Privacy Policy
Last updated: 25 July 2026
AgentiqMinds LLP ("AgentiqMinds", "we", "us", "our") operates the Simba platform ("Simba", the "Service"), an AI-powered business operating system for micro, small and medium businesses. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
1. Information we collect
We collect information in three ways:
- Information you give us — name, business name, email address, phone number, billing details, address, GSTIN, and any business content you upload (products, prices, images, posts, customer lists).
- Information from connected services — when you authorise Simba to act on your behalf via Meta's WhatsApp Business API, Instagram Graph API, Facebook Login, Facebook Pages or Marketing API, Google Business Profile, ERPNext, Vendure, payment processors, or any other connected platform, we receive the access tokens and the data you have authorised those platforms to share (e.g. messages, posts, page insights, ad performance, orders, invoices, lead form submissions, catalog data).
- Information collected automatically — IP address, device and browser metadata, log files, cookie identifiers, and usage events necessary to operate, secure and improve the Service.
2. How we use information
- To provide, maintain and improve the Service.
- To execute the actions you instruct Simba to perform (e.g. publishing posts, sending messages, updating inventory, generating invoices).
- To authenticate users and protect against fraud, abuse and unauthorised access.
- To send transactional, security and service-related communications.
- To comply with legal and tax obligations in India and the jurisdictions in which we operate.
We do not sell your personal information. We do not use data obtained from Meta APIs for any purpose other than delivering the specific feature you authorised, in line with Meta's Platform Terms and Developer Policies. We do not use your data to train general-purpose AI models for unrelated purposes.
3. Meta platform data
Simba connects to Meta platforms as a Meta Tech Provider and WhatsApp Business Solution Provider on behalf of the merchant who authorises the connection. When you connect WhatsApp Business, Instagram, Facebook Pages, or Facebook Ad accounts to Simba, we may receive and process: profile information, page metadata, message content, media, post insights, audience metrics, ad performance data, lead form submissions, catalog data, and the access/refresh tokens needed to make API calls on your behalf.
The business owner connects Meta once for the business. Authorised employees act through Simba using that business's stored token. Employees do not need separate Meta logins and do not obtain independent access to your Meta accounts.
This data is used solely to:
- Send and receive messages on your behalf via the WhatsApp Business API.
- Publish, schedule and analyse content on Instagram and Facebook Pages you own.
- Create, manage and report on advertising campaigns you authorise.
- Retrieve and manage lead form submissions and product catalog data where you have authorised those permissions.
- Generate the analytics and recommendations Simba displays back to you.
We do not transfer Meta platform data to third parties except sub-processors strictly required to deliver the Service (see Section 6) and never for advertising or resale.
4. Data sharing
We share information only with:
- Sub-processors who host infrastructure, deliver email/SMS, process payments, or provide AI inference (e.g. cloud hosting providers, payment gateways, large-language-model providers). These processors are contractually bound to use the data only for our instructed purposes.
- Connected platforms you have authorised (e.g. Meta, Google, ERPNext, Vendure).
- Authorities when required by law, court order or to protect rights, property or safety.
- Successors in the event of a merger, acquisition or asset sale, with notice to you.
If you purchase an optional managed support plan, authorised AgentiqMinds personnel may access your account solely to provide the support you requested, under confidentiality obligations and strict access controls. They use your business's existing platform connections; they do not obtain separate access to your Meta accounts.
Requests from public authorities
Where we receive a request for personal data from a public authority, we review whether the request is legally valid and required. We disclose only the minimum information necessary to comply. Where we believe a request is unlawful or overbroad, we may challenge or seek to narrow it as permitted by law. We document such requests and our response where legally allowed.
5. Data retention
We retain personal data only as long as necessary to provide the Service and meet legal obligations. When you close your account or revoke a connected platform, we remove the associated data from active systems within 30 days and from backups within 90 days, except where retention is required by law (e.g. tax records, which are anonymised rather than deleted). You can request earlier deletion at any time — see our Data Deletion Instructions.
6. Sub-processors
A full list of sub-processors is available on request from support@agentiqminds.com. The table below lists current sub-processors used for Meta Platform Data and core Service delivery:
| Sub-processor | Purpose |
|---|---|
| Supabase Cloud | Database, auth, edge functions (including Meta tokens and CRM data) |
| Contabo | Cloud hosting for application API, LiveKit agent, and mail server |
| OpenAI | AI inference (e.g. proposed CRM replies) |
| Cloudflare, Inc. | App hosting (Pages) and object storage (R2) for media/creatives |
| Axonwise Private Limited (Sarvam AI) | Voice STT/TTS when voice CRM is used |
| Zoho Corporation (ZeptoMail) | SMTP relay for outbound transactional and owner-approved email |
| Razorpay | Payment processing / credits (billing; not Meta messaging storage) |
Outbound email is sent via our Contabo mail server and relayed through Zoho ZeptoMail for delivery. Transactional mail (OTP, invites) does not include Meta message content. Agent-initiated email is owner-approved and may include business content the owner chooses to send.
7. Security
We use industry-standard safeguards including encryption in transit (TLS 1.2+), encryption at rest, role-based access control, audit logging, and the principle of least privilege. No system is perfectly secure, and we cannot guarantee absolute security.
8. Your rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data (see our Data Deletion Instructions).
- Withdraw consent or revoke any connected platform integration at any time.
- Lodge a complaint with the relevant data protection authority.
To exercise any of these rights, email support@agentiqminds.com.
9. Children
Simba is not intended for individuals under the age of 18. We do not knowingly collect data from children. If you believe a minor has provided us data, please contact us and we will delete it.
10. International transfers
We are headquartered in India and process data primarily within India. Where data is transferred to other jurisdictions (e.g. cloud regions or third-party processors), we apply appropriate safeguards consistent with applicable law, including the Digital Personal Data Protection Act, 2023 (India).
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified via the Service or by email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
12. Contact
AgentiqMinds LLP
Erode, Tamil Nadu, India
Email: support@agentiqminds.com