Privacy Policy

Last updated: August 25, 2025

This Privacy Policy describes how Simple Opt Out Compliance ("we," "us," or "our") collects, uses, and protects your personal information when you use our service.

Information We Collect

Account Information

When you register for our service, we collect:

• Name (first and last)
• Email address
• Password (encrypted and stored securely)
• Company name (if applicable)

Billing Information

For paid services, we collect:

• Billing address
• Payment information is processed by Stripe (we do not store credit card details on our servers)

Usage Data

We automatically collect information about how you use our service:

• Pages visited and features used
• Time spent on our platform
• Browser type and version
• Device information
• IP address (anonymized for analytics)

Service Data

Information you provide while using our service:

• Opt-out requests you manage
• Configuration settings
• Support communications

How We Use Your Information

We use your personal information to:

• Provide our service: Create and manage your account, process opt-out requests, and deliver our SaaS platform
• Process payments: Handle billing and subscription management through Stripe
• Improve our service: Analyze usage patterns to enhance functionality and user experience
• Customer support: Respond to your questions and provide technical assistance
• Legal compliance: Meet our legal obligations and protect our rights
• Security: Detect and prevent fraud, abuse, and security threats

Third-Party Services

We use only two trusted third-party services:

Stripe (Payment Processing)

• What they do: Process payments and manage subscriptions
• Data shared: Billing information and payment details
• Privacy policy: https://stripe.com/privacy
• Security: PCI DSS compliant payment processing

Matomo (Analytics)

• What they do: Provide privacy-focused website analytics
• Data shared: Anonymous usage statistics and website traffic data
• Privacy policy: https://matomo.org/privacy-policy
• Privacy protection: IP addresses are anonymized, no cross-site tracking

What We Don't Do

• No data sales: We never sell, rent, or lease your personal information
• No data sharing: We don't share your data with marketing companies or data brokers
• No advertising networks: We don't use advertising trackers or ad networks
• No social media tracking: We don't integrate social media pixels or tracking
• No unnecessary collection: We collect only what's needed to provide our service

Data Security

We implement robust security measures to protect your information:

• Encryption of data in transit and at rest
• Secure password hashing
• Regular security audits and updates
• Access controls and authentication
• Secure hosting infrastructure

Data Retention

We retain your personal information:

• Account data: Until you delete your account or request deletion
• Billing records: As required by law for tax and accounting purposes
• Usage analytics: Aggregated and anonymized data may be retained indefinitely
• Support communications: Up to 3 years for service improvement

Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and personal data
• Portability: Export your data in a structured format
• Opt-out: Disable analytics tracking via browser settings

Cookies

We use cookies for:

• Essential functionality: User authentication and session management
• Analytics: Matomo analytics cookies (can be disabled)
• Preferences: Remember your settings and preferences

You can control cookies through your browser settings, though disabling essential cookies may affect functionality.

Legal Basis for Processing

We process your personal data based on:

• Contract performance: To provide our SaaS service
• Legitimate interests: For analytics, security, and service improvement
• Legal obligations: To comply with applicable laws
• Consent: Where required by law (you can withdraw consent at any time)

International Data Transfers

Your data may be processed in countries outside your residence. We ensure adequate protection through:

• Selecting service providers with strong privacy commitments
• Implementing appropriate safeguards and contractual protections
• Complying with applicable data transfer regulations

Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will take steps to delete the information promptly.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your personal information may be transferred. We will provide notice before your data becomes subject to a different privacy policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Email notification to registered users
• Prominent notice on our website
• Updating the "Last updated" date above

Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us at:

• Email: [email protected]
• Company: DecaData Corporation
• Address: 4444 Geary Boulevard, Suite 309, San Francisco, CA 94118