Privacy Policy
Last updated: 25 October 2026
1. Data controller
Simula AI is operated under the B&S Company brand by Samuele Maestri — Via Brazzolo, 89, Tresignana (FE), 44039, Emilia-Romagna, Italia. P.IVA 02196260380. PEC: samuelemaestri@pec.it.
2. Data we process
We process account and contact details, authentication and security information, organization profiles, uploaded texts, images and videos, website links, simulations and funnel reports, usage records and service logs. Subscriptions involve payment references and billing details. For referrals we process attribution, rewards, the account holder’s name and IBAN. Do not upload special-category personal data or third-party confidential material without an appropriate legal basis.
3. Purposes and legal bases
Account management, simulations, subscriptions, support and referral payouts are processed to perform the contract or take steps at your request (GDPR Article 6(1)(b)). Accounting and other mandatory records are processed to comply with legal obligations (Article 6(1)(c)). Security, abuse prevention and service diagnostics rely on legitimate interests (Article 6(1)(f)), subject to your rights. Any optional tracking requires prior consent (Article 6(1)(a)); it is not currently active.
4. AI processing and suppliers
The service uses Lovable Cloud for hosting, accounts and data storage, OpenRouter and the selected model providers for AI processing, Apify for website reading and Stripe for payment services. Submitted content and relevant organization context may be sent to these providers to generate the requested analysis. Website reading may also use a direct request to the supplied address. The payment provider collects payment card details; Simula AI does not store full card numbers. Suppliers act according to their applicable contractual roles and privacy terms. Banks process data needed for manual referral transfers.
5. Retention and international transfers
Account data and content are kept for the provision of the service and handled following a valid deletion request, except for information required by law, security or the establishment or defence of legal claims. Accounting records may be retained for ten years where Italian law requires it. Supplier logs and backups follow their applicable retention arrangements. Providers may process data outside the EEA; where required, transfers must rely on an applicable adequacy decision or appropriate safeguards such as standard contractual clauses. Contact the controller for details about the safeguards and retention relevant to your data.
6. Rights and complaints
Where applicable, you may request access, rectification, erasure, restriction, portability or object to processing, and withdraw consent without affecting processing already lawfully carried out. Send requests to samuelemaestri@pec.it. You may complain to the Italian data protection authority (Garante per la protezione dei dati personali) or your competent supervisory authority. AI reports are indicative market simulations, not decisions producing legal or similarly significant effects about individuals.