Privacy Policy

1. Scope

This Privacy Policy describes how AskSIM.ai ("AskSIM," "we," "us") handles personal information when you use our website, APIs, and related services.

This Policy applies to account holders and visitors. It does not cover third-party services you connect (GitHub, external AI API providers, Supabase infrastructure, Stripe) except as described.

2. Information We Collect

We collect the following categories of information:

• Account data: email address, user ID, profile name, membership status.
• Builder data: goals, AI plans, reviews, proposed commands, approval decisions, execution logs, and file-change metadata.
• Agent data: hashed device tokens, device labels, poll timestamps, command stdout/stderr you submit via the local agent.
• Usage data: API event types, model names, token counts, estimated costs, audit log entries.
• Technical data: IP address, browser user agent, cookies/session identifiers, error logs.
• Payment data: processed by Stripe; we receive customer IDs and subscription status, not full card numbers.

3. How We Use Information

We use information to:

• Provide, secure, and improve the Service.
• Authenticate users and enforce approvals before command execution.
• Maintain immutable audit trails of AI proposals and your decisions.
• Send transactional email (login, password reset, legal updates).
• Comply with law and respond to lawful requests.
• Analyze aggregate usage to improve reliability and cost efficiency.

4. AI Processing

Your prompts and build plans may be sent to third-party AI API providers to generate plans and reviews. Do not submit secrets, passwords, private keys, or regulated personal data in prompts.

We use lean/minimized payloads where configured (e.g., omitting full file bodies from review prompts). You control what goals and project paths you provide.

5. How We Share Information

We do not sell your personal information. We share data with service providers under contract, including hosting (Cloudflare), database/auth (Supabase), AI APIs, email, and payment processors—only as needed to operate the Service.

We may disclose information if required by law, to protect rights and safety, or in connection with a merger or acquisition with notice where required.

6. Data Retention

Account and audit data are retained while your account is active and as needed for legal, security, and billing purposes.

You may request deletion subject to exceptions (fraud prevention, billing records, legal hold). Some audit logs may be retained in anonymized or aggregated form.

7. Security

We use encryption in transit (HTTPS), row-level security in our database, hashed agent tokens, rate limits, and approval gates before command queueing.

No system is perfectly secure. You are responsible for securing your local machine, agent tokens, and project repositories.

8. Your Rights (US & International)

Depending on your location, you may have rights to access, correct, delete, or export personal data, and to opt out of certain processing.

California residents may have rights under the CCPA/CPRA. EEA/UK users may have GDPR rights including objection and portability. Contact admin@asksim.ai to exercise rights.

We do not respond to "Do Not Track" browser signals in a uniform way; see our Cookie Policy.

9. Children

AskSIM is not directed to children under 18. We do not knowingly collect data from children. Contact us to request deletion if you believe a child provided data.

10. International Transfers

We may process data in the United States and other countries where our providers operate. We use appropriate safeguards where required for cross-border transfers.

11. Changes

We may update this Policy. Material changes will be posted with a new effective date; renewed acceptance may be required.

12. Contact

Privacy inquiries: admin@asksim.ai