Privacy Policy
How we collect, use, and protect your personal information.
Your Privacy Matters
We take your privacy seriously and are committed to protecting your personal information. This comprehensive privacy policy outlines how we collect, use, and safeguard your data.
Key Privacy Highlights:
- • We never sell your personal information to third parties
- • Your data is securely stored and encrypted
- • You have control over your information and can request deletion
- • We comply with GDPR, CCPA, and other privacy regulations
- • We only collect information necessary to provide our services
Last updated: October 31, 2026
What We Collect
- • Contact information (name, email, phone)
- • Billing information (processed securely via Stripe)
- • Usage data and analytics
- • Service-related data you provide
How We Use It
- • Provide and improve our services
- • Process payments and transactions
- • Send service updates and support
- • Analyze usage to enhance features
Your Rights
- • Access your personal data
- • Request data correction or deletion
- • Opt out of marketing communications
- • Data portability (where applicable)
Data Security
- • SSL encryption for all data transmission
- • Secure servers in the United States
- • Regular security audits and updates
- • Limited access on need-to-know basis
1. Information We Collect
1.1 Personal Information
When you use our services, we may collect the following personal information:
- • Contact Information: Name, email address, phone number, business name, and mailing address
- • Account Credentials: Username, password (encrypted), and account preferences
- • Billing Information: Payment card details, billing address, and transaction history (processed securely through Stripe)
- • Business Information: Company details, industry type, and service preferences
1.2 Third-Party Integration Data
Custom Applications and Integrations: We develop and maintain custom applications and integrations on your behalf that may connect to third-party services. When you authorize these integrations, we may collect and process:
- • Authentication Data: OAuth tokens, API keys, and access credentials for third-party services (Google, QuickBooks, Facebook, etc.)
- • QuickBooks Data: Customer lists, invoices, payments, financial transactions, and accounting data
- • Google Services Data: Email addresses, calendar data, contact information, and other data you authorize through Google OAuth
- • Social Media Data: Profile information, business pages, advertising accounts, and authorized data from platforms like Facebook, Instagram, LinkedIn
- • CRM and Marketing Platform Data: Contact lists, customer interactions, email campaigns, and marketing automation data
- • E-commerce Platform Data: Orders, customer information, inventory, and sales data from platforms like Shopify, WooCommerce, etc.
- • Other Business Tools: Data from any other third-party services you authorize us to integrate with your business systems
Important: We only access third-party service data that you explicitly authorize. We act as a data processor on your behalf and use this data solely to provide our integration and automation services to you. You maintain ownership and control of your data in these third-party services.
1.3 Automatically Collected Information
We automatically collect certain information when you visit our website or use our services:
- • Usage Data: Pages visited, features used, time spent, and interaction patterns
- • Device Information: IP address, browser type, operating system, device identifiers
- • Cookies and Tracking: We use cookies, web beacons, and similar technologies (see Cookie Policy below)
- • Analytics Data: Performance metrics, error logs, and service usage statistics
1.4 Information from Third Parties
We may receive information about you from third-party services you connect to our platform, including:
- • Social media platforms (if you choose to connect them)
- • Business partners and referral sources
- • Public databases and marketing partners
2. How We Use Your Information
We use the collected information for the following purposes:
2.1 Service Delivery
- • Provide, maintain, and improve our technology services
- • Process transactions and send transaction notifications
- • Create and manage your account
- • Provide customer support and respond to inquiries
- • Deploy and maintain AI voice systems, chatbots, and business management tools
- • Develop and maintain custom integrations with third-party services (Google, QuickBooks, social media platforms, etc.)
- • Sync and process data between your authorized third-party services and our systems
- • Automate business workflows using data from integrated services
- • Authenticate and authorize connections to third-party platforms on your behalf
Third-Party Integration Processing
When you authorize us to integrate with third-party services, we act as your data processor to:
- • Retrieve data from your authorized third-party accounts (QuickBooks invoices, Google contacts, etc.)
- • Transform and process this data to meet your business requirements
- • Send data back to third-party services as instructed by you
- • Store integration credentials and access tokens securely
- • Monitor integration performance and troubleshoot issues
- • Maintain and update custom applications built for your specific needs
2.2 Communication
- • Send service updates, security alerts, and administrative messages
- • Respond to your comments, questions, and requests
- • Send marketing communications (with your consent, where required)
- • Notify you about changes to our services or policies
2.3 Analytics and Improvement
- • Analyze usage patterns to improve our services
- • Monitor and analyze trends and user behavior
- • Develop new features and services
- • Measure the effectiveness of our marketing campaigns
2.4 Legal and Security
- • Comply with legal obligations and regulations
- • Protect against fraud, abuse, and security threats
- • Enforce our terms of service and policies
- • Respond to legal requests and prevent harm
3. Information Sharing and Disclosure
We do not sell your personal information to third parties. We only share your information in the following limited circumstances:
3.1 Service Providers
We share information with trusted third-party service providers who help us operate our business:
- • Payment Processors: Stripe for secure payment processing
- • Cloud Hosting: Vercel, AWS, or similar providers for infrastructure
- • Analytics Services: Google Analytics, Microsoft Clarity for usage analytics
- • Communication Tools: Email service providers, SMS gateways
- • Business Tools: HighLevel for CRM and automation
3.2 Legal Requirements
We may disclose your information if required to do so by law or in response to:
- • Valid legal processes (court orders, subpoenas, warrants)
- • Legal obligations and regulatory requirements
- • Protection of our rights, property, or safety
- • Emergency situations involving danger to person or property
3.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner. We will notify you of any such change and your rights regarding your personal information.
3.4 With Your Consent
We may share your information for other purposes with your explicit consent.
4. Data Security
We implement industry-standard security measures to protect your personal information:
4.1 Technical Safeguards
- • Encryption: SSL/TLS encryption for all data transmission
- • Secure Storage: Encrypted databases and secure cloud infrastructure
- • Access Controls: Multi-factor authentication and role-based access
- • Regular Audits: Security assessments and vulnerability scanning
- • Monitoring: 24/7 system monitoring for suspicious activity
4.2 Organizational Safeguards
- • Employee training on data protection and privacy
- • Confidentiality agreements with staff and contractors
- • Limited access to personal information on a need-to-know basis
- • Regular security policy reviews and updates
Important Note: While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
5. Third-Party Service Integrations
Custom Applications and API Integrations
We develop and maintain custom applications and integrations that connect your business systems with third-party services. This section explains how we handle data from these integrations.
5.1 Types of Integrations We Provide
We may create custom integrations with services including but not limited to:
- • Accounting Software: QuickBooks Online, QuickBooks Desktop, Xero, FreshBooks
- • Google Services: Gmail, Google Calendar, Google Contacts, Google Drive, Google Sheets, Google Ads
- • Social Media Platforms: Facebook, Instagram, LinkedIn, Twitter/X, TikTok, YouTube
- • E-commerce Platforms: Shopify, WooCommerce, BigCommerce, Stripe, Square
- • CRM and Marketing: HighLevel, HubSpot, Salesforce, Mailchimp, ActiveCampaign
- • Communication Tools: Twilio, SendGrid, Slack, Microsoft Teams
- • Other Business Tools: Zapier, Make.com, Airtable, Monday.com, and any other services you request
5.2 How Integration Data is Handled
Authorization: Before accessing any third-party service on your behalf, we require your explicit authorization through OAuth, API keys, or other secure authentication methods provided by the third-party service.
Data Processing: We act as a data processor (not a data controller) for data accessed through third-party integrations. This means:
- • You remain the owner and controller of your data in third-party services
- • We process this data only as instructed by you and as necessary to provide our services
- • We do not use integration data for any purpose other than providing services to you
- • We do not share integration data with other clients or third parties (except as required by law)
Data Storage: Integration data may be temporarily cached or stored to:
- • Improve performance and reduce API calls to third-party services
- • Enable offline functionality and data synchronization
- • Provide backup and disaster recovery capabilities
- • Generate reports and analytics as requested by you
Data Security: Integration credentials and data are:
- • Encrypted at rest and in transit using industry-standard encryption
- • Stored in secure, access-controlled databases
- • Never logged in plain text or exposed in error messages
- • Automatically refreshed and rotated according to best practices
5.3 Your Control Over Integration Data
You maintain full control over your third-party integration data:
- • You can revoke our access to any third-party service at any time through that service's authorization settings
- • You can request deletion of cached integration data by contacting us
- • You can modify the scope of permissions granted to our integrations
- • You are responsible for managing access and permissions in your third-party accounts
5.4 Third-Party Service Terms
Important: Your use of third-party services through our integrations is subject to those services' own terms of service and privacy policies. We recommend reviewing:
- • Google Privacy Policy
- • QuickBooks/Intuit Privacy Policy
- • Facebook Privacy Policy
- • And the privacy policies of any other services you authorize us to integrate with
5.5 Data Retention for Integrations
Integration data is retained according to the following schedule:
- • Active Integrations: Data is retained while the integration is active and authorized
- • Revoked Access: Cached data is deleted within 30 days of access revocation unless retention is required for legal/accounting purposes
- • Service Termination: All integration data is deleted within 90 days of service termination, except as required by law
- • Audit Logs: Integration access logs may be retained for up to 1 year for security and troubleshooting purposes
6. Your Privacy Rights and Choices
6.1 Access and Correction
You have the right to:
- • Access your personal information we hold
- • Request corrections to inaccurate or incomplete data
- • Update your account information at any time
- • Receive a copy of your data in a portable format
6.2 Data Deletion
You can request deletion of your personal information, subject to certain exceptions:
- • We may retain information required for legal compliance
- • Some data may be retained for legitimate business purposes
- • Backup copies may persist for a limited time
- • Anonymized data may be retained for analytics
6.3 Marketing Communications
You can opt out of marketing communications:
- • Click the "unsubscribe" link in any marketing email
- • Adjust your communication preferences in your account settings
- • Contact us at contact@simpleweb.ninja
- • Note: You will still receive transactional and service-related messages
6.4 Cookie Management
You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our services.
6.5 State-Specific Rights
Depending on where you live, you may have additional privacy rights under laws such as the California Consumer Privacy Act (CCPA) or the European General Data Protection Regulation (GDPR). These rights are generally covered by the access, correction, deletion, and opt-out rights described above.
If you are a California or European resident and wish to exercise any specific rights under these laws, please contact us at contact@simpleweb.ninja. We will respond to your request within the timeframes required by applicable law (typically 30-45 days).
6.6 Text Messaging (SMS) and Mobile Information
If you give us your mobile number and agree to receive text messages, we collect and keep:
- • Your mobile number and the name you gave us
- • A record of your consent: the date and time, the form or page you used, and the consent wording you saw
- • The messages we exchange with you and delivery records
We use this information only to send the messages you agreed to and to answer you. We use service providers, such as the messaging platform that delivers our texts, and they may use your information only to provide that service.
We do not share mobile numbers or text message opt-in consent with third parties or affiliates for marketing or promotional purposes, and we do not sell this information.
Reply STOP to any text to opt out, or HELP for help. Message frequency varies, and message and data rates may apply. Consent to receive text messages is not a condition of purchase. The program terms are in our Terms of Service.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience:
7.1 Types of Cookies We Use
- • Essential Cookies: Required for the website to function properly (login sessions, security)
- • Analytics Cookies: Help us understand how visitors use our site (Google Analytics, Microsoft Clarity)
- • Marketing Cookies: Track your activity to deliver relevant advertising (Facebook Pixel, Google Ads)
- • Preference Cookies: Remember your settings and preferences
7.2 Third-Party Tracking
We use third-party services that may track your activity:
- • Google Analytics for website analytics
- • Microsoft Clarity for user behavior insights
- • Facebook Pixel for advertising and conversion tracking
- • Google Tag Manager for managing marketing tags
8. Data Retention
We retain your personal information for as long as necessary to:
- • Provide our services and maintain your account
- • Comply with legal obligations (tax, accounting, legal requirements)
- • Resolve disputes and enforce our agreements
- • Maintain security and prevent fraud
Retention Periods:
- • Active account data: Retained while your account is active
- • Inactive accounts: May be deleted after 3 years of inactivity (with notice)
- • Transaction records: Retained for 7 years for tax and legal purposes
- • Marketing data: Retained until you opt out or request deletion
- • Analytics data: Aggregated and anonymized after 26 months
9. Children's Privacy
Our services are not directed to children under the age of 18. We do not knowingly collect personal information from children under 18.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@simpleweb.ninja, and we will delete such information from our systems.
10. International Data Transfers
Your information may be transferred to and processed in the United States or other countries where we or our service providers operate.
If you are located outside the United States, please note that:
- • Your data may be transferred to countries with different data protection laws
- • We use appropriate safeguards (standard contractual clauses, adequacy decisions)
- • By using our services, you consent to such transfers
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
When we make changes:
- • We will update the "Last updated" date at the top of this page
- • For material changes, we will notify you via email or prominent notice on our website
- • Your continued use of our services after changes constitutes acceptance
- • We encourage you to review this policy periodically
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Simple Web
- Privacy Officer: contact@simpleweb.ninja
- General Inquiries: contact@simpleweb.ninja
- Phone: +1 (509) 471-8216
- Mailing Address: Deer Park, WA 99006, United States
- Business Hours: Monday-Thursday, 9:00 AM - 6:00 PM PST
Response Time: We will respond to your privacy-related requests within 30 days (or as required by applicable law). For urgent matters, please indicate "URGENT" in your subject line.
Privacy Questions?
If you have any questions about our privacy practices or want to exercise your privacy rights, contact us.
