Last updated: 31 October 2026
Simahin Business is run by Simahin Creative Ecosystem Private Limited, Manik Mansion, Gopalpur, Asansol, West Bengal 713304, India (GSTIN 19ABUCS9989C1Z7). In this policy, "Simahin", "we" and "us" mean that company.
This policy covers the Simahin Business Android app, the Simahin Business website, and the WhatsApp assistant "Simahin AI" that answers messages for businesses. It applies to every kind of business that uses Simahin Business:
It covers the people who run those businesses and their teams, and the people those businesses serve: customers, guests, clients, students and parents. Our creator platform at simahin.in has its own privacy policy.
We play two different roles under India's data protection law, depending on whose information it is.
| Whose information | Who decides what happens to it | Our role |
|---|---|---|
| Business owners, admins and staff who use the app | Simahin | Data Fiduciary: we decide why and how it is used |
| A business's customers, guests, clients, students and parents | The business they deal with | Data Processor: we handle it only to run Simahin Business for that business, on its instructions |
If you are a customer, guest, student or parent, the business you deal with is responsible for your information. Ask them first about access, correction or deletion; we help them answer. You can also contact us directly (section 14), and we will pass your request to the business or act on it ourselves where the law allows.
Each business that uses Simahin Business agrees, in our Terms of Service, to collect information lawfully, to tell its customers about Simahin, and to get any consent the law requires, for example before sending offers or handling a child's information.
We collect this when you sign up, set up your business and use the app.
| What | Examples |
|---|---|
| Account | Name, email address, your business's WhatsApp number, password (stored in scrambled form by our sign-in provider), preferred language |
| Your business | Business name and type, city, phone, logo and colours, opening hours, menu, prices and packages, public page content, Google review link |
| Payment and tax details | UPI ID, bank details, GSTIN, your Razorpay keys if you connect Razorpay (stored encrypted) |
| Your team | Names and mobile numbers of people you invite, and their roles |
| How you use the app | An activity log of important actions, your chats with Simahin AI, how often AI features are used, your alert settings |
| Your device | A notification token so we can send you alerts, the type of device and app, and error logs when something breaks |
| WhatsApp alerts | Whether you agreed to get alerts on WhatsApp, and when |
When you create an account, we confirm both your email address and your business's WhatsApp number with one-time codes before your account opens. You can then sign in with your email address and password, or with your WhatsApp number and a code we send you on WhatsApp. If you turn them on, we also use that number to send you WhatsApp alerts. Sign-in codes stop working after 10 minutes, and we keep only a scrambled copy of them.
When you message, book with, buy from or study at a business that uses Simahin Business, we hold some of your information for that business. It comes from you (mostly through WhatsApp), from the business's team, or from the business's own WhatsApp Business app (section 5).
For every type of business: your name, WhatsApp number and language; your messages and chat history with the business; your choices about messages (service updates, offers, STOP); payment requests, payment screenshots, UTR numbers and receipts; feedback you give.
| Business type | What else we may hold |
|---|---|
| Cafés and restaurants | Table bookings (time, party size, table, notes), orders (items, totals, pickup or table), waitlist entries, visit counts and missed bookings |
| Event planners | Enquiries (event type, date, venue, guest count, budget), quotes and payment schedules, guest lists and RSVPs (name, phone, headcount, food preference), vendor contacts, run sheets |
| Musicians and bands | Gig enquiries and bookings, band members' names, phones and fees, song requests, ticket buyers (name, phone, tickets, check-in) and waitlists |
| Music classes, schools and coaching | Students and their parents or guardians, admissions, fees, attendance, marks and report cards, class diary and photos, school bus routes. Section 6 explains how we treat children's information. |
The business decides what to collect and why. We use this information only to run Simahin Business for that business (section 2).
Simahin Business runs on Meta's WhatsApp Business Platform. Simahin is a Meta Tech Provider: a business connects its own WhatsApp number to Simahin through Meta's sign-up window, and can disconnect it at any time.
What Meta shares with us when a business connects. The business's WhatsApp Business Account ID, its phone number ID and display number, its verified business name, its Meta business portfolio ID, and an access token that lets us send and receive messages for that number. We store the access token encrypted.
What we receive through WhatsApp.
How we use it. Only to run Simahin Business for that business: showing chats in the app, letting Simahin AI reply, and sending the reminders, receipts and updates the business has set up. We do not sell WhatsApp data, use it for advertising, or combine one business's customers with another's.
Opting out. A customer can reply STOP to stop all messages from a business, or START to turn them back on. Offers have their own "Stop offers" button.
Alerts to owners. We send business owners alerts (a new booking, a payment to check) from Simahin's own WhatsApp number, only if the owner turns this on.
Disconnecting. When a business disconnects its number in the app, or removes Simahin in Meta Business Settings, we delete the stored access token and stop receiving its messages. Chats already in Simahin stay as that business's records until it deletes them (section 11).
Meta handles WhatsApp messages under its own terms and WhatsApp's Privacy Policy. Messages sent through WhatsApp's Cloud API are processed by Meta on its servers.
Schools, pre-schools, coaching centres and music classes use Simahin Business for students, many of them under 18. The school or class is responsible for getting the parent's or guardian's consent where the law requires it; we handle children's information only for it, and only for teaching, safety and the child's well-being.
What we may hold about a student. Name, admission number, class or batch, under-18 status, parent or guardian name and contact, attendance and absence reasons, leave notes, marks and test results, report-card remarks and teacher notes, fee invoices, class diary entries and photos, photo consent, bus route and stop. For admissions we also hold date of birth and any documents the parent uploads.
We talk to parents, not children. Messages about a child under 18 go to the parent or guardian's WhatsApp.
Photos. Each child has a photo-consent setting. If it is not "yes", the child is blurred or left out of class photos; blurring happens on the teacher's phone before the photo is uploaded. A photo is sent only to the families of the children tagged in it, through a link that works for 3 days.
School bus tracking. Tracking uses the bus attendant's phone, never a child's. It runs only while a trip is on, sending the bus's position and speed about every 15 seconds, and stops when the trip ends or after 4 hours at most. Positions are deleted when the trip ends. Parents get a link that shows the bus only while the trip is running. The map is drawn with OpenStreetMap.
Report-card remarks. Simahin AI can suggest a remark from the child's first name, marks, attendance and the teacher's notes. A teacher or the school approves every remark before it is sent.
What we never do. We do not track children's behaviour, build profiles of them, or use their information for advertising.
Admissions that don't go ahead. If an application is declined, or a child is not admitted and the application sees no activity for 30 days, we delete the uploaded documents and the date of birth.
Simahin AI answers WhatsApp messages for a business and helps owners with their work. It uses the business's own information (menu, hours, prices, packages, rules) and the chat in front of it.
What it does. Replies to customers; takes bookings, orders and enquiries; reads payment screenshots; drafts quotes, notices and report-card remarks; answers owners' questions about their business.
Where it runs. Messages and details the AI needs are sent to an AI model run by OpenAI, through Lovable's AI gateway. Every request tells the provider not to store it. We do not use your personal information to train AI models.
People stay in charge.
If a customer asks whether they are talking to a person, Simahin AI says it is an automated assistant.
Money paid to a business goes straight to that business. It never passes through Simahin. We never see or store card numbers, UPI PINs or bank passwords.
We use personal information only for the purposes below. We do not sell it, and we do not show advertising in Simahin Business.
| Purpose | Whose information | Basis |
|---|---|---|
| Create and secure your account; run the app you signed up for | Owners and teams | Your consent when you sign up, and the service you asked for |
| Answer customers, take bookings and orders, send reminders, receipts and updates | Customers, guests, students, parents | The business's instructions; the business is responsible for its basis |
| Send offers, win-back messages and review requests | Customers who said yes to offers | Consent. We send these only to people who opted in, have not said STOP, and have had no offer from that business in the last 30 days |
| Send owners alerts on WhatsApp | Owners and teams | Consent you give in the app; you can turn it off |
| Keep Simahin safe: stop misuse, fix errors, investigate problems | Everyone | Our legitimate need to protect the service and its users |
| Meet legal duties: tax records, lawful requests | Everyone, as needed | The law |
Where we rely on consent, you can withdraw it at any time (section 13).
We share personal information only with the services that run Simahin Business, each for one job, and where the law requires it.
| Service | What it receives | Why |
|---|---|---|
| Lovable Cloud (runs on Cloudflare) | Everything stored in Simahin Business | Hosting, database, sign-in, file storage, sign-up confirmation emails |
| Meta (WhatsApp) | Messages to and from businesses, phone numbers, message templates | Sending and receiving WhatsApp messages |
| Lovable WhatsApp connector | Messages on Simahin's own WhatsApp number | Sign-in codes, owner alerts, and businesses that use Simahin's number before connecting their own |
| Lovable AI gateway and OpenAI | The chat or details the assistant needs for each task | Running Simahin AI, with a no-storage instruction on every request |
| Google Firebase | Device notification token, alert title and text (may include a name) | Push notifications to owners and staff |
| Razorpay | Payment details; buyer name and phone for tickets | Online payments to a business's own Razorpay account |
| OpenStreetMap | The bus position shown on the map | Drawing the school bus map |
| Google Maps | A location, only when you tap "Open in Google Maps" | Directions |
| Google Fonts | Your device's IP address when a page loads | Showing the app's fonts |
Inside a business, team members see information according to their role. A parent sees only their own child's information. A business's public page shows only what the business chooses to publish.
Other cases. We may disclose information when the law, a court or a government authority requires it, or to protect someone's safety. If Simahin is merged or sold, this policy will continue to apply to your information.
Storage outside India. Some of these services may store or process information outside India. We use only services that protect it, and we follow any restrictions the Government of India sets on transfers.
We keep information while a business uses Simahin Business, and delete some of it sooner, automatically:
| Information | Deleted |
|---|---|
| School bus positions | When the trip ends (trips end automatically after 4 hours) |
| Event guest lists and guest-only contacts | 30 days after the event |
| Admission documents and date of birth, for children not admitted | When the application is declined, or after 30 days with no activity |
| Messages from people who don't match any business on Simahin's number | Straight away; we keep no content |
| Messages that could not be sent | After 7 days |
| Sign-in codes | After one day (they stop working after 10 minutes) |
| Everything else a business holds | One year after the business closes its account, unless the law requires us to keep it longer |
| Your account, and any business you own | 30 days after you delete your account in the app (Settings → Delete account) or ask us to, except records the law requires us to keep |
Links we send expire too: bus tracking while the trip runs, class photos after 3 days, admission forms after 7 days, report cards after 30 days, receipts after one year. Expired links stop working; they do not delete the record behind them.
Asking for deletion. Business owners can disconnect WhatsApp in the app, and can delete their account in the app (Settings → Delete account), which also deletes any business they own after 30 days. To delete a single contact, or if you can't sign in, message us on WhatsApp or email (section 14); we confirm who you are and act within 30 days. Customers, guests and parents can ask the business, or us. Some records, such as tax invoices, must be kept for the period the law sets, even after a deletion request.
No system is perfectly secure. If a personal data breach happens, we will inform the affected people and India's Data Protection Board as the law requires. Where we hold the data for a business, we will also tell that business without delay so it can act.
Under India's Digital Personal Data Protection Act, 2023 you can:
How to use them. Business owners and team members can change most details in the app, or write to us (section 14). Customers, guests, students and parents should ask the business first, since it decides about their information; you can also write to us and we will help. A parent or guardian uses these rights for a child under 18.
We may ask you to confirm who you are before acting. We answer within 30 days.
For any question, request or complaint about your personal data, contact our Grievance Officer:
We acknowledge every request within 48 hours and resolve it within 30 days. How to delete your data step by step: see the Data deletion page on our website.
We will update this policy when Simahin Business or the law changes. The date at the top shows the latest version. For a change that affects how we use your information in a significant way, we will tell business owners in the app at least 15 days before it takes effect, and ask for fresh consent where the law requires it.