Simmissimmis inspect the source

privacy

How Simmis handles information from the website, waitlist, and direct communications.

1. scope and responsibility

This Privacy Notice covers simm.is, the Simmis Cloud waitlist, and messages sent directly to Simmis. Simmis is a project preparing to operate through a corporation to be incorporated in British Columbia, Canada. In this Notice, “Simmis,” “we,” and “us” refer to that project.

This Notice does not replace the product-specific privacy and data-processing terms supplied to invited evaluation participants. It also does not make Simmis the operator of a deployment you run on infrastructure you control.

Questions and privacy requests may be sent to the Simmis privacy contact at info@simm.is.

2. information we collect

information you provide

  • Waitlist information: your name and email, plus any organization, industry, agent setup, intended work, operational requirements, hosting requirements, trust requirements, preferences, or other optional answers you submit.
  • Communications: the contents and metadata of messages you send us, including support, partnership, security, and other enquiries.
  • Marketing choice: whether you separately ask to receive occasional product news, the consent language and notice version shown, and later withdrawals or unsubscribe requests.

Do not submit credentials, regulated records, sensitive personal information, confidential customer data, or vulnerability details through the waitlist. Use the process on the Security page for security reports.

information collected when the Site is used

  • Request and device data: hosting and network providers necessarily receive information such as IP address, requested URL, browser or user-agent information, referring page, request time, and security events to deliver and protect the Site.
  • Submission metadata: the waitlist may record the source path, referrer, submission time, and utm_source, utm_medium, and utm_campaign values when present.
  • Local preference: changing the language displayed in dual-language code examples may store codeDualLang in your browser’s local storage. It remains on your device until you clear it.

The current Site does not provide visitor accounts, run advertising, use analytics pixels, or set Site-operated cookies.

3. why we use information

We use personal information to:

  • deliver, maintain, troubleshoot, and secure the Site;
  • administer the waitlist and evaluate requests for possible invited access;
  • answer enquiries and conduct requested pre-contractual discussions;
  • understand product, deployment, and operational requirements in aggregate;
  • send product updates only where you separately requested them;
  • investigate misuse, vulnerabilities, or security incidents; and
  • establish, exercise, or defend legal rights and meet legal obligations.

Where a legal basis is required, we rely on: consent for optional product updates; steps you request before entering an agreement for waitlist and access enquiries; legitimate interests for Site delivery, security, ordinary business communications, and understanding product requirements where those interests are not overridden by your rights; and legal obligations or legal claims where applicable. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

4. providers and disclosures

We disclose information only as reasonably necessary for the purposes above, when you direct us to, in connection with a legitimate corporate reorganization, to protect people, rights, or systems, or where law requires it. Current Site-related recipients include:

  • Formspree: waitlist answers are submitted to Formspree, made available in its dashboard, and delivered to Simmis by email. See Formspree’s Privacy Policy.
  • Website and network providers: providers that deliver and secure the static Site process ordinary request and security metadata.
  • Email providers: messages and Formspree notifications are processed by the providers used by the sender and Simmis.
  • Google Fonts: the browser requests IBM Plex and Source Serif assets from Google. See the Google Fonts privacy FAQ.
  • cdnjs and Cloudflare: code-rendering assets are requested from cdnjs, which is operated using Cloudflare infrastructure. See cdnjs and Cloudflare’s Privacy Policy.
  • YouTube: visiting the Architecture page may load an embedded video from YouTube’s privacy-enhanced domain and disclose ordinary request and device data to Google or YouTube, even if you do not play it. See Google’s Privacy Policy.

We do not sell personal information, share it for cross-context behavioural advertising, or use it for targeted advertising. We do not use waitlist or customer content to train generalized AI models.

5. international processing

Simmis is operated from Canada. Formspree and other providers may process information in the United States, Canada, and other countries in which they or their subprocessors operate. Privacy laws and lawful-access rules may differ between countries. The mechanism and safeguards applicable to a transfer depend on your location, the provider, and the processing involved. Contact us for information about the mechanism applicable to your information. Simmis must complete any legally required transfer assessment or safeguard before beginning a covered pilot transfer.

6. invited evaluations and customer-controlled deployments

An invite-only hosted evaluation may begin only after its Pilot Agreement and, where customer personal information may be processed, its Data Processing Addendum and Security Measures Schedule are completed and signed. Under those documents, Simmis may act as a service provider or processor for customer content and as an independent organization or controller for necessary account, access, security, and business-administration records.

Operating published source on infrastructure you control does not by itself establish that every data path remains local. The selected build, configuration, integrations, model providers, intake endpoints, telemetry, and support paths determine where information goes. You must verify those paths and determine the deployment, users, permissions, providers, retention, backup, and required notices. Any Simmis-operated endpoint or support access is covered only by its completed written terms.

7. retention

On Formspree’s current Free plan, waitlist answers and submitted source, referrer, and UTM metadata remain available in its dashboard for 30 days. Simmis may retain the notification email and related correspondence for up to 24 months after the last meaningful interaction where needed to administer the waitlist, follow up, document consent, or protect the project. We delete or anonymize information earlier when it is no longer needed or when a valid deletion request applies.

Hosting, network, and email providers retain request, security, and delivery records according to their configured periods and legitimate security or operational needs. The local language preference remains in your browser until you clear it. We may retain a minimal suppression record for as long as needed to honour an unsubscribe, and may retain information longer where reasonably necessary for security, legal claims, or legal obligations. Retention for an invited evaluation must be stated in its completed Pilot Order and Data Processing Addendum.

8. security

We use administrative and technical measures intended to protect information in light of its sensitivity and how the relevant service is configured. No transmission or storage method is completely secure. Please avoid sending information the Site is not designed to receive and report suspected vulnerabilities through the Security page.

9. your rights and choices

Subject to applicable law, you may ask us to confirm whether we hold information about you; access, correct, or delete it; receive a portable copy; restrict or object to processing; withdraw consent; or complain about how it was handled. You may also withdraw a waitlist request or unsubscribe from product updates at any time.

We may need to verify your identity and authority before fulfilling a request. Some information may be retained where law permits or requires it. We will not discriminate against you for exercising a privacy right.

You may also complain to the regulator in your jurisdiction, including the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner for British Columbia, the Commission d’accès à l’information du Québec, an EU supervisory authority, the UK Information Commissioner, or the California Privacy Protection Agency, where applicable.

10. California notice at collection

In the preceding twelve months, the Site may have collected identifiers, internet or electronic-network activity, professional or employment-related information, correspondence, and preferences you chose to provide. We use and disclose those categories for the operational, waitlist, communications, security, and legal purposes described above. The periods and criteria in section 7 apply to each category according to where it is held and why it is needed. We do not knowingly sell or share those categories as “sell” and “share” are defined by California law.

11. children

The Site and waitlist are intended for adults and business users. We do not knowingly solicit personal information from children. Contact us if you believe a child has provided information so that we can address it.

12. changes

We will update this Notice when the Site, waitlist, providers, or Simmis data practices materially change. The date on this page identifies the current version. Where required, we will provide additional notice or obtain consent before applying a materially different use to information already collected.

LAST UPDATED · · VERSION · 2026-08-05.1 · QUESTIONS · INFO@SIMM.IS