Privacy Policy

This policy explains how TheSimpliCo. Ltd (“we”, “us”) collects and uses personal data when you use SimpliHeat, our heat-pump design application, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018). For account and design data you enter,TheSimpliCo. Ltd is the data controller; for your customers’ personal data that you input, you are the controller and we act as your processor.

1. Data we collect

• Account data — your name, work email, company name and your role.
• Design data — the surveys, properties, addresses and proposals you create.
• Usage data — how you use the app, and questions sent to our AI assistants (to improve support and for cost accounting).
• Payment data — handled by Paddle; we do not see or store your card details.

2. How we use it and our legal bases

• To provide and secure the Service — performance of our contract with you.
• To process subscriptions and prevent fraud — contract and legitimate interests.
• To improve the product, guides and support — legitimate interests.
• To send service and account emails — contract; marketing emails only with consent.

3. Processors and sharing

We share data only with providers who help us run the Service, under appropriate agreements:

• Paddle — payments, invoicing and tax (Merchant of Record).
• Supabase — database and authentication hosting.
• Vercel — application hosting.
• OpenRouter and its upstream model providers — to power AI assistant features.
• Address and EPC lookup providers, to help you find property details.

We do not sell your personal data.

4. International transfers

Some providers process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Addendum.

5. Retention

We keep account and design data for as long as your account is active and for a reasonable period afterwards, then delete or anonymise it, unless we must keep it longer for legal or accounting reasons.

6. Your rights

You have the right to access, correct, delete or port your data, to object to or restrict certain processing, and to withdraw consent. To exercise these, email us at the address below. You can also complain to the UK Information Commissioner’s Office (ico.org.uk).

7. Cookies

We use essential cookies to keep you signed in and to run the app securely. We do not use advertising cookies.

8. Security

We use industry-standard measures including encryption in transit, access controls and row-level security so each account can only see its own data. No system is perfectly secure, but we work to protect your information.

9. Contact

Privacy questions or requests: hello@simpliheat.app.