Privacy Policy
Last updated: July 28, 2026
SimpleSend (“SimpleSend,” “we,” “us,” or “our”) is committed to protecting the privacy, confidentiality, and security of personal information belonging to our users and to the individuals whose information our users process through the service. This Privacy Policy explains how personal information is collected, used, and disclosed when you use the SimpleSend website and application at simplesend.tech and the SimpleSend Talk Tracks browser extension (together, the “Service”).
We will not use or share your information with anyone except as described in this Privacy Policy. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined here, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.
Our two roles. SimpleSend acts in two capacities. For your account data — registration details, billing information, usage records, and support conversations — SimpleSend is the data controller. For prospect and lead data that you upload or import into the platform (for example, via CSV upload, a LinkedIn lead list, or a contact captured from your CRM with our browser extension), you are the data controller and SimpleSend acts as a data processor on your instructions.
1. What information do we collect?
a) When you visit our website
- Usage statistics: We track usage of our website and application, including which pages you visit, how long you view them, and how you interact with features. We use PostHog for product analytics, which may include session replay; text you type into input fields is masked in session recordings.
- Account details: If you create an account, we ask for information such as your email address, name, company, role, approximate team size, outreach goals, and expected sending volume. We use this to set up your workspace, personalize your experience, and send onboarding and transactional emails.
- Payment information: If you become a paying customer, your payment card information is collected and processed by our payment provider, Stripe, Inc. Card details are sent directly to Stripe and are never stored on our servers. We retain only billing metadata such as your subscription plan, status, and billing period.
b) When you subscribe to updates on our public website
- Contact details: If you subscribe to our blog or product updates, we collect your email address and the IP address from which you subscribed (used for abuse prevention).
c) When you use the Service
- Uploaded prospect data: When you upload a CSV of leads or build a LinkedIn campaign, we store the prospect information you provide — typically names, job titles, companies, company websites, email addresses, phone numbers, and LinkedIn URLs. You are the controller of this data; we process it only to provide the Service.
- Research and enrichment data: To personalize your drafts, the Service gathers publicly available and licensed business information about the prospects and companies in your lists using third-party data providers (currently Explorium) and web search (currently Tavily). This may include firmographics, funding, hiring signals, and public posts or articles.
- Writing samples: If you paste examples of your past emails so the AI can match your voice, we store those samples in your account to generate your drafts.
- Generated content: We store the email and LinkedIn message drafts, cold-call talk tracks, research findings, and campaign reports the Service generates for you, together with the talk-track playbooks you and your team create.
- Browser extension data: If you install the SimpleSend Talk Tracks browser extension, it reads the contact record displayed on the supported CRM or dialer page you have open — specifically the contact’s name, email address, phone number, and associated company — in order to identify who you are about to call. Those details are sent to our servers to match the contact and generate their talk track, and are saved to your account only when you explicitly choose to save the contact. Page addresses are read on your device to detect when you move to a different record, and are never transmitted to us or stored. The extension stores three things locally in your browser: your SimpleSend session token so that you stay signed in, a cached copy of your team’s talk-track playbooks so that matching works without a network round trip, and your per-site preference to hide the on-page prompt. Contact details detected on a page are held in memory only and are never written to browser storage. The extension contains no analytics, tracking, or advertising code, and reads no data from any site other than the CRM and dialer hosts you have granted it access to.
- LinkedIn account connection: If you connect a LinkedIn account for LinkedIn campaigns, your LinkedIn login credentials (email, password, and optional two-factor authentication code) are passed through, encrypted, to our LinkedIn automation provider (We-Link) solely to establish the connection. SimpleSend does not store your LinkedIn password or two-factor secrets. We store connection metadata such as your LinkedIn profile name, profile ID, account status, and the connected email address.
- Server logs: We log requests made to the Service, which may include IP address, approximate location, browser type, and similar technical information, for security, rate limiting, and troubleshooting.
- Usage metering: We record usage events (such as drafts generated, models used, and units consumed) to operate metered billing and enforce plan limits.
d) When you contact support
- Support conversations: If you reach out via our contact form or email, we keep the conversation and anything you send during the exchange. Support conversations are removed within 90 days after your account is deleted.
2. What do we do with your personal information?
As a data controller, SimpleSend collects your personal data fairly and lawfully and in accordance with applicable law (including the EU General Data Protection Regulation (GDPR), where it applies), our Terms and Conditions, and any data processing agreement in place. The main purpose of collecting personal data is to provide you with a safe, efficient, and personalized experience.
We may use your personal data to:
- Provide the Service: When you create an account, you agree to our Terms and Conditions, which allow us to process your data so you can use SimpleSend — upload lead lists, run research, generate drafts, run LinkedIn campaigns, invite team members, and export your results.
- Generate drafts and talk tracks with AI: We send relevant campaign inputs (your brief, writing samples, prospect details, and research findings) to our AI provider, Anthropic, to generate and quality-check your drafts. The same applies to talk tracks: when you request one, we send the contact’s details and the matching playbook from your team’s library to Anthropic to draft it. Your uploaded CSVs, writing samples, playbooks, and CRM contact data are not used to train AI models.
- Provide customer support: To help you get full value from the Service and resolve any problems.
- Prevent fraud and abuse: We actively detect misuse of the Service, payment fraud, and abusive usage patterns (including rate limiting by IP and account).
- Communicate product updates: We may let you know about new features and releases. You can opt out of these emails at any time.
- Protect the Service: Any other function we believe in good faith is necessary to protect the security or proper functioning of the Service.
If we use collected data for another purpose, you will be informed at the time the data is collected and asked to accept.
Prospect data and lawful basis. Where our customers use SimpleSend to research and draft outreach to business prospects, the lawful basis for processing under the GDPR is legitimate interest: the interest of our customers in conducting business-to-business outreach using professional information that is publicly available or lawfully obtained. Prospect data enters the platform in two ways: imported directly by the customer (for example, via CSV upload), or supplemented by research and enrichment from our data providers based on the prospect details the customer supplies. SimpleSend does not itself send emails to prospects — customers export their drafts and send them through their own tools. Individuals may object to this processing at any time by contacting us at ethan@simplesend.tech. The customer controls what prospect data is uploaded and where exported drafts are used, and is responsible for its use in those destinations.
Limited use of browser extension data. Data that the SimpleSend Talk Tracks browser extension collects is used only to provide the talk-track features you see in the extension. We do not sell it. We do not transfer it to others except as needed to provide those features (see the third-party services listed below) or where we are required to do so by law. We do not use it for advertising, and we do not use it to determine creditworthiness or for lending purposes. No human reads it except with your permission to resolve a support request, or where required by law.
3. How long do we keep your personal information?
We retain the personal information we process on behalf of our customers for as long as needed to provide the Service, in accordance with our Terms and Conditions. You can delete individual campaigns (including their contacts, research, and drafts) at any time from within the platform. When your account is deleted, we remove your data within 90 days, except for limited records we retain for a reasonable period as necessary to pursue our legitimate business interests, conduct audits, comply with legal obligations (for example, billing and tax records), resolve disputes, and enforce our Terms and Conditions.
Disconnecting the browser extension, or uninstalling it, removes the session token and the cached talk-track playbooks from your browser immediately. Contacts you explicitly chose to save to your account, and the talk tracks generated for them, remain until you delete them or your account is deleted.
4. What third-party services do we use to process your personal information?
AI and research services
- Anthropic, PBC (AI draft generation and quality checks)
- Explorium Ltd. (B2B data enrichment)
- Tavily (web research)
IT and infrastructure services
- Supabase, Inc. (database, authentication, and backend hosting)
- Cloudflare, Inc. (hosting and content delivery)
- Lovable Labs Incorporated (platform services, sign-in, and transactional email delivery)
LinkedIn automation
- We-Link (LinkedIn account connection and campaign automation, used only if you connect a LinkedIn account)
Analytics
- PostHog, Inc. (product analytics and session replay)
Communication and scheduling
- Calendly, LLC (demo scheduling, if you book a call)
Financial services
- Stripe, Inc. (payments)
Sign-in providers
- Google, Apple, or Microsoft, if you choose to sign in with one of those accounts. We receive your name and email address from the provider; we do not receive your password.
5. What are your rights regarding your personal information?
Our Service stores prospect information on behalf of our customers. As a data processor of that information, SimpleSend has limited ability to act on it independently. If a SimpleSend customer has uploaded or captured your personal information into the Service and you would like it corrected, deleted, or no longer processed, the fastest path is to contact that customer directly; you may also contact us at ethan@simplesend.tech and we will assist or forward your request.
To exercise any of the rights below, contact us at ethan@simplesend.tech.
a) Right of access. You have the right to confirmation as to whether we process personal data about you and, where we do, to access a copy of it. As a customer, you can access your personal information through your account.
b) Right to rectification. You have the right to have inaccurate personal data corrected and incomplete data completed. As a customer, you can update your information at any time in your account settings, or by contacting us.
c) Right to erasure (“right to be forgotten”). You have the right to have your personal data erased without undue delay where it is no longer necessary, where consent is withdrawn, or where it has been unlawfully processed. As a customer, you can delete campaigns yourself in the platform and can request deletion of your account and personal data by contacting us. We permanently delete your data within 90 days of account deletion and confirm deletion requests in writing within 30 days.
d) Right to restriction of processing. You can ask us to limit how we use your data while a complaint or correction is being resolved.
e) Right to data portability. You have the right to receive the personal data you provided to us in a structured, commonly used, machine-readable format. As a customer, you can export your campaign data in CSV format from within the platform at any time, or request a copy by contacting us.
f) Right to object. You have the right to object at any time to processing based on legitimate interest, and to processing for direct marketing. If you object to receiving marketing from us, we will stop immediately — contact us or use the unsubscribe link in any email.
6. California privacy rights
If you are a California resident and the processing of your personal information is subject to the California Consumer Privacy Act (“CCPA”), you have certain rights with respect to that information.
- Right to know. You may request that we disclose the personal information we have collected about you and additional information about our collection, use, and disclosure of it. Much of this is described in this policy. Submit a request at ethan@simplesend.tech.
- Right to request deletion. You may request that we delete your personal information, subject to certain exceptions. Submit a request at ethan@simplesend.tech.
- Right to opt out of “sales”/“sharing.” We do not sell personal information for money. Note that the CCPA defines “sell” and “share” broadly: our use of analytics providers (which collect identifiers such as IP addresses and cookie IDs) may qualify under those definitions. You may opt out by contacting us at ethan@simplesend.tech or by disabling non-essential cookies.
You may designate an authorized agent to make requests on your behalf; we will require proof of authorization and may need to verify your identity directly. You also have the right not to be discriminated against for exercising these rights.
7. Choice / opt-out
If you subscribe to our updates, we will use your email address to send them to you. You may stop receiving marketing or update emails at any time by following the unsubscribe link included in every such email, or by contacting us at ethan@simplesend.tech. Transactional emails (such as billing receipts, security notices, and password resets) are sent as needed to operate your account.
8. LinkedIn account connections
If you connect a LinkedIn account to use LinkedIn campaign features:
- Your LinkedIn credentials are transmitted, encrypted, directly to our automation provider (We-Link) to establish the session. SimpleSend never stores your LinkedIn password or two-factor secrets.
- SimpleSend is an independent product and is not affiliated with, endorsed by, or certified by LinkedIn. Automated activity on LinkedIn may be restricted by LinkedIn’s own policies; see our Terms and Conditions for details.
- You can disconnect your LinkedIn account at any time from within the platform, which ends the automation session.
9. Do we use cookies?
A cookie is a small file placed on your device by a web server. Our website and Service use cookies and similar technologies to: (i) identify you when you sign in; (ii) remember your preferences; (iii) improve the quality of the site and Service; and (iv) carry out traffic and statistical analysis via our analytics provider.
In particular, we use:
- Cookies that manage user authentication;
- Cookies for audience and statistical measurement;
- Cookies that improve your browsing experience (for example, remembering dismissed tips);
- Cookies that store your preferences.
You are free to block, delete, or disable cookies in your browser settings; however, some areas of the Service (such as staying signed in) may not function properly if you do.
The browser extension does not use cookies. It stores only the items described in section 1(c) in your browser’s local extension storage, and it does not read the cookies of any site you visit.
10. How do we secure your data?
We take the security of the data we manage seriously. Measures include encryption in transit, row-level access controls so accounts can only access their own data, masked inputs in analytics session recordings, credential pass-through (rather than storage) for LinkedIn connections, a browser extension that keeps detected contact details in memory rather than writing them to disk, and delegation of card handling to a PCI-compliant payment processor. Access to production data is limited to what is necessary to operate and support the Service, and administrative actions on user accounts are logged.
No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we work to protect your information using industry-standard practices.
11. Children’s privacy
The Service is intended for business use by adults and does not address anyone under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us at ethan@simplesend.tech and we will take steps to remove it.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of changes by posting the new Privacy Policy on this page and updating the “Last updated” date. You are advised to review this Privacy Policy periodically. Changes are effective when posted on this page.
Contact information
Questions about this Privacy Policy should be sent to us at ethan@simplesend.tech.