Privacy Policy
Simple Smart CMMS
Effective Date: August 16, 2026
Last Updated: August 16, 2026
1. What We Collect
- Account data: name, email, organization name, role, password (hashed).
- Operational data: work orders, assets, inventory records, notes, photos, and any other content you or your users enter into the Service.
- Billing data: handled directly by Stripe (see Section 4). We do not store full payment card numbers.
- Usage data: basic technical data such as IP address, browser type, and log data, collected automatically for security and troubleshooting.
- Marketing/analytics data: if you arrive via our ads or site, Google Ads and standard web analytics may collect interaction data per their own policies.
2. How We Use Data
We use collected data to: operate and maintain the Service, authenticate users, process billing, respond to support requests, send essential account/service notices, and improve the product. We do not sell your data to third parties.
3. Data Isolation Between Customers
Each customer organization's operational data is logically isolated from other organizations within the Service. Administrative access by Simple Smart CMMS personnel is limited to what is necessary for support, maintenance, and legal compliance.
4. Third-Party Service Providers
We rely on the following categories of third-party infrastructure providers to operate the Service. Each processes data under its own privacy policy and terms:
| Provider | Function |
|---|---|
| Supabase | Database hosting and authentication |
| Lovable | Application hosting, development platform, transactional email delivery |
| Stripe | Payment processing and billing |
| Cloudflare | DNS and network services |
| Zoho Mail | Business email (hello@simplesmartcmms.com) |
| Google Ads | Marketing and conversion tracking |
We do not control these providers' infrastructure directly and are not liable for their acts, omissions, or outages (see Terms, Section 5).
5. Data Retention and Deletion
Operational data is retained for as long as your account is active. Upon cancellation, data may be retained for a limited period (see Terms, Section 9.3) to permit export, after which it may be permanently deleted. You may request earlier deletion by contacting us, subject to any legal retention obligations.
6. Data Security
We use industry-standard measures (encryption in transit, access controls, hosted infrastructure with reputable providers) to protect data. No system is completely secure, and we cannot guarantee absolute security. See Terms, Section 6 regarding data loss.
7. Your Rights
You may request access to, correction of, or deletion of your personal data by contacting hello@simplesmartcmms.com. Organization administrators are responsible for managing the data and access rights of users within their own account.
8. Cookies and Tracking
The Service and marketing site may use essential cookies for login sessions and, where applicable, analytics/advertising cookies (e.g., Google Ads conversion tracking) to measure marketing performance. You can control cookies through your browser settings.
9. Children's Privacy
The Service is intended for business use by adults and is not directed at individuals under 18. We do not knowingly collect data from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice where practicable.
11. Contact
Questions about this Privacy Policy: hello@simplesmartcmms.com