1. Scope
This Privacy Policy applies to Shimpz websites, accounts, Teams, Assistants, and related platform features that link to it. It does not replace the privacy terms of a third-party service you choose to connect, such as an AI model provider or an OAuth provider.
2. Information we process
- Account information: email address, password verifier, session data, and account status.
- Team content: Team settings, chat messages, files, instructions, and Assistant results you submit or create.
- Connected accounts: provider identity, approved scopes, connection status, token expiry, and OAuth access or refresh tokens.
- Configuration: model-provider choices, Assistant installations, approvals, and resource settings.
- Security records: bounded logs about requests, authentication, changes, failures, and suspected abuse.
3. How we use information
We process information to:
- create and secure your account and Teams;
- perform the operations you request through Assistants and connected providers;
- maintain, troubleshoot, audit, and improve the platform;
- detect abuse, protect users, and enforce platform limits; and
- comply with applicable legal obligations.
4. OAuth and connected providers
Connecting a provider is optional. Shimpz requests only reviewed scopes and uses the resulting grant to perform operations you authorize. We do not sell OAuth data. We do not use connected-account data for advertising. You may disconnect a provider, and you may also revoke Shimpz from that provider's authorization settings.
Provider tokens are treated as protected credentials. They are kept outside public responses and are disclosed only to the bounded internal execution path needed for an authorized operation.
5. AI model providers
When you ask a Team to perform work, relevant instructions, messages, files, and context may be sent to the AI model provider selected for that Team. That provider processes the information under its own terms and privacy policy. Avoid submitting information that is not needed for your request.
6. When information is shared
We share information only as needed:
- with providers you select, to complete an operation you request;
- with infrastructure vendors that process data for the platform under appropriate restrictions;
- when you direct us to share it or collaborate with another authorized user; or
- when reasonably necessary to comply with law, protect rights, or prevent harm.
We do not sell personal information.
7. Retention and deletion
We retain information while your account, Team, or provider connection is active and for only as long afterward as reasonably necessary for security, recovery, dispute resolution, or legal obligations. Disconnecting a provider stops new use of its grant. Deleting a Team or account may not immediately remove bounded backup or security records, which expire under their applicable retention cycle.
8. Security
Shimpz uses access controls, encryption, scoped credentials, network isolation, secret redaction, and audit controls designed to protect information. No system is perfectly secure, so you should use a unique password, protect your sessions, and promptly revoke access you no longer trust.
9. Your choices and rights
You can review account and Team information, disconnect providers, revoke provider authorization, and request account deletion. Depending on where you live, you may also have rights to access, correct, delete, restrict, object to, or receive a copy of personal information.
10. Children
Shimpz is not directed to children under 13, and we do not knowingly collect their personal information. A higher minimum age may apply where required by local law.
11. Changes
We may update this policy as the platform changes. The effective date above identifies the current version. Material changes will be presented through an appropriate platform or website notice.
12. Contact
For privacy questions or requests, contact [email protected].