Privacy Policy

Introduction

This Privacy Policy describes how Simple AI Flow, ("Simple AI Flow," "we," "us," or "our") collects, uses, stores, and protects your personal information when you use our services, including our website, software applications, SMS messaging services, and any other services we provide (collectively, the "Services").

By using our Services, you consent to the collection, use, storage, and disclosure of your information as described in this Privacy Policy.

1. Information We Collect

Personal Contact Information

When you register for our Services or express interest in our offerings, we collect:

• Full name and business name
• Email address
• Phone number (including mobile phone numbers for SMS communications)
• Mailing address
• Company information
• Job title and role

Billing and Payment Information

We collect:

• Credit card numbers and billing addresses
• Payment processing information
• Transaction history
• Subscription details

Note: We use secure third-party payment processors (including Stripe) to handle payment information. We do not store complete credit card numbers on our servers.

Usage and Technical Data

We automatically collect:

• IP addresses and device identifiers
• Browser type and operating system
• Pages visited and features used
• Login times and session duration
• Error logs and diagnostic information
• Call detail records (CDRs) for phone services
• SMS delivery reports and engagement metrics

AI Agent and Communication Data

When you interact with our AI agents or communication services:

• Voice recordings and transcripts (where applicable)
• SMS message content and metadata
• Call logs and duration
• Communication preferences
• Response patterns and engagement data

2. How We Use Your Information

General Use

We use your information to:

• Provide and maintain our Services
• Process payments and manage subscriptions
• Send service-related notifications
• Provide customer support
• Improve our Services and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

Marketing Communications

With your consent, we may use your contact information (including phone numbers) for:

• Email marketing campaigns
• SMS marketing and promotional messages
• Phone calls for sales and marketing purposes
• Targeted advertising and retargeting
• Product announcements and updates

3. SMS and Phone Communication Compliance

TCPA Compliance

We comply with the Telephone Consumer Protection Act (TCPA) and related regulations:

• We obtain express written consent before sending marketing SMS messages
• You have the right to revoke consent at any time
• We maintain records of consent and opt-out requests
• We honor opt-out requests within 10 business days

Carrier Requirements

• We comply with all wireless carrier guidelines and requirements
• Message delivery is subject to carrier terms and network availability
• We are not responsible for delayed or undelivered messages due to carrier issues

A2P (Application-to-Person) Messaging

Our SMS services use A2P messaging platforms that comply with:

• 10DLC (10-Digit Long Code) registration requirements
• Carrier filtering and compliance standards
• Industry best practices for message delivery
• Campaign registration and approval processes

4. Information Sharing and Disclosure

Service Providers

We share information with trusted third-party service providers who assist us with:

• SMS and phone services (including Twilio, GoHighLevel, and other carriers)
• Payment processing (Stripe and other processors)
• Email delivery services
• Analytics and performance monitoring
• Customer support tools
• AI and machine learning services
• Data storage and backup services

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes and government requests
• Protect our rights, property, and safety
• Investigate violations of our terms of service
• Prevent fraud and ensure security

Marketing Partners

With your consent, we may share limited contact information with marketing partners for:

• Co-branded promotions and services
• Joint marketing campaigns
• Industry events and webinars

5. Data Security and Protection

We implement comprehensive security measures including:

• Encryption of sensitive data in transit and at rest
• Secure server infrastructure with regular security updates
• Access controls and multi-factor authentication
• Regular security audits and penetration testing
• Employee training on data protection
• Secure API endpoints for SMS and phone services

6. Your Rights and Choices

Account Management

You can access, update, or delete your account information through:

• Your account dashboard
• Contacting our support team
• Submitting written requests to [email protected]

Data Rights (Applicable Jurisdictions)

Depending on your location, you may have rights to:

• Access your personal information
• Correct inaccurate data
• Delete your personal information
• Object to processing
• Restrict processing
• Data portability
• Withdraw consent

7. State-Specific Privacy Rights

California Residents (CCPA/CPRA)

California residents have additional rights including:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information
• Right to non-discrimination for exercising privacy rights

We do not sell personal information to third parties.

To exercise these rights, contact us at [email protected] or submit a request through our website.

Other State Privacy Laws

We comply with applicable state privacy laws including those in Virginia, Colorado, Connecticut, and other states with comprehensive privacy legislation.

8. International Data Transfers

Your information may be processed and stored in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Other approved transfer mechanisms

9. Data Retention

We retain your information for as long as:

• Your account remains active
• Needed to provide Services
• Required by law or regulation
• Necessary for legitimate business purposes

10. Children's Privacy

Our Services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will promptly delete it.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website usage and performance
• Provide personalized content and advertisements
• Improve our Services

You can control cookies through your browser settings, though this may affect functionality.

12. Third-Party Links and Services

Our Services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these external services. We encourage you to review their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting updated policies on our website
• Sending email notifications to your registered email address
• Sending SMS notifications for significant changes affecting SMS services
• Providing in-app notifications