Privacy Policy

1. Who we are

SmartNetra and Simino Social are operated by SIMINO LABTEST PRIVATE LIMITED. SmartNetra is the company’s AI product studio. Simino Social lets users compose, schedule and publish content to connected Facebook Pages, Instagram Business or Creator accounts, and YouTube channels.

The product-specific policy is also available at Simino Social Privacy Policy. If this policy and the product-specific policy differ, the more specific Simino Social provision applies to use of Simino Social.

2. SmartNetra website information

If you join the SmartNetra waitlist, we collect your email address. Our hosting provider may process standard request information such as time, referring page, country, browser and device type, and a cryptographic hash derived from your IP address for abuse prevention. We use this information to manage early access, send relevant product updates, prevent abuse and operate the website.

3. Simino Social account and content information

Simino Social may process your sign-in email address, user identifier, workspace name, membership and role, communication preferences, post captions, titles, descriptions, scheduled times, target account selections, delivery status, uploaded photos or videos, file metadata, session activity, diagnostic records and support communications.

For connected accounts, we receive only the information needed to display the account and publish on your behalf:

• Facebook: Pages you administer and each Page’s ID, name, profile picture and Page access token.
• Instagram: the linked Business or Creator account ID, username and profile picture.
• YouTube: channel ID, channel title and channel thumbnail.

We may store the platform identifier and permalink returned after publishing. We do not read your inbox, direct messages, friends list, contact list, follower list, private posts or existing social-media library.

4. Passwords and access tokens

We never receive or store your Facebook, Instagram or Google password. Authorization happens on the connected platform’s own website. The platform returns a revocable access token limited to the permissions you approve.

Tokens are encrypted with AES-256-GCM before storage, kept in a private database schema protected by row-level access controls, and decrypted only inside the server-side publishing function for the duration of a request. Tokens are not sent to your browser or mobile application.

5. How we use information

• Create, authenticate and manage accounts and workspaces.
• Store drafts, media and schedules until you publish or delete them.
• Validate media against connected-platform limits.
• Publish content to accounts you select at the time you choose.
• Retry temporary failures and display delivery status and platform responses.
• Prevent abuse, diagnose faults and provide security or service notices.
• Comply with applicable legal, tax and regulatory obligations.

We do not sell personal information. We do not use your content or connected-platform data to train machine-learning models, for advertising, or to build advertising profiles.

6. Google and YouTube API data

Simino Social uses YouTube API Services. By connecting a YouTube channel, you agree to the YouTube Terms of Service. Google’s Privacy Policy describes how Google handles data it receives.

Simino Social requests youtube.upload to upload a video you composed to the selected channel and youtube.readonly to list your channels and display the selected channel’s title and thumbnail.

Simino Social’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

For Google accounts, we store only the channel identifier, channel title, channel thumbnail, encrypted refresh token and identifier of each video uploaded for you. You can revoke access at any time through Google third-party connections or by disconnecting the channel in Simino Social.

7. Facebook and Instagram data

Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies, including limited-use requirements. We request only the permissions needed to list eligible accounts and publish the content you direct us to publish.

8. Media, cookies and storage

Uploaded media is stored in private storage scoped to your workspace. Short-lived signed links may be provided to Meta so Facebook or Instagram can fetch media for a requested publication. Videos for YouTube are uploaded directly to Google’s upload endpoint. We do not perform facial recognition, biometric analysis or advertising profiling on your media.

We use browser storage for essential sign-in sessions. We do not use third-party advertising trackers or cross-site behavioural profiling scripts.

9. Sharing and service providers

We share information only with connected platforms when you publish, authorized members of your workspace, infrastructure providers needed to operate the service, authorities when legally required, or as part of a lawful business transfer subject to this policy. Our principal infrastructure providers include Supabase for authentication, database and private storage, and Cloudflare for website delivery and scheduled processing.

10. Retention and deletion

SmartNetra waitlist records are retained while early access is active or until deletion is requested. Simino Social posts, media and delivery records are retained while your account is active. Disconnecting a social account deletes its stored credential. Limited records may be retained where required for security, disputes, fraud prevention, tax, accounting or legal obligations.

To delete Simino Social data, disconnect an account in the product, revoke access through the connected platform, or follow the public Simino Social data-deletion instructions. Verified full-account deletion requests may be sent to SiminoSocial@smartnetra.com from the registered email address. We action verified requests within 30 days.

Published content remains on the destination platform until you delete it there.

11. Your rights

Subject to applicable law, including India’s Digital Personal Data Protection Act, 2023, you may request access, correction, deletion, withdrawal of consent and grievance redressal. We may ask you to verify control of your registered email address before acting.

12. Security and international processing

We use encrypted transmission, encryption of credentials at rest, row-level access controls, private storage, short-lived signed links and separation of credential storage from public APIs. No internet service can guarantee absolute security. Our providers may process data in multiple countries, subject to contractual and legal safeguards.

13. Children

These services are not directed to children. Simino Social users must be at least 18 years old, and we do not knowingly collect personal information from children.

14. Changes

We may update this policy as our services or legal obligations change. We will publish the revised policy with a new last-updated date and provide additional notice when a change is material.

15. Contact and grievance redressal

Privacy and grievance requests should identify the service and account involved. We will acknowledge and address verified requests in accordance with applicable law.