Privacy Policy

Introduction

Simbotix ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website simbotix.com and use our services across the Simbotix ecosystem (including systemz.studio, appz.studio, botz.studio, simbotix.studio, and onbitcoinstandard.com).

Information We Collect

Information You Provide

Account Information: Name, email address, company name (optional), phone number (optional), billing address, and payment information (processed securely via Razorpay or BTCPay Server).

Communication Data: Emails and messages you send us, contact form submissions, discovery call notes, and support ticket content.

Service Data: Data you enter into systems we host for you (ERPNext, Frappe applications), files you upload, and configuration preferences.

Information Collected Automatically

Technical Data: IP address, browser type and version, device information, operating system, time zone and approximate location.

Usage Data: Pages visited, time spent on pages, click patterns, and referral source.

Cookies and Tracking: Essential cookies for site functionality, analytics cookies (if you consent). We do NOT use third-party advertising cookies.

How We Use Your Information

• To Provide Services: Create and manage your account, deploy and maintain hosted applications, process payments, provide support, send service-related notifications.
• To Improve Our Services: Analyze usage patterns, identify and fix bugs, develop new features, optimize performance.
• To Communicate: Respond to inquiries, send important updates, share educational content (with consent), notify about security issues.
• Legal Compliance: Meet legal obligations, respond to legal requests, protect our rights and property.

Data Storage and Security

Hosted Services (AppZ): Your Frappe/ERPNext data is stored on professionally managed infrastructure. Backups are stored in secure, encrypted storage.

We implement industry-standard security measures: SSL/TLS encryption, encryption at rest, role-based access controls, regular security audits, automated backups, and two-factor authentication.

Data Retention

Your Rights

You have the right to access your personal data, request correction of inaccuracies, request deletion (subject to legal retention), receive data in portable format, object to certain processing, and withdraw consent for optional processing.

For Indian Users (DPDP Act 2023)

You can request access, correction or erasure, nominate someone to exercise your rights, and file complaints with the Data Protection Board.

For EU/EEA Users (GDPR)

All GDPR rights apply. You can lodge complaints with supervisory authorities. Data transfers outside EU are done with appropriate safeguards.

To exercise any rights, email [email protected] with subject line "Privacy Request - [Your Request Type]". We respond within 30 days.

Data Sharing

We share data with: Service providers (hosting infrastructure, Razorpay for INR payments, BTCPay Server for Bitcoin, email service providers), and when required by law.

We do NOT: Sell your personal data, share data with advertisers, use your data for purposes you haven't consented to, or share your hosted application data with anyone.

Cookies

Essential Cookies: Required for session management, security tokens, and user preferences.

Analytics Cookies (Optional): Privacy-focused analytics and performance monitoring, with your consent.

You can control cookies through browser settings, our cookie consent banner, or by opting out of analytics.

Bitcoin and Cryptocurrency Payments

When you pay with Bitcoin: We use BTCPay Server (self-hosted) for processing. Transaction data is recorded on the Bitcoin blockchain (public). We store only necessary transaction references. We do not share your payment information with third parties. Lightning payments provide additional privacy.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

International Data Transfers

If you are accessing our services from outside India, your data may be transferred to and processed in India. We ensure appropriate safeguards are in place.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date and communicated via email for significant changes.

Contact Us

For privacy-related questions: [email protected]. Response time: within 48 hours.

Governing Law

This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of courts in India.