Privacy Policy
What we collect, why, who processes it on our behalf, and the choices you have.
This Privacy Policy describes how [Company legal name] ("SimplyCount," "we," "us") will collect, use, and share information when you use our website, hosted service, and desktop application. We are a bootstrapped software company that builds symbol-takeoff tools for construction estimators.
1. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account information | Name, work email, company, plan | You, at sign-up |
| Customer Data | Plan sets and documents you upload for counting, and the resulting counts | You, in use |
| Billing information | Subscription status; payment card details are handled by our processor and not stored by us | You, via Stripe |
| Usage & device data | Pages viewed, features used, IP address, browser/OS, timestamps | Automatically |
| Support & sales | Messages you send us and related correspondence | You |
2. How we use information
- To provide, secure, and improve the Service, including running takeoff counts on the plans you submit.
- To create and manage your account, process subscriptions, and provide support.
- To communicate with you about the Service, including service and security notices.
- To understand usage in aggregate so we can improve the product.
- To comply with law and enforce our agreements.
We do not sell your personal information, and we do not use your Customer Data (your plan sets) to train shared or third-party models. [Any future model-improvement use would be opt-in and disclosed here before it happens.]
3. On-premise / offline use
SimplyCount can run on-premise or offline. When you run it that way, your plan sets are processed on your own device or inside your own network and are not uploaded to us. Information described in this policy is collected only for the hosted/cloud service and our website.
4. Subprocessors we share with
We use a small set of vendors to operate the Service. Each processes limited data on our behalf under its own terms. The current list and its purposes are maintained on our Trust & Security page and include Stripe (payments), Keygen (license verification), Google Cloud (hosting), Resend (transactional email), and Assembly (customer relationship management). We share information with these providers only as needed to operate the Service, and we may also disclose information to comply with law or protect our rights.
5. Cookies and analytics
Our website uses first-party, cookie-free event collection to understand traffic in aggregate. If we enable session-replay or additional analytics, we will disclose it here and apply input sanitization so form fields such as your work email are not captured. We honor applicable browser privacy signals where required.
6. Data retention
We keep account and Customer Data for as long as your account is active and as needed to provide the Service. We describe our current retention posture honestly on the Trust & Security page, including where automated deletion is planned rather than already implemented. You can request deletion as described below.
7. Security
We apply administrative and technical safeguards described on the Trust & Security page, including encryption in transit, secret management, least-privilege access, and revocable sessions. No method of transmission or storage is perfectly secure, and we describe our posture honestly rather than overstating it.
8. Your choices and rights
You may access or update your account information, request a copy or deletion of your personal information, or opt out of non-essential communications by emailing us. Depending on where you live (for example, under U.S. state privacy laws), you may have additional rights; we will honor applicable rights and will not discriminate against you for exercising them. [Specific rights, verification steps, and response windows subject to counsel review.]
9. Children
The Service is for business use and is not directed to children under 13, and we do not knowingly collect their information.
10. International
We are based in the United States and process information there. If you access the Service from outside the U.S., you understand your information will be processed in the U.S. [Cross-border transfer mechanisms subject to counsel review.]
11. Changes
We may update this policy. Material changes will be posted here with an updated date and, where appropriate, additional notice.
12. Contact
Privacy questions or requests: infrastructure@simplycount.com. [Company legal name and mailing address to be added before effect.]