Privacy Policy

Effective date: October 1, 2026

1. Who we are and what this policy covers

SimpleUP is a service of Simple Is Good Inc. ("Simple Is Good", "we", "us", "our"), a Canadian company based in Oshawa, Ontario. This policy explains how we handle personal information when you:

visit simpleup.ca or any other site we run under the SimpleUP name;
sign up for updates, ask to be told when a job opens, book a call or send us an enquiry;
buy a job or plan from us and use our services as a client;
talk to us by email, phone, text, chat or video.

We handle personal information in two different roles:

For our own business. Information about our visitors, prospects and clients. We decide how it is used and we are responsible for it under this policy.
For our clients. When a client hires us to run a job, we handle information about the client's own customers and leads ("Client Customer Data") on the client's behalf and only on its instructions. The client is responsible for that information and for telling its customers how it is used. Our commitments for that data are in Schedule A of our Terms of Service.

Our privacy practices follow the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for people in Quebec, the Act respecting the protection of personal information in the private sector as amended by Law 25.

2. What we collect

Information you give us

Contact details: name, business name, email address, phone number and province.
What you tell us in forms, enquiries, calls and messages.
Account details for our client hub, such as your login email.
Billing details: billing name, billing address and province. Card payments are handled by Stripe. We never see or store your full card number; Stripe shares the card brand, the last four digits and the expiry date with us.
Voice samples: if you ask us to write in your voice, the example emails or posts you share with us.
Your approvals, edits and discards of the drafts we prepare for you.

Information collected automatically

Technical details when you visit our site: IP address, browser and device type, and the pages you view. Our web server keeps these in its logs.
Choices our site stores in your own browser: your light or dark theme, whether motion is on, and the jobs in your cart. These stay in your browser and are not sent to us.
Analytics: how visitors use our site, such as the pages viewed and how they found us (see section 11).
See section 11 for cookies and similar tools.

Information from the tools you connect

When you hire us for a job, you give us access to the tools that job needs, for example your SimpleUP CRM account, Google Business Profile, calendar, email inbox, website forms, or Facebook and Instagram pages. We access only what the job needs, and only while the job is active. What we see there is Client Customer Data (see section 1).

3. Why we use it

We use personal information only for the purposes below, or for a purpose we tell you about when we collect it:

to answer your enquiry and book calls;
to set up, run and support the jobs you buy, and to prepare drafts for your approval;
to bill you, collect tax and keep financial records;
to send service messages about your account, such as receipts, renewal reminders, limit alerts and changes to these policies;
to send you our newsletter or tell you when a job opens, only if you asked for it (see section 5);
to keep our systems secure and prevent fraud and misuse;
to improve our services, using information about how our services are used;
to meet our legal obligations.

We do not sell personal information, and we do not rent or trade our lists. We do not use your information, or your customers' information, to train our own AI models. The AI providers we use handle information under their own terms and policies.

4. How we use AI, and where a person is involved

We use AI to prepare drafts: replies to enquiries, follow-ups, review replies, posts, newsletters, quotes and similar work.

Drafts wait for approval. Anything written for one of our clients goes to that client as a draft. It is not sent to anyone until the client approves it. Silence never counts as approval.
Automatic sending is the client's choice. A client can switch on automatic sending for a job, such as appointment reminders. Those messages then follow the templates the client approved, and the client can switch it off at any time. Apart from that, the only messages that go out without a click are alerts to the client, such as a heads-up that an urgent enquiry has come in.
Our own replies. When you send us an enquiry, our AI may draft the reply. A member of our team reads and approves it before it is sent.
Live AI agents. Some plans include an AI voice or chat agent that answers callers or website visitors in real time, following a script the client approves before launch. The agent says it is an AI system if asked, and you can ask for a person at any time.
No automated decisions about you. We do not use AI to make decisions that have a legal or similarly significant effect on you. AI output is always reviewed by a person before anyone acts on it.

The kinds of AI providers we use are listed in section 6. They process the text needed to prepare a draft and return the result to us.

Email updates. When you sign up for our newsletter or ask to be told when a job opens, we record your email address, the form you used, the page and the date. Each email identifies Simple Is Good Inc., gives our contact details and includes an unsubscribe link. We act on an unsubscribe within 10 business days, usually at once.
Texts. We text you only if you gave us your mobile number for that purpose, or if a text is needed to deliver a service you bought. Message and data rates may apply. Reply STOP to any text to stop them; reply HELP for help. Agreeing to texts is never a condition of buying.
Service messages such as receipts and renewal notices are not marketing, and we send them to clients whatever their marketing choices.
Withdrawing consent. You can withdraw consent at any time by unsubscribing, replying STOP, or contacting us. If you withdraw consent needed to deliver a job, we will tell you what that means for the job.

We share personal information only with service providers who help us run our business, and only what they need. Each is bound by a contract or by terms that require them to protect it.

Provider	What they do for us
Our CRM platform provider (SimpleUP CRM)	Our CRM, contact forms, booking pages and client messaging
Stripe	Card payments, subscriptions, receipts and sales tax
Email delivery providers, such as Mailgun	Sending email, including approved replies
AI model providers, such as Anthropic (Claude)	AI drafting
Cloudflare	Domain name service, security and speed for our sites
Google Fonts	Delivers the fonts our site uses, which means Google sees your IP address
Website analytics provider	Measures how visitors use our site
Web hosting provider	Hosts our website and client hub

We may also share personal information:

with a client, when the information is that client's Client Customer Data;
when the law requires it, such as a court order or a request from a regulator we must answer;
to protect our rights, our clients or the public, such as to stop fraud;
as part of a sale or reorganization of our business, where the buyer agrees to protect it as this policy describes.

Before a new kind of service provider starts handling Client Customer Data, we will update this section at least 30 days in advance.

7. Where your information is stored

We are based in Canada. Some of our service providers store or process information outside Canada, for example in the United States. Information held outside Canada is protected by our contracts with those providers, but it is subject to the laws of the country where it is held, and the authorities there may be able to access it.

For people in Quebec: your personal information may be communicated outside Quebec, including to the service providers described in section 6.

8. How long we keep it

We keep personal information only as long as we need it for the purposes above or as the law requires. Then we delete it or make it anonymous.

Unless a period below says otherwise, we keep personal information for 12 months after our last contact with you.

Enquiries that did not become clients: 12 months after our last contact.
Newsletter and notify-me sign-ups: until you unsubscribe. We keep the record of your consent and your unsubscribe for 3 years after that, so we can show we respected it.
Client account and billing records: while you are a client, then as long as tax law requires us to keep business records, currently 6 years after the end of the tax year they relate to.
Client Customer Data: until 30 days after your last job ends, unless you ask us to return or delete it sooner (see Schedule A of our Terms).
Server logs: 90 days.

9. How we protect it

We use safeguards that match the sensitivity of the information: encrypted connections, access limited to the people who need it, secrets kept out of our code, separate access for each client, backups, and regular review of who has access.

If a breach of security creates a real risk of significant harm to you, we will tell you and report it to the Office of the Privacy Commissioner of Canada, and for people in Quebec to the Commission d'accès à l'information, as the law requires. We keep a record of every breach.

10. Your rights

You can ask us to:

tell you what personal information we hold about you, how we use it and who we have shared it with;
correct information that is wrong or incomplete;
stop using your information for marketing, or withdraw a consent you gave;
delete your information, unless the law requires us to keep it;
for people in Quebec: give you your information in a structured, commonly used format, and stop publishing or linking to information about you where the law allows.

We answer within 30 days. We may need to confirm your identity first. If a request is about Client Customer Data, we will pass it to the client concerned and help them answer it.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), or in Quebec to the Commission d'accès à l'information (cai.gouv.qc.ca).

11. Cookies and similar tools

Our site stores your theme, motion setting and cart in your browser's local storage. This stays on your device, is not a tracking cookie and is not sent to us. Clearing your browser data removes it.
Checkout runs on Stripe's pages. Stripe uses cookies to process payments and prevent fraud.
Booking pages and forms that run on SimpleUP CRM may set their own cookies.
Fonts load from Google Fonts, which receives your IP address.
Analytics. We use website analytics to understand how visitors use our site, such as which pages are viewed and how visitors found us. Analytics tools may set cookies and receive your IP address and device details. We look at the results in summary form to improve the site. You can block or delete cookies in your browser settings, and we ask for your consent where the law requires it.
Advertising. We do not currently use advertising or cross-site tracking cookies. If we add advertising tools, we will update this section first and ask for your consent where the law requires it.

12. Children

Our services are for businesses. They are not meant for anyone under 18, and we do not knowingly collect information from children under 13. If you think a child has given us personal information, contact us and we will delete it.

13. Changes to this policy

We may update this policy. If a change is significant, we will post it here at least 30 days before it takes effect and email clients. The effective date at the top always shows the current version.

14. Contact us and our Privacy Officer

Our Privacy Officer is responsible for the protection of personal information at Simple Is Good Inc. and answers questions, requests and complaints about this policy.

Privacy Officer: email [email protected] with "Privacy Officer" in the subject line
Simple Is Good Inc., Oshawa, Ontario, Canada
General contact: [email protected] or 1 888 670 6746

Also read: Terms of Service Refunds and Cancellation Policy Acceptable Use Policy