Privacy Policy
Last updated 5 August 2026
Simply Plex is job, crew and billing software for trade contractors. This page explains what we collect, why we have it, who else touches it, and how to get it back or get rid of it. It describes what the software actually does today.
Who we are
Simply Plex ("we") provides field-service software to contracting businesses. If your employer uses Simply Plex, they control your data and we process it on their behalf — ask them first about access or deletion, and we will help them do it.
What we collect
Account information
- Your name, email address and role.
- A hash of your password — a one-way scramble. We never store or see the password itself, and we cannot recover it.
- The time of your most recent signed-in request, at most once an hour. This tells an account owner who is actively using their subscription.
Business information you enter
The work itself: jobs, schedules, customers and their contact details and addresses, invoices and estimates, price lists, parts, equipment, crews, timesheets, notes, checklists, forms, photographs and signatures captured on a job, and imported plan files.
Technical information
- Server logs containing IP address, request path and timing. Used to keep the service running and to investigate faults.
- An audit trail of significant actions — who changed what, and when — which exists so an account owner can answer that question.
What we do NOT collect
- Location. We do not track your device's location. The mobile app requests no location permission, contains no location library, and does not record where a phone or vehicle has been. An address you type onto a job is business data you entered, not tracking.
- Analytics and advertising. No analytics SDK, no advertising network, no third-party tracker, no cross-site profile. We do not sell or share personal information for advertising, and we never have.
- Payment card numbers. If card payments are enabled, card details go directly to Stripe and never reach our servers.
- Contacts, photos library, microphone or calendar. The app opens the camera or picker only when you attach a photo to a job, and receives only that photo.
Why we have it
To provide the service, keep it secure, bill for it, and give account owners the records their business runs on. We do not use your business data to train machine-learning models.
Who else touches it
We use other companies to run the service. They may only process data to provide their service to us.
| Company | What for | Status |
|---|---|---|
| Supabase | Database hosting (United States) | Always |
| Railway | Application server hosting | Always |
| Vercel | Website hosting | Always |
| Cloudflare (R2) | Storage for photos and files you upload | Always |
| Resend | Sending email such as invoices and invitations | Always |
| Mapbox | Maps and turning an address into coordinates | Always |
| Twilio | Text messages to your customers | Only if your shop enables it |
| Stripe | Card payments | Only if your shop enables it |
| An AI provider | Reading a work order or plan file you upload so its details can be filled in for you | Only if your shop enables it |
The last three are switched off unless a shop turns them on. Where a document is sent to an AI provider, it is sent to have that document read and returned as fields — not to train a model.
What is stored on your phone
The field app is built to work with no signal, so it keeps a copy of your assigned work on the device and syncs when service returns. Your sign-in tokens are held in the operating system's secure keychain. Signing out erases the local copy, and so does signing in as a different person — a phone that changes hands does not keep the previous account's work.
How long we keep it
- Business records are kept for as long as the account is active, because they are the account's books.
- Deleted records are marked deleted and hidden rather than erased immediately, so a mistake can be undone and so field devices learn to remove their copy.
- Backups are retained on a rolling basis and overwritten in turn, so deleted data can persist in a backup for a short period after removal.
- Close an account and we will delete or return its data within 30 days of being asked.
Security
Traffic is encrypted in transit. Passwords are stored only as bcrypt hashes. Each business's data is separated and every request is scoped to the account it came from. Sign-in tokens are short-lived and deactivating a user ends their sessions. Backups are encrypted, and we test restoring them rather than assuming they work.
No system is perfectly secure. If a breach affects your data we will tell the affected account owners without undue delay.
Your rights
Depending on where you live you may have the right to access, correct, export or delete your personal information, and to object to certain processing. If your employer uses Simply Plex, start with them — the data is theirs to control. Otherwise write to hello@simplyplex.com and we will respond within 30 days.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Children
Simply Plex is software for businesses and is not directed at anyone under 16. We do not knowingly collect information from children.
Where data lives
Our infrastructure is hosted in the United States. If you use the service from elsewhere, your information is transferred to and processed there.
Changes
If we change what we collect or who we share it with, we will update this page and change the date at the top. Material changes will be emailed to account owners.
Contact
hello@simplyplex.com — questions, requests, or anything on this page that does not match what you see in the product.