Privacy Policy
Effective date: 2026-05-21. Last updated: 2026-05-21.
1. About this policy
This Privacy Policy explains how Simplified Strategy Consulting, LLC ("SSC," "we"), operator of QBI Tracker (the "Service"), collects, uses, shares, and protects personal information. SSC is located at 2801 N Van Dyke Rd, Imlay City, MI 48444, USA.
2. Information we collect
You provide
- Account information: name, email, role, organization affiliation.
- Workspace content: sales reports, rep records, metrics, comments, and any other data uploaded to the Service.
- Billing information: handled by our payment processor (Stripe); SSC does not store full card numbers.
- Support communications you send us.
We collect automatically
- Log data: IP address, browser type, pages viewed, timestamps, and similar telemetry.
- Security data: authentication events, one-time-passcode verification, audit-log entries.
- Cookies and similar technologies, as described in our Cookie Policy.
3. How we use information
- To operate, secure, and improve the Service.
- To authenticate users and prevent fraud or abuse.
- To process payments and manage subscriptions.
- To send transactional messages (account, billing, security, product changes). Marketing email is opt-in only.
- To comply with legal obligations and enforce our agreements.
4. Customer Data and our role
For workspace content uploaded by a Customer, SSC acts as a processor (under GDPR) or service provider (under CCPA/CPRA): the Customer determines purposes and means of processing, and SSC processes only on the Customer's documented instructions. Business terms governing that processing are set out in the Data Processing Addendum.
5. Sharing
SSC shares information only as needed:
- Service providers (sub-processors): AWS (hosting, RDS, SES email), Stripe (payments). The current list of sub-processors is in the DPA.
- Within your workspace: data is visible to other authorized users of the same workspace per Customer-configured roles.
- Legal: where required by law, valid legal process, or to protect rights, property, or safety.
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to confidentiality.
SSC does not sell personal information and does not share it with third parties for cross-context behavioral advertising.
6. Retention
- Workspace Customer Data: retained while the workspace is active. After a lapse, retained read-only until day 90, suspended until day 180, then permanently deleted (see Terms § 6).
- Audit logs: 365 days from event.
- Email one-time passcodes: 24 hours.
- Backups: routine encrypted backups; deleted on a rolling basis on a maximum 35-day cycle.
- Billing records: retained as required by applicable tax and accounting law.
7. Security
SSC uses industry-standard controls including TLS in transit, encryption at rest on AWS-managed disks, scoped IAM credentials, role-based access in the application, audit logging, and routine backups. No system is perfectly secure; we cannot guarantee absolute security.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing. To exercise these rights for data SSC holds about you directly, email privacy@simplifiedstrategyconsulting.com. If your data is part of a workspace controlled by an employer or other Customer, please direct your request to that Customer; SSC will assist them with your request.
9. Children
The Service is not directed to children under 16, and SSC does not knowingly collect personal information from children.
10. International transfers
The Service is hosted in the United States (AWS US East region). If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data protection laws than your country.
11. Changes
SSC may update this Policy from time to time. Material changes will be announced in-app or by email. The "Last updated" date above reflects the most recent version.
12. Contact
Simplified Strategy Consulting, LLC
2801 N Van Dyke Rd, Imlay City, MI 48444, USA
privacy@simplifiedstrategyconsulting.com