What we collect. And what we do with it.
This page explains what Simplifiq collects when you visit simplifiq.co, book a call, send us a message or use the client portal, which cookies the site sets, who processes the data for us, how long we keep it and how to exercise your rights. Last updated 4 November 2026.
What we collect. Only what the service needs.
Who we are
Simplifiq is an AI automation agency based in Panama, working in English and Spanish with clients in Panama, Latin America and the United States. We are the data controller for everything described on this page. You can reach us at hello@simplifiq.co.
Visiting the site
Our hosting provider, Netlify, keeps standard server logs (IP address, browser, pages requested) for a limited time under its own retention policy, for security and reliability. We use Google Analytics 4 to understand how many people visit, which pages they read and which channels bring them here. Google Analytics sets the cookies listed below and records page views, the standard interactions Google measures by default (scrolling, clicks to other sites, downloads) and two events of ours, "booking dialog opened" and "lead sent", together with the page language and the campaign parameters in the link you arrived from. Google Analytics 4 does not store IP addresses. We do not use advertising cookies, remarketing or cross-site tracking.
When you arrive from a link that carries campaign parameters (utm_source and similar), the site keeps those parameters, the referring website's domain and the first page you opened in your browser's session storage for the duration of the visit. Nothing is sent anywhere unless you submit the contact form, where these values are included so we know which channel the message came from.
Sending us a message
The contact form asks for your name, email and message, and optionally a phone number and company. Submissions are received by Netlify Forms, filtered for spam, emailed to hello@simplifiq.co and recorded as a lead in our CRM, monday.com, together with the campaign source described above. We use this information to answer you and, if you ask us to, to prepare a proposal.
Booking a call
Calls are scheduled through Calendly, shown inside this site in a dialog. What you type there (name, email, and the answers to the booking questions, including how you heard about us) is processed by Calendly under its own privacy policy and lands in our calendar and inbox. Opening the dialog loads Calendly's scheduler, which may set its own cookies.
The client portal
If your company works with us, the portal at simplifiq.co/portal holds the onboarding record: company details, the people you name as contacts (name, role, email, phone), the documents you upload or we share, the hosting choice and the access items you confirm. When you sign a scope or an agreement in the portal, we record the name you type, the time, your IP address and browser, and append them to the signed PDF as its certificate. Sign-in uses one-time links sent by email, with no password. The portal never stores your passwords, API keys, database credentials or card numbers. Credentials belong in your password manager, and payments for managed hosting go through Stripe Checkout, where only Stripe sees your card; we keep Stripe's customer and subscription identifiers. Transactional emails from the portal are sent through Resend. The portal also keeps an activity log of what happens in it (sign-ins, steps completed, help requests) with the time, the internal notes our team writes about the engagement, and the environment records (repositories, hosts, owners) you share.
Who processes data for us
- Netlify (United States): hosting, forms, server-side functions and the portal's storage.
- Google: Google Analytics 4, Search Console, Google Workspace for email and calendar.
- monday.com: our CRM, where leads and client records live.
- Calendly: call scheduling.
- Stripe: subscription payments for managed hosting, portal clients only.
- Resend: transactional email from the portal.
Each of them processes data on our instructions and under its own security and privacy terms. Some of them operate in the United States, which means your data may be stored outside your country.
How long we keep it
- Leads and messages: while we are in conversation and for up to two years after the last contact, unless you ask us to delete them earlier.
- Client records in the portal: for the length of the engagement and for as long as we need them to support the systems we built, or until the client asks for deletion. A client's record can be deleted permanently on request; only a trace with the company name and the date remains.
- Analytics: Google Analytics keeps event data for the retention period configured in our property, at most 14 months. Aggregated reports do not identify you.
What the site sets. Nothing hidden.
We do not show a cookie banner. This is the complete list. To refuse the analytics cookies, block cookies for simplifiq.co in your browser or install Google's opt-out add-on; the site works the same without them.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
_ga, _ga_CWP6DFVVTF | Google Analytics | Tells returning visits apart with a random identifier. No name, no email. | 2 years |
sq_attrib (session storage) | simplifiq.co | The campaign source, referrer and landing page of this visit, so a contact form message can say where it came from. | Until the tab closes |
sq_portal | Client portal | Keeps a client signed in to the portal. | 30 days |
sq_team | Client portal | Keeps a Simplifiq team member signed in. | 12 hours |
sq_portal_lang (local storage) | Client portal | Remembers English or Spanish in the portal. | Until cleared |
| Calendly cookies | Calendly | Set only once you open the booking dialog, under Calendly's policy. | Per Calendly |
Your data. Your call.
Under Panama's Law 81 of 2019 on personal data protection, and under the data protection laws that apply where you live, you can ask us at any time to:
- tell you what personal data we hold about you and give you a copy;
- correct it when it is wrong or incomplete;
- delete it, or stop using it for a given purpose;
- hand it over in a portable format;
- object to a use you disagree with.
Write to hello@simplifiq.co from the address we have on file, or tell us how to verify it is you. We answer within 10 business days. If you are not satisfied with our answer, you can complain to the data protection authority in your country; in Panama that is the Autoridad Nacional de Transparencia y Acceso a la Información (ANTAI).
Children
Our services are for businesses. The site and the portal are not directed at anyone under 18 and we do not knowingly collect their data.
Changes to this page
When our tools or practices change, we update this page and the date at the top. Material changes to how we treat client data are also announced to active clients by email.