Privacy Policy

Our Commitment to Your Privacy

At Simpata, protecting your privacy isn't just a legal obligation—it's fundamental to how we do business. This Privacy Policy explains how Simpata.com, a secure SaaS platform operated by General Blue Corporation (a United States-based company), collects, uses, shares, and safeguards your personal information.

We've built our platform with privacy and security at the core. Our practices align with global privacy regulations including GDPR, CCPA, and industry best practices to ensure your data is handled responsibly and transparently. We believe you should always know what data we collect, how it's used, and have meaningful control over your information.

Scope of This Policy

Privacy Policy Overview

Here's a quick reference guide to the key sections of our Privacy Policy:

Information We Collect

1. Personal Information You Provide

When you interact with Simpata, you provide certain information directly:

• Account Information: Name, email address, phone number, company name, job title, and password when creating your account
• Payment Information: Credit card details, billing address (processed securely through PCI-compliant payment processors)
• Profile & Preferences: Optional information like profile photo, language preference, timezone, notification settings
• Communications: Information in support requests, feedback forms, surveys, or inquiries you send us
• Content You Upload: Employee data, project details, documents, or other business information you enter into the platform

2. Information Collected Automatically

Like most online services, Simpata automatically collects certain data about your usage:

3. Information from Third-Party Sources

If you connect integrations (payroll systems, calendars, SSO providers), we receive relevant data to enable those connections. We treat third-party data according to this Policy and integration terms presented during setup.

4. Children's Privacy

5. Customer Data (Your Content)

Data you actively input into Simpata (employee records, project details, documents) is your data or your organization's data ("Customer Data"). We treat this as confidential and process it solely to provide the service you requested. We do not access, use, or scan Customer Data for our own purposes except when absolutely necessary (automated backups, security scans, or with your explicit permission for support).

How We Use Your Information

We use collected information for legitimate business purposes related to operating and improving our services:

For any purpose not listed above, we will provide notice and obtain consent where required by law.

How We Share Your Information

We share your information only in these specific, limited circumstances:

Trusted Service Providers

We work with carefully vetted companies to operate Simpata (cloud hosting, payment processors, email delivery, analytics, customer support tools). These providers access only the minimum data necessary, are bound by strict confidentiality agreements, and cannot use your data for their own purposes. We remain responsible for their handling of your data.

Business Transfers

If Simpata or General Blue Corporation is acquired, merges, or sells assets, your information may be disclosed to prospective or actual new owners under confidentiality protections. The successor entity would continue to protect your data per this Policy. You'll be notified of material changes.

Legal Compliance & Protection

We may disclose data when required by valid legal process (subpoenas, court orders), to protect our rights or property, prevent fraud, or ensure safety. We'll notify you of legal demands unless prohibited by law.

Your Direction

When you explicitly direct us to share data (enabling integrations, collaborating with teammates, posting in forums), we'll share as instructed. Review third-party privacy practices when connecting external services.

Aggregated/De-Identified Data

We may share anonymized, aggregated data that cannot identify individuals (e.g., "Total platform users: 10,000" or usage trends). This is not personal information.

Data Retention

We retain personal information only as long as necessary for the purposes described or as required by law:

• Active Accounts: Data retained while your account is active to provide ongoing service
• Closed Accounts: Deleted or anonymized within 30-60 days; backups cycled out over time
• Operational Records: Transaction records, suppression lists, or dispute-related data kept for legitimate business needs
• Legal Requirements: Tax, audit, and financial records retained per applicable law (typically 3-7 years), then deleted

When no longer needed, we securely erase or anonymize your data. If immediate deletion isn't possible (long-term backups), we isolate and protect data from further use until deletion is feasible.

Your Rights and Choices

You have meaningful control over your personal information. Depending on applicable law, you have these rights:

To exercise any rights not available in your account settings, or for privacy requests (data export, deletion, corrections), contact us using the information in the Contact Us section. We may verify your identity to protect your data, and we'll respond within 30 days.

Data Security

Protecting your data is our top priority. We've implemented comprehensive security measures:

Your Role in Security

Security is a shared responsibility. Help protect your account by:

• Using a strong, unique password
• Enabling two-factor authentication (if available)
• Keeping your login credentials confidential
• Being alert to phishing attempts (we'll never ask for your password via email)
• Reporting any suspicious activity immediately

International Data Transfers

Simpata operates from the United States. If you access our services from outside the U.S., please understand that your data will be transferred to, stored, and processed in the United States and potentially other countries where our service providers operate.

These countries may have different data protection laws than your home country. However, we take steps to ensure your privacy remains protected:

• We use Standard Contractual Clauses (SCCs) approved by regulatory authorities
• We require all international service providers to maintain adequate safeguards
• We enforce the same high standards of privacy and security globally
• We comply with applicable cross-border data transfer regulations

By using Simpata, you consent to the transfer of your information to the United States and other jurisdictions as necessary for service delivery. For questions about international transfers or specific safeguards, contact us.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, legal requirements, or industry standards. The "Last Updated" date at the top indicates when the most recent changes were made.

If we make material changes (such as new data uses or sharing practices), we will:

• Post a prominent notice on our website before changes take effect
• Send you an email notification (if you've provided an email address)
• Obtain new consent if required by law

We encourage you to review this Policy periodically. Continued use of Simpata after updates become effective constitutes your acceptance of the changes, to the extent permitted by law.

Contact Us

We're here to help with any questions, concerns, or requests regarding this Privacy Policy or your personal data.

Response Time: We respond to privacy inquiries as promptly as possible, typically within 30 days. For requests to exercise your privacy rights, we may need to verify your identity for security purposes.