Privacy Policy

This Privacy Policy explains how Simple Plain AI Pte. Ltd., trading as SimplePlainAI (“SimplePlainAI”, “we”, “us” or “our”), collects, uses, discloses, protects and retains personal data in connection with our website, business activities and AI agent services.

It applies when you visit our website, contact us, complete an assessment, communicate directly with us, interact with an AI agent that we operate for a client, or otherwise provide personal data to us. Where a client uses a SimplePlainAI agent to communicate with its own customers or users, the client’s privacy policy may also apply.

1. About SimplePlainAI

SimplePlainAI is operated by Simple Plain AI Pte. Ltd., a company incorporated in Singapore.

For enquiries about this Privacy Policy or our handling of personal data, contact our Data Protection Officer through hello@simpleplainai.com.

2. Our roles when handling personal data

Our role depends on why and how personal data is processed.

When we collect personal data through our website, assessments, sales activity, direct communications or business administration, SimplePlainAI determines the purposes of processing and is responsible for that processing under applicable law.

When we process personal data through an AI agent on behalf of a business client and according to that client’s instructions, the client generally controls the purposes of processing and SimplePlainAI generally acts as a data intermediary under Singapore’s Personal Data Protection Act 2012.

Some agents operate primarily within accounts and systems controlled by the client. Other deployments may use infrastructure or service providers managed by SimplePlainAI. The applicable arrangement depends on the implementation agreed with the client.

If you interact with an agent operated for one of our clients, you should also review that client’s privacy notice or contact the client about its use of your personal data.

3. Personal data we may collect

Depending on how you interact with us or an AI agent, we may collect or process the following categories of information:

• Identity and contact information, including your name, job title, company, email address, telephone number and business contact details.
• Enquiry and relationship information, including messages, form submissions, meeting requests, correspondence, preferences and records of our interactions with you.
• Assessment information, including answers submitted through the AI Competency Report, calculated results and any contact details you choose to provide.
• Agent interaction data, including prompts, messages, chat or messaging transcripts, form responses, attachments, call or meeting records where enabled, and information generated or extracted by an agent.
• WhatsApp information, including your telephone number, profile or business name where available, message content, message status, timestamps and other identifiers or metadata supplied through WhatsApp or Meta services.
• Lead and customer records supplied by a client, including CRM records, account history, contact details, transaction or renewal information and other data required for the agreed workflow.
• Technical and usage information, including IP address, browser and device information, pages visited, referral source, approximate location, interaction events, cookie identifiers and diagnostic logs.
• Commercial and administrative information, including proposal, contract, billing, payment-status and support information. We do not intentionally collect complete payment-card details through our website or AI agents.

Please do not provide passwords, authentication codes, full payment-card information, government identification numbers, medical information or other sensitive data unless it is specifically required and collected through an appropriate process.

4. How we collect personal data

We may collect personal data:

• Directly from you when you contact us, submit a form, complete an assessment, book a call, subscribe to communications or otherwise interact with us.
• Through interactions with an AI agent, including agents operating through websites, email, WhatsApp, CRM systems, spreadsheets and other connected business tools.
• From our business clients when they supply records, instructions, approved information or access required to configure and operate an agent.
• Automatically through cookies, analytics technologies, server logs and similar tools when you use our website.
• From service providers, business partners, public sources and professional networks where collection and use are permitted.

5. Why we collect and use personal data

We may collect, use and disclose personal data for purposes that include:

• Responding to enquiries and arranging discovery calls or demonstrations.
• Producing and displaying an AI Competency Report and following up where contact information has been provided.
• Evaluating potential engagements, preparing proposals, contracting, billing and maintaining business records.
• Configuring, testing, validating, operating, monitoring, maintaining and supporting AI agents.
• Processing enquiries, drafting communications, preparing information, managing follow-ups and performing other workflows instructed by a client.
• Authenticating users, administering accounts and managing permissions where relevant.
• Maintaining security, investigating errors or suspected misuse, preventing fraud and protecting our systems, clients and users.
• Measuring website and campaign performance, understanding how our services are used and improving our website and business operations.
• Sending relevant business communications where permitted and respecting applicable opt-out or withdrawal requests.
• Complying with legal and regulatory obligations, responding to lawful requests and establishing or defending legal claims.

We limit collection, use and disclosure to purposes that a reasonable person would consider appropriate in the circumstances and to purposes that have been notified or otherwise permitted by law.

6. Consent and withdrawal

Where consent is required, we may obtain it expressly or rely on consent that may reasonably be inferred from the circumstances and your voluntary provision of personal data for an identified purpose. We may also process personal data without consent where an exception under applicable law applies.

You may withdraw consent to our collection, use or disclosure of your personal data by contacting hello@simpleplainai.com. We will explain the likely consequences of withdrawal and process the request within a reasonable period. Withdrawal will not affect processing already carried out lawfully and may prevent us from continuing to provide a service or respond to a request.

Where we process personal data only for a client, we may refer your request to that client or assist the client in responding.

7. AI agents and automated processing

Our agents may generate, classify, summarise, extract, rank or otherwise process information using artificial intelligence. The information and instructions supplied by a client can influence an agent’s outputs.

AI-generated outputs may be incomplete, inaccurate or unsuitable for a particular situation. The appropriate level of human review depends on the workflow. We expect clients to maintain human oversight for external communications, decisions materially affecting individuals and other high-impact uses.

We do not use personal data processed for one client to benefit another client. We do not use client personal data to train, fine-tune, test or improve a general or cross-client AI model, product or service unless the client has given separate prior written authorisation and the processing is otherwise lawful.

More information about the limitations and responsible use of our AI agents is available in our AI Service Notice.

8. WhatsApp and business messaging

A SimplePlainAI agent may operate through WhatsApp or another messaging service. In that situation, messages and related information may be processed by the business you are communicating with, SimplePlainAI and the technology providers required to deliver the service.

The business using the agent is responsible for determining why it contacts individuals, providing any required notice, obtaining any necessary consent or other authority, and complying with applicable messaging and marketing requirements.

WhatsApp is a product of Meta Platforms, Inc. Your use of WhatsApp remains subject to the applicable WhatsApp and Meta terms and privacy practices. SimplePlainAI is an independent technology provider. A reference to WhatsApp or Meta does not imply endorsement, certification or an official partnership unless expressly stated.

9. Cookies, analytics and advertising

Our website may use cookies, pixels, local storage and similar technologies to operate the site, remember preferences, understand website use, measure conversions, diagnose problems and assess marketing performance.

We use Google Analytics 4 to collect information about website activity, which may include device, browser, approximate location, referral source, pages viewed and interaction events. We may also use advertising or measurement services when running campaigns. These providers may set or read their own identifiers in accordance with their policies and your browser or device settings.

You can control or delete cookies through your browser settings and may use available provider or device controls. Blocking certain technologies may affect website functionality or the accuracy of preferences and measurement.

10. When we disclose personal data

We may disclose personal data where reasonably necessary to:

• Our employees, founders, contractors and professional advisers who need the information and are subject to confidentiality obligations.
• Technology and service providers supporting hosting, workflow automation, AI processing, email, file storage, analytics, communications, security, scheduling, forms, customer management and business administration.
• The relevant business client when we process enquiries or operate an agent on that client’s behalf.
• A purchaser, investor or successor in connection with a genuine corporate transaction, subject to appropriate safeguards.
• Government bodies, regulators, courts, law-enforcement agencies or other persons where disclosure is required or permitted by law.

The providers used for a particular client deployment depend on the agreed technical architecture. Contractual information about relevant subprocessors and overseas transfers may be supplied to the client through the applicable Data Protection Addendum or implementation documentation.

We do not sell personal data.

11. Overseas transfers

Some service providers may process or store personal data outside Singapore. Where the Singapore PDPA applies, we take reasonable steps to ensure that overseas recipients are bound by legally enforceable obligations or other recognised safeguards that provide a standard of protection comparable to that required under the PDPA, unless an exception applies.

The countries and providers involved may vary according to the service, client configuration and selected deployment. Clients may receive more specific information about their deployment through the applicable agreement, Data Protection Addendum or subprocessor schedule.

12. Security

We use reasonable administrative, technical and physical measures appropriate to the nature and sensitivity of the personal data we handle. Depending on the system, these measures may include access controls, multi-factor authentication, least-privilege permissions, protection of credentials, encryption in transit and at rest, logging, session isolation, patching and confidentiality obligations.

No internet, cloud, messaging or AI service can be guaranteed to be completely secure or uninterrupted. Clients remain responsible for the security of their own accounts, devices, premises, networks and systems that they control.

13. Retention

We retain personal data only for as long as it is reasonably required for the purpose for which it was collected or another legitimate business or legal purpose.

Retention periods depend on factors such as the type and sensitivity of the information, contractual requirements, support and security needs, limitation periods and legal obligations. We cease retention or anonymise or securely dispose of personal data when it is no longer required, subject to lawful retention requirements and ordinary backup cycles.

For personal data processed on behalf of a client, return, deletion and backup handling are governed by the applicable client agreement and Data Protection Addendum.

14. Accuracy, access and correction

We take reasonable steps to keep personal data accurate and complete where it is likely to be used to make a decision affecting an individual or disclosed to another organisation.

You may request access to personal data that we hold about you and information about how it has been used or disclosed, or request correction of an error or omission, subject to applicable legal exceptions. Send requests to hello@simpleplainai.com and include enough information for us to identify you and understand the request. We may need to verify your identity before responding.

Where SimplePlainAI processes personal data only on behalf of a client, the client is generally responsible for handling the request. We may refer the request to that client and assist it as required.

15. Data breaches

We maintain procedures to assess and respond to suspected personal-data breaches. Where we determine that a breach is notifiable under applicable law, we will notify the Personal Data Protection Commission and affected individuals as required.

Where we act as a data intermediary for a client, we will notify and assist the client in accordance with the applicable Data Protection Addendum and legal requirements. The client is generally responsible for assessing and making notifications relating to the personal data it controls.

16. Marketing communications

We may send business communications about SimplePlainAI where you have requested them, consented to receive them or where another lawful basis permits us to do so. You may opt out using the unsubscribe mechanism provided or by contacting hello@simpleplainai.com.

Operational, contractual, security or service-related communications may still be sent where they are necessary to administer an existing relationship or service.

17. Third-party websites and services

Our website and services may contain links to, embed content from or connect with third-party websites and services. Those organisations control their own privacy practices, and their notices apply to information they collect for their own purposes. We encourage you to review those notices before providing personal data.

18. Children

Our website and services are intended for businesses and are not directed at children. We do not knowingly seek to collect personal data from children through our website. If you believe that a child has provided personal data to us inappropriately, contact us so that we can assess and address the matter.

19. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our services, technology, legal obligations or operating practices. The latest version will be published on this page with its effective date. Material changes may be communicated through additional means where appropriate.

20. Contact and complaints

Questions, requests or complaints about this Privacy Policy or our handling of personal data should be sent to:

We will review the matter and respond within a reasonable period. If your concern relates to an agent operated for one of our clients, please identify the relevant business and interaction so that we can direct or investigate the request appropriately.