privacy

How Simmis handles information from the website, waitlist, analytics, and direct communications.

1. who is responsible

This Privacy Notice covers simm.is, the Simmis Cloud waitlist, and messages sent directly to Simmis. Simmis is currently an unincorporated project operated from British Columbia, Canada by the individuals maintaining it. Those operators control the personal information described in this Notice. In this Notice, “Simmis,” “we,” and “us” refer to those operators. A Simmis corporation is intended to be incorporated in British Columbia, but it is not the current operator.

This Notice does not cover a hosted Simmis product workspace. Any invited evaluation involving customer personal information requires separate written terms as described in section 9. This Notice also does not make Simmis the operator of a deployment you run on infrastructure you control.

The Simmis privacy lead is responsible for questions, requests, and complaints under this Notice. Contact the privacy lead at info@simm.is.

2. what we collect and why

We receive information directly from you, automatically from your browser and Site providers, and through referral information associated with a visit or waitlist submission.

Formspree also receives ordinary request information associated with a submission, which may include an IP address, browser information, origin or referring page, access time, and signals used to detect spam or automated submissions.

Name and email are required to join the waitlist because we cannot administer or respond to a request without them. Other waitlist answers are optional unless the form marks them as required.

Do not submit credentials, regulated records, sensitive personal information, confidential customer data, or vulnerability details through the waitlist. Use the process on the Security page for security reports.

The current Site does not provide visitor accounts or run advertising. Google Analytics does not load unless you allow it. Simmis does not intentionally send waitlist answers, names, or email addresses to Google Analytics.

3. legal bases

Where a legal basis is required, Simmis relies on:

• Consent for Google Analytics and optional product news;
• Steps you request before an agreement when you join the waitlist or ask to discuss possible access;
• Legitimate interests in delivering and securing the Site, administering the waitlist, answering ordinary communications, understanding product requirements, and keeping appropriate business records, where those interests are not overridden by your rights; and
• Legal obligations and legal claims where processing is necessary to comply with law or establish, exercise, or defend a right.

Marketing consent is separate from joining the waitlist and is optional. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

4. providers and disclosures

We disclose information only for the purposes described in this Notice, when you direct us to, where reasonably necessary to protect people, rights, or systems, in connection with a legitimate corporate reorganization, or where law requires it. Current Site-related providers include:

• Formspree: receives waitlist answers, submission metadata, and anti-spam signals; makes submissions available in its dashboard; and delivers notifications to Simmis by email. See Formspree’s Privacy Policy.
• Website and network providers: deliver and protect the static Site and process ordinary request and security metadata.
• Email providers: process direct messages and Formspree notifications.
• Google Analytics: processes Site-use information after you allow analytics. An IP address reaches Google with the request and may be used to derive approximate location, but Google states that Analytics does not log or store the raw IP address. Advertising storage, Google Signals, and advertising personalization are disabled in the Site tag. See Google’s Privacy Policy and Google Analytics Terms.
• Google Fonts: receives browser requests for IBM Plex and Source Serif assets. See the Google Fonts privacy FAQ.
• cdnjs and Cloudflare: deliver code-rendering assets used by the Site. See cdnjs and Cloudflare’s Privacy Policy.
• YouTube: visiting the Architecture page may load an embedded video from YouTube’s privacy-enhanced domain and disclose ordinary request and device information to Google or YouTube, even if the video is not played. See Google’s Privacy Policy.

Analytics consent governs Google Analytics. It does not stop browser requests needed to load the Site, external fonts, code-rendering assets, or an embedded video.

We do not sell personal information, share it for cross-context behavioural advertising, use it for targeted advertising, or use Site and waitlist information for profiling or automated decisions with legal or similarly significant effects. Simmis does not use waitlist submissions or customer content it controls to train generalized AI models.

5. international processing

Simmis is operated from Canada. Formspree, Google, Cloudflare, and other providers may process information in the United States, Canada, and other countries in which they or their subprocessors operate. Privacy laws and lawful-access rules may differ between countries.

The transfer mechanism required by law depends on your location, the provider, and the processing involved. Formspree states that it relies on Standard Contractual Clauses as a data processor where relevant. Other providers describe their transfer practices in the terms and privacy materials linked above. Simmis does not claim that one safeguard applies to every Site transfer. Contact the privacy lead for information about the providers and mechanisms relevant to your information. Simmis must verify and document any required transfer mechanism before beginning a covered invited evaluation.

6. retention

• Formspree: on its current Free plan, submitted waitlist information remains available in its dashboard for 30 days.
• Waitlist and communications: Simmis may retain notification emails and related correspondence for up to 24 months after the last meaningful interaction where needed to administer the waitlist, follow up, document consent, maintain security records, or protect legal rights.
• Google Analytics: event data is retained according to the settings applied to the Simmis Google Analytics property. If allowed, its first-party analytics cookies are configured to expire after up to 12 months.
• Analytics preference: the Site honours the stored choice for six months. When the Site next reads an expired or superseded record, it removes that record and asks again.
• Code-language preference: remains in the browser until it is changed or cleared.
• Provider records: hosting, network, email, and other providers retain operational, delivery, and security records according to their configured periods and legitimate needs.

We delete or anonymize information earlier when it is no longer needed or when a valid deletion request applies. We may retain a minimal suppression record for as long as needed to honour an unsubscribe, and may retain information longer where law, security needs, or legal claims require it.

7. your rights and choices

Subject to applicable law, you or an authorized agent may ask us to confirm whether we hold information about you; access, correct, or delete it; receive a portable copy; restrict or object to processing; withdraw consent; or complain about its handling. You may also withdraw a waitlist request or unsubscribe from optional product news.

Use “analytics preferences” in the footer to allow or turn off analytics. Turning analytics off prevents the Google tag from loading on later pages and attempts to remove Google Analytics cookies accessible to the Site.

We may verify your identity and, for an authorized agent, the agent’s authority. We will respond within the period required by applicable law. A request may be limited where law permits or requires information to be retained. We will not discriminate against you for exercising a privacy right.

You may complain to the Office of the Information and Privacy Commissioner for British Columbia, the Office of the Privacy Commissioner of Canada, or another privacy regulator with jurisdiction over the matter.

8. California disclosures and browser signals

During the preceding twelve months, the Site may have collected identifiers, internet or electronic-network activity, professional or employment-related information, correspondence, and preferences you chose to provide. Section 2 explains the purposes and recipients. Section 6 explains the applicable retention periods and criteria. Simmis does not knowingly sell or share these categories as “sell” and “share” are defined by California law.

The Site does not presently alter its operation in response to Do Not Track. Global Privacy Control does not change the current sale or sharing practice because Simmis does not sell or share personal information for cross-context behavioural advertising. Neither signal causes Google Analytics to load. Analytics remains disabled unless you affirmatively allow it through the Site’s analytics controls.

The providers in section 4 may receive request or service-use information under their own policies. Google Analytics receives Site-use events only after you allow analytics.

9. invited evaluations and deployments you control

A hosted invited evaluation may begin only under separate written terms. Where Simmis will process customer personal information on an organization’s behalf, those terms must define the roles, permitted processing, providers, retention, security measures, international transfers, deletion, and other required safeguards before that processing begins.

Running published source on infrastructure you control does not guarantee that every data path remains local. The build, configuration, integrations, model providers, intake endpoints, telemetry, and support paths determine where information goes. You are responsible for evaluating those paths in a deployment you control. Any Simmis-operated endpoint or support access is covered only by its completed written terms.

10. security and children

We use administrative and technical measures intended to protect information in light of its sensitivity and the configuration of the relevant service. No transmission or storage method is completely secure. Avoid sending information the Site is not designed to receive and report suspected vulnerabilities through the Security page.

The Site and waitlist are intended for adults acting for business or professional purposes. We do not knowingly solicit personal information from children. Contact us if you believe a child has provided information so that we can address it.

11. changes

We will update this Notice when the Site, waitlist, providers, or Simmis data practices materially change. The date and version on this page identify the current Notice. Where required, we will provide additional notice or obtain consent before applying a materially different use to information already collected.

LAST UPDATED · 2026-08-09 · VERSION · 2026-08-09.1 · QUESTIONS · INFO@SIMM.IS