Privacy Policy

1. Introduction

SimpliQ ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you engage with SimpliQ, the AI-native GTM execution engine. It covers two groups of people: our customers and users (Sections 2 through 9), and the business professionals whose contact information appears in the data SimpliQ provides (Section 4A).

This policy applies to all information collected through our services, website, and any related services, sales, marketing, or events.

2. Information We Collect

Personal Information

• Account information: name, email address, company details
• Payment information (processed by third-party payment processors)
• Communication preferences and support interactions

Usage Data

• Platform usage statistics and performance metrics
• Workflow data and automation settings
• AI interaction logs and feedback
• Device information and browser data

3. How We Use Your Information

SimpliQ collects your personal data fairly and lawfully and in accordance with any applicable law (including the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016), with our Terms of Services and with any Data Processing Agreement. The main purpose of collecting personal data is to provide you with a safe, optimal, efficient and personalized experience.

Service Delivery

• When creating an account to access SimpliQ
• Generate personalized messages using AI
• Manage workflows and track performance
• Provide customer support and technical assistance

AI Training and Improvement

• Train and improve our AI models (using anonymized data)
• Enhance message personalization algorithms
• Optimize prospect scoring and targeting
• Develop new features and capabilities

Business Operations

• Process payments and manage subscriptions
• Send service updates and important notifications
• Conduct security monitoring and fraud prevention
• Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell, trade, or rent your account information (your name, email address, payment details, or usage data) to third parties. Separately, SimpliQ provides business contact data about professionals to our customers as part of the service; how we handle that data, and the rights of the individuals it describes, are explained in Section 4A. We may share your account information in the following circumstances:

Service Providers

We work with trusted third-party service providers for payment processing, analytics, hosting, and customer support. These providers are bound by confidentiality agreements and data protection requirements.

Legal Requirements

We may disclose information when required by law, legal process, or to protect the rights, property, or safety of SimpliQ, our users, or others.

4A. Business Contact Data We Provide

SimpliQ provides customers with professional contact information about businesspeople, such as name, job title, company, business email address, and business phone number. This data is sourced from licensed third-party data providers under agreements requiring lawful collection, from publicly available professional sources, and from systems our customers connect.

Legal Basis

We process this data on the basis of our and our customers' legitimate interest in facilitating business-to-business communication. Processing is limited to professional information; we do not collect or provide sensitive personal information as defined by applicable law.

AI Research

SimpliQ's AI may analyze business contact and company information to assess professional fit and surface business signals. This analysis is limited to professional context, and is never used to make decisions with legal or similarly significant effects about any individual.

If You Are in Our Data: Your Rights

You may request access to the data we hold about you, correction of inaccurate data, restriction of processing, objection to processing, and deletion. To exercise any of these rights, contact [email protected]. To protect against fraudulent requests, we may need to verify your identity before acting; we will only ask for what is necessary to do so. When we honor a deletion request, we add your identifiers to a suppression list so your record is not re-created by future enrichment, and we notify customers who received your data where required by law. We respond within the timeframes required by applicable law. You also have the right to lodge a complaint with a data protection supervisory authority in your country.

Where the Data Comes From

We obtain data from licensed third-party providers under agreements requiring lawful collection, and from publicly available professional sources. Recipients of this data are our customers, for their own business outreach.

Retention

We retain business contact data for as long as it is accurate and in use in the Services, refreshing records over time. Data is deleted when it is no longer used or when a deletion request is honored, whichever comes first. Suppression records (the minimal identifiers needed to prevent a deleted record from being re-created) are retained indefinitely. The international transfer safeguards described in Section 10 apply to this data as well.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data protection practices
• Incident response and breach notification procedures

6. Data Retention

We retain your information only as long as necessary to provide our services and fulfill legal obligations:

• Workspace data (contacts under management, workflows, messages): duration of subscription plus 90 days, then deleted
• Account records (identity, agreement, and consent logs): duration of subscription plus 3 years
• Payment and transaction records: 7 years for tax and legal compliance
• Support communications: 2 years from last contact
• De-identified, aggregated analytics: may be retained indefinitely

This is the canonical retention schedule for SimpliQ; where other pages describe retention, this schedule controls. Business contact data we provide is retained as described in Section 4A.

7. Your Rights and Choices

The rights below apply to customers and users. If you are a business professional whose information appears in data SimpliQ provides, your rights are described in Section 4A.

Access and Portability

You can access and export your data through your account dashboard or by contacting support.

Correction and Deletion

You can update your account information and request deletion of your data. Some data may be retained for legal or security purposes.

Communication Preferences

You can opt out of marketing communications while continuing to receive service-related notifications.

8. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act ("CCPA") provides you with specific rights regarding your personal information:

Your Rights:

• Right to Know: You may request information about the personal information we have collected about you, including the categories of information, sources, purposes for collection, and third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out: You may opt-out of the sale or sharing of your personal information.
• Right to Limit: You may limit our use and disclosure of your sensitive personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us. Further, to provide or delete specific pieces of personal information we will need to verify your identity to the degree of certainty required by law.

9. Use of your Google User Data

Notwithstanding anything else in SimpliQ’s Privacy Policy, if you provide us access to your Google data, SimpliQ’s use of that data will be subject to these additional restrictions:

a) SimpliQ’s use of information received from Google APIs, and SimpliQ’s transfer of information to any other app, will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

b) SimpliQ will only access Gmail message bodies (including attachments), metadata, headers, and settings as necessary to provide the Services as intended: composing, sending, reading, and processing emails on your behalf.

c) We will not transfer this Gmail data to others unless doing so is necessary to provide and improve these features, comply with applicable law, or as part of a merger, acquisition, or sale of assets.

d) SimpliQ will not use Gmail or Calendar data for serving advertisements.

e) SimpliQ will not allow humans to read this data unless we have your affirmative agreement for specific messages, doing so is necessary for security purposes such as investigating abuse, to comply with applicable law, or for SimpliQ’s internal operations, and even then, only when the data have been aggregated and anonymized.

f) Our servers only store emails you send through SimpliQ and any replies you receive to those emails, so we can detect the responses, categorize them and provide access to them in your SimpliQ account. All data obtained through the Gmail API is available in your SimpliQ account.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequacy decisions.

11. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date. Significant changes will be communicated via email or platform notification.