Privacy Policy

    Last updated: 8/25/2025

    Information We Collect

    As a hosted infrastructure provider for device management services, we collect and securely manage information necessary to provide our platform services:

    • Account Information: Business contact details, company information, and billing data
    • Device Data: Device identifiers, configurations, security status, and management metadata
    • Usage Analytics: Platform usage patterns, API calls, and performance metrics
    • Security Logs: Threat detection data, remediation actions, and compliance reports

    How We Use Your Information

    We use collected information to:

    • Host and manage device management infrastructure
    • Provide secure storage and management of device data
    • Control vendor access through customer entitlements
    • Enable threat detection and automated remediation
    • Generate compliance and security reports
    • Improve platform performance and reliability
    • Provide customer support and technical assistance
    • Facilitate API integrations and white-label solutions

    Data Security & Protection

    Security is fundamental to our business. We implement enterprise-grade security measures:

    • End-to-end encryption for all data in transit and at rest
    • Multi-factor authentication and role-based access controls
    • Regular security audits and penetration testing
    • SOC 2 Type II compliance and industry certifications
    • Secure API architecture with rate limiting and monitoring

    Data Sharing & Third Parties

    We may share information with:

    • Service Providers: Trusted partners who assist in platform operations
    • Legal Requirements: When required by law or to protect our rights
    • Business Partners: With explicit consent for integrated solutions

    We never sell your data. For MSPs and MSSPs, client data remains under your control with clear data ownership agreements.

    Data Retention

    We retain data as long as necessary to provide services and meet legal obligations:

    • Active account data: Retained while service is active
    • Security logs: Retained for 2 years for compliance purposes
    • Billing records: Retained for 7 years as required by law
    • Device configurations: Retained for 90 days after device removal

    Your Rights

    You have the right to:

    • Access your personal and business data
    • Correct inaccurate information
    • Request data deletion (subject to legal requirements)
    • Export your data in standard formats
    • Opt out of non-essential communications

    Contact Us

    For privacy-related questions or to exercise your rights, contact our Data Protection Officer:

    Email: privacy@smplify.com

    Address: Smplify Privacy Office, 131 Continental Dr Suite 305, Newark, DE 19713, US

    Response Time: We respond to privacy inquiries within 30 days