Privacy Policy

SimpliPilot is provided by SimpliPilot LLC, a limited liability company. For the data you give us about your own account and business, SimpliPilot LLC acts as the controller. For the customer records, files and messages you create inside your workspace, SimpliPilot LLC acts as a service provider / processor handling that data on your instructions under our Data Processing Agreement. Contact us at support@simplipilot.com.

• Account and company profile — owner name, business name, legal business name, email, phone, time zone, plan and workspace settings.
• Authentication data — hashed passwords, session and verification tokens, and multi-factor settings.
• Business content you create — customers and contacts, estimates, invoices and payment records, jobs and scheduling, tasks and projects, notes, marketing campaigns, social-media posts, and uploaded media such as photos and documents.
• Integration data — data exchanged with services you connect (accounting, email, calendar, payment and social platforms), limited to what the connection needs.
• Support, demo and enquiry data — form submissions, demo requests and email threads.
• Usage and device data — pages viewed, features used, browser and device type, IP address and approximate location, for security, fraud prevention, reliability and product improvement.
• Billing relationship data — plan, subscription status and invoice references. Card details are handled by our payment provider, not by us.
• Marketing preferences — your opt-in choices, which you can withdraw at any time.

Where a legal basis is required, we rely on performance of our contract with you, our legitimate interests in operating and securing the service, your consent (for optional analytics and marketing), and compliance with legal obligations.

SimpliPilot uses AI to help you draft estimates and follow-ups, summarise work, plan growth actions in Maze, and, when an eligible publishing account is connected, create social content in Social Studio. AI features process the prompts and workspace content you submit for that request. We do not sell your content, and we do not permit AI providers to retain or reuse your business content to train their models. AI output may be inaccurate — review it before use. See the AI and Automation Disclosure.

We share data only with providers that help us run SimpliPilot, under contract and confidentiality terms. Categories include cloud hosting and database infrastructure, AI model providers, payment processing and Merchant of Record services, email delivery, product analytics and error monitoring, accounting integrations, and the social platforms you choose to connect. The current list is on our Subprocessors page. We may also share data with professional advisers, or with authorities where legally required. We do not sell your personal data.

Our providers process data primarily in the United States and may process data elsewhere. Where personal data of individuals in the UK or EEA is transferred internationally, we rely on Standard Contractual Clauses or an applicable adequacy decision.

• Account and workspace content: for the life of your account, plus up to 90 days after closure, then deleted or anonymised.
• Enquiry, demo and early-access submissions: up to 24 months from last contact, or sooner on request.
• Billing and tax records: up to 7 years where required by law.
• Security logs and telemetry: typically up to 12 months.
• Policy acceptance records: for the life of the account plus the applicable limitation period.

You can request deletion at any time; we will delete or anonymise data we are not required to keep.

We use encryption in transit (HTTPS/TLS), encryption at rest for our managed database, tenant-level separation, row-level access controls, least-privilege administrative access, server-side secret storage, dependency review and logging. No system is perfectly secure; we do not claim any certification or regulatory compliance we have not formally obtained. Report a vulnerability to support@simplipilot.com. See our Security Overview.

Essential storage keeps the site and app working. Product analytics and advertising measurement are separate, optional choices. When configured, Meta Pixel and server-side advertising measurement run only with a current advertising choice, not with earlier analytics acceptance. Measurement may connect ad-click identifiers with public-page visits, a real trial, or a paid subscription. It is not required to sign up. Details are in our Cookie Policy.

If you choose advertising measurement, Meta may receive online identifiers (such as browser and ad-click IDs), event information, and limited matching information from verified signup or payment events when server-side measurement is enabled. Meta processes that information under its own Privacy Policy (new tab). We do not send passwords, activation tokens, or the contents of your customer records for advertising measurement. We do not interpret a trial-button click as a completed trial.

Use Privacy choices on any website page to decline or withdraw optional permission. Advertising permission expires after 30 days; Global Privacy Control disables it. Withdrawal immediately stops browser measurement and removes optional identifiers stored by this website. Server-side withdrawal takes effect when our server receives it. We privately retain the withdrawal receipt and retry if delivery is pending, showing that status while this website is open. Withdrawal does not recall information already sent to a provider.

Subject to applicable law, you may request access to, correction of, deletion of, or restriction on processing of your personal data; request a portable copy; object to processing; and withdraw consent. If you are in the UK or EEA you may also complain to your supervisory authority. Email support@simplipilot.com and we will respond within one month. If your request concerns data held inside another business’s SimpliPilot workspace, we will refer you to that business as the controller.

SimpliPilot is a business tool and is not directed to children under 16. We do not knowingly collect personal data from children. If we learn we have, we will delete it.

If SimpliPilot LLC is involved in a merger, acquisition, financing or sale of assets, your data may be transferred as part of that transaction. We will notify you and the receiving party will remain bound by commitments no less protective than this policy.

We may update this policy as SimpliPilot evolves; material changes will be posted here with a revised date. Questions or requests: support@simplipilot.com.