BackSimpleMark StudioUpdated April 2026

Privacy Policy

Your privacy matters. This policy explains what data we collect, why we collect it, and how you can control it.

Our core commitments

  • We do not sell your data to third parties.
  • We do not use your data to train AI or machine learning models.
  • You can export or delete your data at any time.
  • We collect only what we need to provide the Service.

1. Who we are

SimpleMark Studio operates the SimpleMark Studio platform. We are based in Israel, which the European Commission has recognised as providing an adequate level of data protection. For the purposes of data protection law, we are the data controller of your personal information. If you have questions about this policy, contact us at support@simplemarkstudio.com.

2. What data we collect

We collect information in the following categories:

Account information

Your name, email address, and password (stored as a secure hash) when you register. Your workspace name and any additional profile details you choose to add.

Business data you create

Goals, tasks, projects, client records, invoices, financial entries, and other content you enter into the platform. This data belongs entirely to you.

Usage data

Basic information about how you interact with the Service, such as pages visited, features used, and session duration. This is used to improve the platform and diagnose issues.

Technical data

IP address, browser type, device type, and operating system. This information is collected automatically and used for security and performance monitoring.

Communications

If you contact us by email or through the Service, we retain that correspondence to respond to your inquiry and improve our support.

3. How we use your data

We use the data we collect to:

  • Create and manage your account
  • Provide, operate, and maintain the Service
  • Send transactional emails such as password resets and invitations
  • Send service-related communications, including updates to these policies or notices about your account
  • Monitor and improve the security and performance of the Service
  • Comply with legal obligations
  • Respond to your support requests and communications

We do not use your data for advertising purposes. We do not share your data with advertising networks.

4. Legal basis for processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

  • Consent — where we have explicitly asked for and received your consent, such as for optional marketing communications or analytics cookies
  • Contract performance — processing necessary to provide the Service you signed up for
  • Legitimate interests — security monitoring, fraud prevention, and platform improvement
  • Legal obligation — compliance with applicable laws and regulations
  • Consent — where we have explicitly asked for and received your consent, such as for optional marketing communications

5. Data sharing and third parties

We share your data only with the following third-party providers, and only as necessary to operate the Service:

Railway — infrastructure and database hosting

Our backend application and database are hosted on Railway. Your business data is stored on Railway's infrastructure. Railway does not access or use your data for its own purposes.

Vercel — frontend hosting and delivery

The SimpleMark Studio web application is served via Vercel. Vercel processes requests to deliver the application to your browser and does not store your personal business data.

Resend — transactional email delivery

We use Resend to deliver transactional emails, including welcome messages, password resets, and account notifications. Resend receives your email address and the content of those specific communications only.

Google Analytics

If you accept analytics cookies, Google Analytics collects usage data on our marketing website, such as which pages are visited and how visitors navigate the site. This data is processed by Google under their own privacy policy. We do not use Google Analytics for advertising and do not enable ad personalization features.

Paddle — payment processing

Subscription billing is handled by Paddle.com, who acts as the Merchant of Record for all transactions. When you subscribe, you are transacting directly with Paddle. Paddle collects and processes your payment details; we do not store or have access to your card information. Paddle's own privacy policy governs the data they collect in connection with payment processing.

Legal and regulatory authorities

We may share data where required by law, court order, or to protect the rights, property, or safety of SimpleMark Studio, its users, or others.

All third-party providers are engaged under data processing agreements and are not permitted to use your data for their own purposes beyond what is described above.

6. Data retention

We retain your personal data for as long as your account is active. If you delete your account, your personal data and business data will be permanently removed from our systems. This action is irreversible.

Certain data may be retained beyond deletion where required by applicable law — for example, financial records may be retained for the period required under Israeli tax law or other applicable jurisdictions.

Anonymised and aggregated data — from which you cannot be identified — may be retained indefinitely for analytics and platform improvement purposes.

7. Your rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you
  • Correction — request that we correct inaccurate or incomplete data
  • Deletion — request that we delete your personal data
  • Portability — request your data in a structured, machine-readable format
  • Restriction of processing — request that we limit how we use your data in certain circumstances
  • Objection — object to processing based on legitimate interests
  • Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at support@simplemarkstudio.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Cookies

We use two categories of cookies on this website.

Strictly necessary cookies

Session authentication tokens that keep you logged in while using the Service. These cannot be switched off, since the Service cannot function without them.

Analytics cookies

We use Google Analytics to understand how visitors use our marketing website, such as which pages are viewed and how visitors navigate the site. This helps us improve the site over time. Analytics cookies only activate if you accept them in the cookie banner. We do not use them for advertising and do not share this data with advertising networks.

When you first visit the site, we ask you to accept or decline analytics cookies. You can decline without affecting your ability to use the Service.

Blocking strictly necessary cookies will prevent you from logging in and using the Service. Blocking or declining analytics cookies has no effect on the Service itself.

9. Security

We implement industry-standard technical and organisational measures to protect your data, including encrypted data transmission (HTTPS), hashed password storage, and access controls that limit who can view your data within our team.

No method of transmission over the internet is completely secure. We cannot guarantee absolute security, but we take the protection of your data seriously and will notify you promptly in the event of a breach that affects your personal data.

10. International transfers

SimpleMark Studio is based in Israel. Israel has been recognised by the European Commission as providing an adequate level of protection for personal data.

Your data may also be stored or processed in other countries through our infrastructure and service providers (see section 5). Where we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

11. Children's privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you by email or via the Service before material changes take effect. The date at the top of this page reflects when the policy was last updated.

13. Contact

For any privacy-related questions or to exercise your rights, contact us at support@simplemarkstudio.com.

SimpleMark Studio — Last updated April 2026