Privacy notice

Who processes your data

The controller is Sheilim LLC, a company incorporated in the United States and operator of the Shimli platform. Contact: hola@sheilim.com.

Two different relationships

It matters to tell them apart, because the duties differ:

• Site visitors. Here Sheilim acts as controller: we decide what data we ask for and why.
• Our clients' customers. When a bank or lender uses Shimli to talk to its borrowers or users, that institution is the controller and Sheilim acts as processor, following its instructions and the signed agreement.

What we collect on this site

• Data you give us. Name, company, work email and phone or WhatsApp number when you chat with Sofía or request a demo.
• Conversation content. The messages you write in the site chat, so we can reply and follow up commercially.
• Technical data. Aggregated usage and performance metrics via Vercel Analytics and Vercel Speed Insights, with no advertising cookies and no individual profiling.
• Session identifier. A random code stored in your browser to keep the thread of your conversation with Sofía and attribute it if you later leave your details. It holds no information about you and is not linked to your identity until you provide it.

We do not collect special categories of data through the site, nor do we ask for financial information in the contact form.

What we store in your browser

The site does not use cookies. It stores three values in your browser's local storage, and they are removed when you clear your browsing data:

• shimli-lang — the language you chose.
• shimli-theme — whether you prefer the light or dark theme.
• shimli-visitor — the session identifier described above.

What we use them for

• Answering your questions and scheduling a discovery session.
• Commercial follow-up on an opportunity you initiated.
• Measuring, in aggregate, which parts of the site are useful.
• Meeting legal and contractual obligations.

We do not sell personal data, do not share it for advertising purposes and do not use it to train third-party models.

Who we share them with

Only with providers necessary to operate, under contract and bound by confidentiality:

• Vercel — site hosting and aggregate analytics.
• FusionAI — the engine behind the site assistant, which records contacts in our CRM.
• AI model providers, solely to process the query at hand.

We may disclose information when required by a competent authority under applicable law.

Security

• Encryption in transit and at rest.
• Per-client data isolation within the platform.
• Role-based access control and activity logging.
• Traceability of every action executed by an AI agent.

How long we keep them

Commercial contact data is kept while a relationship or legitimate follow-up interest exists, and for a maximum of 24 months from the last contact, unless the law requires otherwise. Within the platform, retention of our clients' data is defined by each institution in its contract.

Your rights

You may request at any time:

• Access to the data we hold about you.
• Correction of inaccurate data.
• Deletion, when no longer necessary.
• Objection to or restriction of processing.
• Portability of the data you provided.

If you are a customer of an institution that uses Shimli, address your request to that institution: it is the controller of your data and we will assist it.

Changes to this notice

If we amend this notice, we will update the date in the header. Material changes will be communicated to clients with active contracts.