Privacy Policy
What we collect, why, who processes it on our behalf, and the choices you have.
This Privacy Policy describes how SimplyCount, Inc. ("SimplyCount," "we," "us") collects, uses, and shares information when you use our website, hosted services, and desktop application. We are a bootstrapped software company that builds symbol-takeoff tools for construction estimators.
1. Information we collect
| Category | What, exactly | Source |
|---|---|---|
| Website analytics | First-party, cookie-free events on this site: event type (page view, outbound click, share, FAQ open, demo interaction, lead submit), page path, a short label, timestamp, a random visitor id (stored in your browser's localStorage), a per-visit session id, and your first traffic source (referrer hostname and any utm tags, captured once). Your IP address is used transiently for rate limiting and is not stored with events. | Automatically, on this site |
| Contact / lead details | The work email and any message fields you submit through our contact form, linked to the same visitor and session ids so we know which visit became a conversation | You |
| Identity links | A privacy-minimizing crosswalk connecting a website visit to a lead to a customer record. It stores only salted cryptographic hashes of email addresses — never the raw address, never a name — and only the links between identifiers we already hold | Derived, on our systems |
| Help-center usage | On help.simplycount.com: page and usage events, and the content of support conversations you start there | You / automatically |
| Desktop application | Today: nothing — shipped builds of the SimplyCount desktop apps send no telemetry. The current app version contains a consent-gated, anonymous launch beacon (app version, license state, trial days remaining, and a random install id — no project, file, or personal data) that is disabled in every build shipped to date. If we activate it, it will be on by default with an always-available off switch in the app, and this section will say so | Desktop app (dormant) |
| Account information | Name, work email, company, plan — when you sign up for a hosted account | You, at sign-up |
| Customer Data | Plan sets and documents you upload for counting, and the resulting counts | You, in use |
| Billing information | Subscription status; payment card details are handled by our processor and not stored by us | You, via Stripe |
| Support & sales | Messages you send us and related correspondence | You |
2. How we use information
- To provide, secure, and improve the Service, including running takeoff counts on the plans you submit.
- To create and manage your account, process subscriptions, and provide support.
- To communicate with you about the Service, including service and security notices.
- To understand usage in aggregate so we can improve the product.
- To comply with law and enforce our agreements.
We do not sell your personal information, and we do not use your Customer Data (your plan sets) to train shared or third-party models. [Any future model-improvement use would be opt-in and disclosed here before it happens.]
3. On-premise / offline use
SimplyCount can run on-premise or offline. When you run it that way, your plan sets are processed on your own device or inside your own network and are not uploaded to us. Information described in this policy is collected only for the hosted/cloud service and our website.
4. Subprocessors we share with
We use a small set of vendors to operate the Service. Each processes limited data on our behalf under its own terms. The current list and its purposes are maintained on our Trust & Security page and include Stripe (payments), Keygen (license verification), Google Cloud (hosting), Resend (transactional email), and Assembly (customer relationship management). We share information with these providers only as needed to operate the Service, and we may also disclose information to comply with law or protect our rights.
5. Cookies and analytics
Our website sets no analytics cookies and loads no third-party analytics or advertising scripts. The visitor and session identifiers described in Section 1 live in your browser's localStorage and sessionStorage, are random, and are never shared with ad networks. Page typography is served by Google Fonts, which means your browser requests font files from Google when a page loads. If we ever enable session-replay or additional analytics, we will disclose it here first and apply input sanitization so form fields such as your work email are not captured. We honor applicable browser privacy signals where required.
6. Data retention
We keep account and Customer Data for as long as your account is active and as needed to provide the Service. We describe our current retention posture honestly on the Trust & Security page, including where automated deletion is planned rather than already implemented. You can request deletion as described below.
7. Security
We apply administrative and technical safeguards described on the Trust & Security page, including encryption in transit, secret management, least-privilege access, and revocable sessions. No method of transmission or storage is perfectly secure, and we describe our posture honestly rather than overstating it.
8. Your choices and rights
You may access or update your account information, request a copy or deletion of your personal information, or opt out of non-essential communications by emailing the address in Section 12. Deletion requests are handled manually today: we remove your lead record, your identity-graph hashes, and your support conversations, and confirm back to you — our target is within 30 days of a verified request. Depending on where you live (for example, under U.S. state privacy laws), you may have additional rights; we will honor applicable rights and will not discriminate against you for exercising them.
9. Children
The Service is for business use and is not directed to children under 13, and we do not knowingly collect their information.
10. International
We are based in the United States and process information there. If you access the Service from outside the U.S., you understand your information will be processed in the U.S. [Cross-border transfer mechanisms subject to counsel review.]
11. Changes
We may update this policy. Material changes will be posted here with an updated date and, where appropriate, additional notice.
12. Contact
Privacy questions, access requests, and deletion requests: sales@simplycount.com.