Privacy Policy

SimpliPilot is provided by SimpliPilot LLC, a limited liability company. For the data you give us about your own account and business, SimpliPilot LLC acts as the controller. For the customer records, files and messages you create inside your workspace, SimpliPilot LLC acts as a service provider / processor handling that data on your instructions under our Data Processing Agreement. Contact us at support@simplipilot.com.

• Account and company profile — owner name, business name, legal business name, email, phone, time zone, plan and workspace settings.
• Authentication data — hashed passwords, session and verification tokens, and multi-factor settings.
• Business content you create — customers and contacts, estimates, invoices and payment records, jobs and scheduling, tasks and projects, notes, marketing campaigns, social-media posts, and uploaded media such as photos and documents.
• Integration data — data exchanged with services you connect (accounting, email, calendar, payment and social platforms), limited to what the connection needs.
• Support, demo and enquiry data — form submissions, demo requests and email threads.
• Usage and device data — pages viewed, features used, browser and device type, IP address and approximate location, for security, fraud prevention, reliability and product improvement.
• Billing relationship data — plan, subscription status and invoice references. Card details are handled by our payment provider, not by us.
• Marketing preferences — your opt-in choices, which you can withdraw at any time.

Where a legal basis is required, we rely on performance of our contract with you, our legitimate interests in operating and securing the service, your consent (for optional analytics and marketing), and compliance with legal obligations.

SimpliPilot uses AI to help you draft estimates and follow-ups, summarise work, plan growth actions in Maze, and create social content in Social Studio. AI features process the prompts and workspace content you submit for that request. We do not sell your content, and we do not permit AI providers to retain or reuse your business content to train their models. AI output may be inaccurate — review it before use. See the AI and Automation Disclosure.

We share data only with providers that help us run SimpliPilot, under contract and confidentiality terms. Categories include cloud hosting and database infrastructure, AI model providers, payment processing and Merchant of Record services, email delivery, product analytics and error monitoring, accounting integrations, and the social platforms you choose to connect. The current list is on our Subprocessors page. We may also share data with professional advisers, or with authorities where legally required. We do not sell your personal data.

Our providers process data primarily in the United States and may process data elsewhere. Where personal data of individuals in the UK or EEA is transferred internationally, we rely on Standard Contractual Clauses or an applicable adequacy decision.

• Account and workspace content: for the life of your account, plus up to 90 days after closure, then deleted or anonymised.
• Enquiry, demo and early-access submissions: up to 24 months from last contact, or sooner on request.
• Billing and tax records: up to 7 years where required by law.
• Security logs and telemetry: typically up to 12 months.
• Policy acceptance records: for the life of the account plus the applicable limitation period.

You can request deletion at any time; we will delete or anonymise data we are not required to keep.

We use encryption in transit (HTTPS/TLS), encryption at rest for our managed database, tenant-level separation, row-level access controls, least-privilege administrative access, server-side secret storage, dependency review and logging. No system is perfectly secure; we do not claim any certification or regulatory compliance we have not formally obtained. Report a vulnerability to support@simplipilot.com. See our Security Overview.

We use essential cookies needed for the site and app to function, and analytics cookies only after you accept them in our consent banner. Declining does not limit any part of the website. We do not use advertising or cross-site marketing cookies. Details are in our Cookie Policy.

Subject to applicable law, you may request access to, correction of, deletion of, or restriction on processing of your personal data; request a portable copy; object to processing; and withdraw consent. If you are in the UK or EEA you may also complain to your supervisory authority. Email support@simplipilot.com and we will respond within one month. If your request concerns data held inside another business’s SimpliPilot workspace, we will refer you to that business as the controller.

SimpliPilot is a business tool and is not directed to children under 16. We do not knowingly collect personal data from children. If we learn we have, we will delete it.

If SimpliPilot LLC is involved in a merger, acquisition, financing or sale of assets, your data may be transferred as part of that transaction. We will notify you and the receiving party will remain bound by commitments no less protective than this policy.

We may update this policy as SimpliPilot evolves; material changes will be posted here with a revised date. Questions or requests: support@simplipilot.com.