Overview and scope
Simplify designs its website and services around operational trust. This Privacy Policy explains how we may collect, use, disclose, retain, and protect personal information through the Simplify website, business inquiries, early access programs, Flash Launch, SimpleTrip, support and security communications, and related services.
This policy applies to personal information that Simplify handles as a controller or business under applicable privacy laws. If a customer uses Simplify services to build, deploy, operate, or manage its own application, that customer is responsible for the data it chooses to collect or process through its application. In those cases, Simplify handles platform and customer data as needed to provide, secure, support, and improve the relevant service, subject to any separate written agreement.
Who we are and how to contact us
References to "Simplify," "we," "us," and "our" mean the Simplify team operating the website and services described in this policy, unless a separate agreement identifies a different contracting entity. For privacy questions, rights requests, or data protection concerns, contact legal@simplify-net.com.
Information we collect
We collect information only where it is useful for operating the website, evaluating product or business inquiries, providing products, supporting users, maintaining security, or meeting legal obligations.
- Information you provide directly, such as name, email address, company or team, product interest, builder type, what you are building or planning, how technology or AI is part of your workflow, what is blocking launch, organization, trust, or scale, preferred contact method, timeline, messages, support requests, feedback, and security reports.
- Account and product access information, where applicable, such as workspace, team, role, permission, authentication, billing, plan, product access, invitation, and administrative records.
- Automatic technical information, such as IP address, device type, browser type, operating system, referring page, pages visited, timestamps, log records, diagnostic events, approximate location derived from network information, and security or abuse-prevention events.
- Information from third parties, such as service providers, teammates, administrators, product integrations, or publicly available sources, when needed to evaluate a request, provide a service, support an account, prevent abuse, or maintain product integrity.
Please do not send highly sensitive personal information unless it is necessary for your inquiry. Product environments may process sensitive information only where a customer or user chooses to provide it, where a feature requires it, or where it is needed for security, legal, or operational reasons.
Product, platform, and customer data
Flash Launch may involve source code, repository or source metadata, build records, deployments, environments, releases, revisions, rollback records, domains, routes, configuration, secrets and secrets metadata, runtime events, jobs, workers, logs, observability data, security events, access records, and operational records.
SimpleTrip, where available or enabled, may involve trip plans, saved places, place information, travel records, navigation activity, check-ins, trip history, device information, and location-related data needed to provide travel planning, organization, navigation, recordkeeping, or review features.
Customers and users remain responsible for the code, applications, content, credentials, data, users, and activity they choose to place in product environments. Simplify uses product, platform, and customer data only as needed to provide, operate, secure, support, troubleshoot, analyze reliability, improve the relevant service, comply with law, or as otherwise authorized by a separate agreement.
How we use information
We may use information to:
- provide, operate, maintain, and secure the website and services;
- evaluate product interest, design partner requests, partnerships, hiring, press, legal, or company inquiries;
- create and administer accounts, workspaces, product access, roles, permissions, and support workflows;
- build, deploy, run, monitor, debug, recover, and improve product environments;
- communicate about products, requests, support, security, administrative notices, policy updates, and service changes;
- detect, prevent, investigate, and respond to abuse, fraud, security incidents, reliability issues, and unlawful activity;
- measure service reliability, improve product quality, and understand which workflows create operational friction; and
- comply with legal obligations, enforce agreements, resolve disputes, and protect the rights, safety, and integrity of Simplify, users, customers, and third parties.
Legal bases for EEA/UK processing
Where European Economic Area or United Kingdom data protection laws apply, we rely on the following legal bases: performance of a contract or steps before entering a contract, legitimate interests, consent where required, and compliance with legal obligations.
Our legitimate interests may include operating and improving the services, responding to business inquiries, securing the platform, preventing abuse, supporting users, communicating with business contacts, and developing reliable production infrastructure. Where we rely on consent, you may withdraw consent as allowed by law.
How we share information
We may disclose information to service providers and contractors that help us operate the website and services, provide hosting and infrastructure, deliver email and communications, support users, monitor reliability, analyze product diagnostics, and maintain security.
We may also disclose information to workspace administrators or team members, to product integrations you choose to use, to professional advisors, to authorities or third parties where required by law or needed to protect rights and security, or in connection with a merger, acquisition, financing, reorganization, or similar corporate transaction.
When Simplify acts as a service provider, contractor, processor, or similar role for a customer, we handle customer data according to the applicable customer agreement, product documentation, and lawful customer instructions.
No sale, sharing, targeted advertising, or public model training
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use targeted advertising based on your activity across other companies' websites or services.
We do not use customer content, source code, product data, travel records, business inquiries, or support communications to train public AI models unless we have explicit consent or a separate written agreement that permits that use. We may use information to operate, secure, debug, and improve Simplify services, including internal reliability, safety, quality, and product development work.
Cookies and similar technologies
The public Simplify website is currently configured without non-essential analytics cookies. Essential cookies or similar technologies may be used by infrastructure, security, or product access services when needed to operate a requested feature. Third-party hosting or service providers may use their own essential technologies when you interact with their service.
You can control cookies through your browser settings. Some product or account features may not function correctly if essential cookies are blocked. If we add analytics, preference, or advertising cookies later, we will update the Cookie Policy and any required consent or preference flow before using them.
International data transfers
Simplify may process information in the United States and other countries where we or our service providers operate. These countries may have data protection rules that differ from those in your jurisdiction. Where required for EEA, UK, or similar transfers, we use appropriate transfer mechanisms or safeguards, such as contractual commitments, standard contractual clauses, or other lawful transfer mechanisms.
Retention
We retain information for as long as needed to provide the services, evaluate inquiries, maintain accounts, support users, preserve security and reliability, comply with legal obligations, resolve disputes, enforce agreements, and maintain appropriate business records. Retention periods depend on the type of information, the product context, the sensitivity of the data, legal requirements, security needs, and whether the information is needed for an active account, inquiry, investigation, dispute, or backup cycle.
When information is no longer needed, we take reasonable steps to delete, de-identify, aggregate, or isolate it, subject to legal, security, accounting, backup, dispute resolution, and service integrity requirements.
Security
We use administrative, technical, and organizational safeguards appropriate to the nature of the information we handle. These may include access controls, environment boundaries, secrets handling practices, logging, monitoring, deployment safeguards, recovery paths, and internal review of sensitive operational access. No method of transmission, storage, or operation is perfectly secure, and we cannot guarantee absolute security.
If you believe you have found a vulnerability or security issue, contact legal@simplify-net.com or review our Responsible Disclosure guidance.
Your privacy rights and choices
Depending on where you live and how you interact with Simplify, you may have rights to request access to personal information, correction, deletion, export or portability, restriction, objection, withdrawal of consent, appeal of a denied request, or limitation of certain uses of sensitive personal information. You may also have the right to opt out of sale, sharing, targeted advertising, or certain profiling where those activities occur.
To exercise a privacy right, contact legal@simplify-net.com. We may ask for information needed to verify your identity, confirm your authority to act for another person, understand the scope of the request, and protect information from unauthorized access. Some information may be retained where required or permitted for legal, security, accounting, dispute resolution, product integrity, or service operation reasons.
If EEA or UK data protection laws apply, you may also have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first so we can try to address the concern directly.
California and U.S. state privacy notice
To the extent applicable under California or other U.S. state privacy laws, we may collect the following categories of personal information: identifiers; customer, account, and request records; commercial or product interaction information; internet, device, and electronic network activity; approximate geolocation or location-related information where a product feature uses it; professional or employment-related information; sensitive personal information such as account credentials, precise location, communications content, secrets, or other sensitive data where you or a customer choose to provide it or where a service requires it; and inferences drawn from request, account, product, or service activity.
We collect these categories for the business and commercial purposes described in this policy. We may disclose them to service providers, contractors, professional advisors, authorities, transaction counterparties, customers, workspace administrators, product integrations, and other parties described in this policy. We do not sell personal information or share it for cross-context behavioral advertising.
We use sensitive personal information only for purposes permitted by applicable law, such as providing requested services, maintaining security, preventing fraud or abuse, ensuring service quality, short-term transient use, legal compliance, and other operational purposes that do not require an opt-out right to limit under applicable law. We do not offer financial incentives or price differences in exchange for personal information. We will not discriminate against you for exercising privacy rights.
Some browsers or extensions transmit Do Not Track or Global Privacy Control signals. Because we do not currently sell or share personal information or use targeted advertising, these signals do not change the current processing described in this policy. If we introduce activities that require recognition of opt-out preference signals, we will honor legally required signals in accordance with applicable law.
Children's privacy
The website, Flash Launch, and related business services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 through those services. If you believe a child has provided personal information to Simplify without appropriate consent, contact legal@simplify-net.com so we can review and take appropriate action.
Changes to this policy
We may update this policy as our products, data practices, legal obligations, or operational needs evolve. When we make changes, we will update the "Last updated" date above. If changes are material, we will provide additional notice where required by law or appropriate for the nature of the change.
Contact
For privacy questions, data requests, or concerns about this policy, contact legal@simplify-net.com.