Privacy Policy

This policy explains what SimpleTag collects, why, and who processes it. The short version: we collect what the product needs to work, we do not sell personal data, and we do not run third-party advertising trackers.

If you have a SimpleTag account

• Account data. Your email address and sign-in credentials, managed by our authentication provider. If you sign in with Google, we receive your email from Google.
• Your content. The pages you build, the facts in your knowledge base, and images you upload or import. When you provide a website address, we fetch that site and extract text facts and images for your review; nothing is published without your approval.
• AI drafting. When AI writing is available, the description you type and the facts you approve are sent to our AI provider to draft your page copy. They are used to generate your draft, not to build advertising profiles.
• Leads and contacts. When visitors submit a form on your page, we store the submission for you. You are the controller of that data; we process it on your behalf.

If you visit a published page

• Analytics. Page owners see first-party statistics: views, clicks, and approximate unique visitors. Unique visitors are counted from a salted hash; we do not build cross-site profiles and do not use third-party analytics trackers.
• Forms. Anything you submit through a page's contact or lead form goes to that page's owner. Only submit what you are comfortable sharing with them.
• Cookies. We use cookies for signed-in sessions and to remember that you unlocked a password-protected page or accepted a sensitive-content warning. No advertising cookies.
• Owner-added pixels. Page owners can add their own tracking pixels (for example Meta or Google) to their pages. Those are set by and disclosed by the page owner, who is responsible for using them lawfully.

Who processes data for us

We use a small set of infrastructure providers, all under their own data processing terms:

• Supabase: database, authentication, and file storage (hosted in the United States)
• Vercel: application hosting and content delivery
• NVIDIA: AI text generation for page drafts
• Resend: transactional email, such as lead notifications, where enabled
• Telegram: lead notifications, only for owners who connect their own Telegram account

When paid plans launch, payments will be processed by a dedicated payment provider; card details will go to them directly and never touch our servers.

Retention and deletion

We keep your data while your account is active. Delete a page and its content stops being served; delete your account and we remove your workspace data within 30 days, except where the law requires us to keep records longer. You can also email us to request access to or deletion of your personal data and we will act on it.

Children

SimpleTag is not directed at children and may not be used by anyone under 16 or under the age of digital consent where they live.

Changes and contact

We will post any material changes to this policy here with a new date. Questions and privacy requests go to support@simpletag.me.