data is retained for 30 days after cancellation, then permanently deleted.
  • Media Files: Stored until you delete them or your account is terminated.

7. Your Rights

You have the right to:

  • Access: Request a copy of your personal data.
  • Correction: Update inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data (subject to legal retention requirements).
  • Export: Download your campaign data and content.
  • Withdraw Consent: Opt out of marketing communications at any time.

To exercise these rights, contact us at support@simbel.ai.

8. Cookies & Tracking

We use minimal tracking technologies. Our marketing site (simbel.ai) uses Cloudflare Web Analytics, which is cookieless and privacy-friendly. The dashboard application (app.simbel.ai) uses localStorage for session management and user preferences — no third-party tracking cookies are used.

9. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. International Data Transfers

Your data may be processed and stored in different jurisdictions where our service providers operate. We ensure appropriate safeguards are in place for international data transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service. The "Last updated" date at the top of this page indicates when this policy was last revised.

12. Contact Us

For privacy-related inquiries, contact us at: support@simbel.ai

Simbel AI L.L.C.