1. Scope and roles
This notice applies to the simpldata website, authenticated application, and related services operated by SimplSolutions. Depending on the service context, SimplSolutions may act as a controller for account, security, and business-contact information and as a processor or service provider for customer-directed project data.
Customers remain responsible for the sources they authorize, the lawful basis for their use, and instructions they provide to simpldata. This notice does not replace a customer agreement, data processing addendum, or a source publisher's privacy notice.
2. Information we handle
Website and security information
Our infrastructure may process IP address, browser and device information, request timestamps, requested paths, and security-event metadata needed to deliver and protect the service.
Account and business information
We may process a user's name, business email address, role, organization, authentication state, invitation status, project access, support communications, and administrative audit events.
Customer project data
simpldata may process source URLs, documents, media metadata, structured records, project settings, derived knowledge, review decisions, and related provenance supplied by a customer or collected from customer-authorized and public sources.
Public-source personal information
Public records and organizational websites can contain names, job titles, professional contact details, meeting participation, or other personal information. simpldata is designed to preserve source context and access controls rather than detach that information from its origin.
We do not intentionally collect payment card details, government identification numbers, health records, or other sensitive personal information through this public marketing site.
3. Why we use information
- Provide, maintain, secure, and improve simpldata.
- Authenticate users and enforce role and project access.
- Collect, organize, retrieve, and monitor customer-directed information.
- Preserve provenance, review status, quality signals, and operational history.
- Respond to support, privacy, security, and legal requests.
- Detect misuse, investigate incidents, and protect users and the service.
Where GDPR applies, the legal basis may include performance of a contract, legitimate interests in providing and securing the service, compliance with legal obligations, or consent when consent is required. SimplSolutions applies purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability principles to covered processing.
5. Retention and deletion
Information is retained only for as long as reasonably necessary for the purpose described, the active customer relationship, security and audit needs, contractual commitments, and legal obligations. Retention varies by data type and project instructions. When information is no longer needed, it is deleted, de-identified, or placed beyond active use, subject to limited backup and legal-retention periods.
Customers can request project deletion or return of customer-directed data according to their agreement. Privacy requests are evaluated against the relevant role, source, legal obligation, and applicable exemptions.
7. Privacy rights
California residents
Subject to applicable law and verification, California residents may request access to categories and specific pieces of personal information, correction, deletion, information about collection and disclosure, and non-discriminatory treatment for exercising privacy rights. We do not sell or share personal information, so there is no current sale or behavioral-advertising sharing to opt out of.
EEA, UK, and other covered residents
Where applicable, individuals may request access, correction, deletion, restriction, portability, or objection; withdraw consent where processing relies on consent; and lodge a complaint with a supervisory authority. Individuals also have rights concerning qualifying solely automated decisions.
Submitting a request
Email jason@simplsolutions.app with the subject "simpldata privacy request." We may verify identity and authority before acting. Authorized agents should identify the person they represent and provide evidence of authorization. We will respond within the period required by applicable law.
8. International processing, security, and children
Information may be processed in the United States or other locations used by contracted service providers. Where required, SimplSolutions uses appropriate transfer and contractual safeguards.
We use administrative, technical, and organizational safeguards designed to protect information. No internet service can guarantee absolute security. Visit our Security page for the controls we publicly describe and the responsible-disclosure process.
simpldata is a business and organizational service and is not directed to children under 13. The public marketing site does not knowingly collect children's personal information.
9. Changes and contact
We may update this notice as the service or legal requirements change. Material revisions will be reflected by a new effective date and, when appropriate, direct notice to affected customers.
For privacy questions or rights requests, contact SimplSolutions at jason@simplsolutions.app.