Privacy Policy

SIMULATION ("we", "our", "us") operates the platform at simulation-auto.com — an AI-powered business automation platform built for East African SMEs, clinics, NGOs, and organisations. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service. By using SIMULATION, you agree to the collection and use of information as described in this policy.

• Account data: Your name, email address, and hashed password when you register.
• Business data: Organisation name, WhatsApp Business account details, phone numbers, and business type.
• Transaction data: Order records, M-Pesa and Airtel Money payment references, and amounts processed through the platform.
• Message data: WhatsApp messages routed through the platform to process customer interactions on your behalf.
• Usage data: Pages visited, features used, workflow execution logs, and error events for improving the service.
• Device info: Browser type, IP address, and device identifiers for security and session management.

• Service delivery: To operate workflows, send/receive WhatsApp messages, and process payments on your behalf.
• AI analysis: To generate anonymised business insights, anomaly alerts, and workflow suggestions. No personal customer data is used in model training.
• Communications: To send transactional emails (account verification, password reset, weekly AI reports).
• Legal compliance: To meet obligations under Tanzanian law including the Personal Data Protection Act 2022 (PDPA).
• Security & fraud prevention: To detect suspicious activity, protect accounts, and maintain platform integrity.

We do not sell your personal data. We never will. We share data only with:

• Meta Platforms: To send and receive WhatsApp messages via the WhatsApp Business API under Meta's data processing terms.
• Payment processors: M-Pesa (Safaricom) and Airtel Money receive only the minimum data required to process a payment transaction.
• Cloud infrastructure: Our hosting, database, and Redis providers process data on our behalf under strict data processing agreements.
• Legal authorities: When required by Tanzanian law, court order, or to protect the rights and safety of our users.

SIMULATION is committed to compliance with the Personal Data Protection Act 2022 (PDPA) of Tanzania. Under the PDPA: • We collect data only for specified, explicit, and legitimate purposes. • We do not process data in ways incompatible with those purposes. • We maintain data accuracy and update records upon request. • We implement appropriate technical and organisational security measures. • We respect your rights as a data subject under Part IV of the PDPA. • We register as a data controller with the relevant Tanzanian authority as required. For PDPA inquiries, contact our Data Protection Officer at: privacy@simulation-auto.com

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your account and associated data. Deleted account data is purged within 90 days.
• Data portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for direct marketing purposes.
• Withdraw consent: Withdraw any consent you have previously given, without affecting lawfulness of prior processing.

Active accounts: We retain your data for as long as your account is active or as needed to provide the service. Deleted accounts: When you delete your account, we initiate a 90-day purge process. After 90 days, your personal data and business data are permanently deleted from our systems. Anonymised, aggregated analytics data (not linked to you) may be retained longer for platform improvement. WhatsApp message logs: Retained for 12 months to support dispute resolution, then automatically deleted.

We use session cookies only — small files stored in your browser to keep you logged in during your session. These are deleted when you close your browser. We do NOT use: • Advertising or tracking cookies • Third-party analytics cookies (e.g. Google Analytics) • Fingerprinting or cross-site tracking You can disable cookies in your browser settings, but this may affect your ability to use the platform.

We protect your data with industry-standard security practices: • AES-256-GCM encryption for sensitive credentials at rest • HTTPS / TLS 1.3 for all data in transit • Role-based access controls limiting who can view your data • Regular security audits and penetration testing No method of transmission over the internet is 100% secure. We encourage you to use strong passwords and enable two-factor authentication.

For any questions about this Privacy Policy, to exercise your rights, or to reach our Data Protection Officer: Email: privacy@simulation-auto.com Address: SIMULATION, Dar es Salaam, Tanzania We respond to all privacy requests within 14 business days.