SIMPLEROSE PRIVACY POLICY
Effective Date: July 8, 2026
This Privacy Policy (the “Policy”) describes how SimpleRose Inc., a Delaware corporation with an office at 1017 Olive Street, Suite 800, Saint Louis, MO 63101 (“SimpleRose,” “we,” or “us”), collects, uses, discloses, and safeguards information relating to individuals and organizations (“you” and “your”) who access or use the Services (as defined below). By accessing or using the Services or the SimpleRose website, you acknowledge that you consent to this Policy. If you do not consent to this Policy, do not use the Services.
1. PURPOSE AND SCOPE. This Policy applies to the products and services SimpleRose makes available from time to time, which may include (a) the www.simplerose.com website and related marketing assets; (b) AI-assisted products that help users diagnose, scope, structure, or understand optimization and planning problems; (c) optimization solver products that execute optimization models on behalf of users, including but not limited to managed solver services and SaaS (“Software-as-a Service”) offerings; and (d) related consulting, implementation, and professional services (collectively, the “Services”).
This Policy does not apply to third-party websites, applications, or services that SimpleRose does not own or control, even where such services are linked from or integrated with the Services. When you use a third-party service in connection with the Services, the privacy policy of that third party governs its processing of your information.
2. DEFINITIONS. For purposes of this Policy, the following capitalized terms have the meanings set forth below. Other capitalized terms used in this Policy have the meanings given to them elsewhere in this Policy.
2.1 Account Information. Registration and profile information you provide to access the Services, including without limitation name, business email address, employer, job title, telephone number, and billing information when applicable.
2.2 Personal Information. Information that identifies, relates to, or could reasonably be linked to a natural person, as defined under applicable data protection laws, including without limitation the California Consumer Privacy Act as amended (“CCPA”) and the European Union General Data Protection Regulation (“GDPR”).
2.3 Submitted Content. Information, materials, or data you provide to or upload into the Services, in any form or format, including without limitation (a) text you type, paste, or otherwise enter into the Services, including conversational inputs to AI-assisted products; (b) documents you upload, which may include Portable Document Format (“PDF”) files, Microsoft Word documents, Microsoft PowerPoint presentations, Microsoft Excel spreadsheets, images and diagrams, screenshots, and data tables; (c) optimization model files in any format, including formats such as LP, MPS, and proprietary model definitions; (d) structured problem data submitted through SimpleRose upload templates, comma-separated value (“CSV”) files, JavaScript Object Notation (“JSON”) specifications, and similar structured formats; (e) solver configuration parameters and run settings; and (f) artifacts, solver results, plans, schedules, routes, allocations, reports, and other outputs the Services generate from the foregoing.
2.4 Subprocessor. A third party SimpleRose engages to process information in support of the Services, including without limitation hosting and infrastructure providers, AI model providers, optimization solver providers, analytics providers, payment processors, and support tooling providers.
2.5 Usage Data. Technical and operational information generated through your use of the Services, including without limitation log data, device and browser information, internet protocol address, timestamps, pages visited, features used, solver run metrics, and diagnostic information. Usage Data does not ordinarily include the substantive contents of Submitted Content.
3. INFORMATION WE COLLECT. SimpleRose collects the categories of information described in this Paragraph 3. Not every category applies to every user; the information collected depends on which Services you use and how you interact with them.
3.1 Account Information. When you register for an account, request early access, subscribe to communications, or contact SimpleRose, we collect Account Information you voluntarily provide. We use Account Information to authenticate you, provision the Services, communicate with you about the Services, and for billing and contract administration where applicable.
3.2 Submitted Content. When you use the Services, we collect and process Submitted Content you provide. You control what Submitted Content you provide. Do not upload or submit information you are not authorized to share with SimpleRose. You are responsible for ensuring that your submission of Submitted Content complies with any confidentiality, data protection, intellectual property, or contractual obligations you owe to third parties, including without limitation your employer, your customers, and your suppliers. Where Submitted Content contains Personal Information of individuals other than yourself, you represent and warrant that you have the legal basis and authority to share that information with us for the purposes described in this Policy.
3.3 Usage Data. We collect Usage Data automatically when you access or use the Services. Usage Data helps us operate, secure, debug, and improve the Services.
3.4 Cookies and Similar Technologies. The www.simplerose.com website and certain of the Services use cookies and similar technologies for authentication, session management, analytics, and preference storage. You can control cookies through your browser settings. Blocking or deleting cookies may affect functionality of the Services.
3.5 Communications. When you contact SimpleRose by email, submit a support request, or respond to a survey, we collect the content of your communication and any information you provide in it, along with metadata such as the date, time, and channel of the communication.
4. USE OF INFORMATION.
4.1 Service Delivery and Operations. SimpleRose uses the information it collects to provide, operate, and deliver the Services, including without limitation authenticating users, running AI-assisted sessions, processing Submitted Content, executing optimization models on solver infrastructure, generating artifacts, and returning solver results.
SimpleRose also uses information to communicate with users, including without limitation responding to inquiries, sending transactional messages, and providing service announcements and security alerts.
Where applicable, SimpleRose uses information for administrative purposes, including without limitation invoicing, collections, and tax reporting.
4.2 Service Improvement and Compliance. SimpleRose may use identifiable Submitted Content to reproduce and resolve a specific issue reported by a user.
SimpleRose uses information to secure the Services and prevent fraud, including without limitation detecting and responding to abuse, protecting the integrity of the Services, and preventing unauthorized access. SimpleRose may also use information to comply with applicable law, respond to lawful requests from public authorities, enforce agreements governing the Services, and protect the rights, property, or safety of SimpleRose, its customers, and others.
4.3 Data Sharing Restrictions. SimpleRose does not sell Personal Information. SimpleRose does not share Personal Information with third parties for their marketing purposes. SimpleRose does not share Personal Information for cross-context behavioral advertising.
4.4 Confidentiality of Submitted Content. Except as necessary to provide the Services, including transmission to authorized AI model providers as described below, SimpleRose does not share, repurpose, or disclose identifiable Submitted Content to any customer, partner, or unrelated third party. SimpleRose may use identifiable Submitted Content to improve the Services, including using inputs and outputs from your sessions to improve the quality of our AI-guided discovery process and enhance overall platform performance. SimpleRose may also use identifiable Submitted Content to provide professional services, implementation, support, or other services to the same user or organization that provided SimpleRose with the identifiable Submitted Content, consistent with any applicable services agreement.
5. AI PROCESSING AND SUBPROCESSORS. The Services are delivered using a combination of SimpleRose proprietary technology and third-party infrastructure. This Paragraph 5 describes the principal categories of Subprocessors and the nature of processing each performs.
5.1 AI Model Providers. Certain Services, including AI-assisted products such as Rose Consultant, are powered by large language model technology provided by one or more third-party AI model providers. When you interact with such a Service, Submitted Content and session state necessary to process your request are transmitted to the applicable model provider for processing, and the model outputs are returned to the Services. SimpleRose selects model providers whose commercial terms prohibit the use of API inputs and outputs to train foundation models. You should review the applicable model provider’s current terms for the most accurate description of its processing practices. A current list of AI model providers used by the Services is available on request by contacting SimpleRose.
5.2 Optimization Solver Providers. Certain Services execute optimization models on solver technology developed by SimpleRose and, in some cases, by third parties, including without limitation NVIDIA Corporation in respect of the NVIDIA cuOpt solver. Optimization solvers are deterministic mathematical engines; they do not learn from, retain, or incorporate Submitted Content into any model weights or training data. Submitted Content is processed by the solver solely to compute the requested solution and is handled in accordance with this Policy.
5.3 Hosting and Infrastructure. The Services are hosted on commercial cloud infrastructure operated by one or more third-party hosting providers. Hosting providers process Account Information, Submitted Content, and Usage Data only as necessary to provide hosting, storage, compute, and security services to SimpleRose, and are bound by contractual obligations of confidentiality and data protection.
5.4 Other Subprocessors. SimpleRose engages Subprocessors for analytics, customer support, email delivery, error monitoring, and billing. A current list of material Subprocessors is available on request by contacting SimpleRose.
6. DISCLOSURE OF INFORMATION. SimpleRose discloses information in the following limited circumstances:
- to Subprocessors, as described in Paragraph 5, solely for the purpose of providing the Services to you;
- with your authorization, where you direct SimpleRose to share information with a third party, including without limitation a consulting firm you engage to implement the recommendations or outputs of the Services, or a channel partner through which you access the Services;
- in connection with a business transaction, including without limitation a merger, acquisition, financing, reorganization, or sale of assets, subject to standard confidentiality protections; SimpleRose will provide notice before your information is transferred and becomes subject to a different privacy policy;
- for legal reasons, where SimpleRose reasonably believes disclosure is necessary to comply with applicable law, respond to a lawful request from a public authority, enforce the agreements governing the Services, investigate suspected fraud or abuse, or protect the rights, property, or safety of SimpleRose, its customers, or others; and
- with the organization you represent, where the Services are procured by your organization under a commercial agreement with SimpleRose, in which case your organization may receive information about your use of the Services, including Submitted Content submitted under your organization’s account.
7. DATA RETENTION. SimpleRose retains information for the duration of your account and for a reasonable period thereafter to fulfill the purposes for which it was collected, including to provide the Services, comply with legal and accounting obligations, enforce agreements, resolve disputes, and protect SimpleRose’s legal rights. Submitted Content submitted to AI-assisted products is retained for a reasonable period following session completion to permit access, review, and download by you. Submitted Content submitted to solver products, together with solver results, is retained for a reasonable period following solve completion to permit access, review, and download by you. Usage Data and log data are retained for a reasonable period for operational, diagnostic, and security purposes. Billing records are retained for the period required by applicable tax and financial reporting laws. You may request deletion of Submitted Content at any time by contacting SimpleRose.
SimpleRose will honor deletion requests except where SimpleRose is required or permitted to retain the information for legal, regulatory, or legitimate business purposes, in which case SimpleRose will limit further processing until the retention obligation ends.
8. SECURITY. SimpleRose implements administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction. These safeguards include without limitation encryption of data in transit using transport layer security (“TLS”), encryption of data at rest, access controls based on least-privilege, logging and monitoring, secure software development practices, and periodic review of SimpleRose’s security posture. No method of transmission over the internet or method of electronic storage is one hundred percent secure, and SimpleRose cannot guarantee absolute security. If you believe your account has been compromised or you have identified a security concern, please report this promptly by contacting SimpleRose.
9. INTERNATIONAL DATA TRANSFERS. SimpleRose is headquartered in the United States and primarily processes information in the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States and in other jurisdictions in which SimpleRose or its Subprocessors operate. These jurisdictions may have data protection laws that differ from those in your jurisdiction. Where required by applicable law, SimpleRose puts in place appropriate safeguards for international transfers, including without limitation the European Commission’s Standard Contractual Clauses for transfers from the European Economic Area, the United Kingdom Addendum for transfers from the United Kingdom, and equivalent mechanisms for transfers from other jurisdictions.
10. YOUR RIGHTS. Subject to applicable law and the exceptions set forth therein, you may have rights with respect to your Personal Information, including those described in this Paragraph 10. You may exercise any such right by contacting SimpleRose. SimpleRose will verify your identity before acting on a request and will respond within the time period required by applicable law.
10.1 General Rights. You have the right to (a) request confirmation that SimpleRose processes Personal Information about you and to request a copy of that information; (b) request correction of inaccurate or incomplete Personal Information; (c) request deletion of your Personal Information, subject to SimpleRose’s legal and operational retention obligations; (d) object to, or request that SimpleRose restrict, certain processing activities; (e) request a copy of your Personal Information in a structured, commonly used, machine-readable format; and (f) where SimpleRose relies on your consent to process Personal Information, withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
10.2 California Residents. If you are a California resident, you have the rights set forth in Paragraph 10.1 and the additional rights afforded by the CCPA, including the right to know the specific pieces and categories of Personal Information SimpleRose has collected about you, the sources from which it was collected, the purposes for which it was collected, and the categories of third parties with whom it has been shared, as well as the right to be free from unlawful discrimination for exercising your rights under the CCPA. SimpleRose does not sell Personal Information as that term is defined under the CCPA. SimpleRose does not share Personal Information for cross-context behavioral advertising.
10.3 European Economic Area, United Kingdom, and Switzerland. If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the rights set forth in Paragraph 10.1 and the additional right to lodge a complaint with your local supervisory authority. The legal basis on which SimpleRose relies to process your Personal Information include performance of a contract with you, compliance with SimpleRose’s legal obligations, SimpleRose’s legitimate interests in operating and improving the Services where those interests are not overridden by your rights and freedoms, and your consent where applicable.
11. CHILDREN’S PRIVACY. The Services are intended for business and professional users and are not directed to children under the age of sixteen. SimpleRose does not knowingly collect Personal Information from children younger than sixteen. If SimpleRose becomes aware that it has collected Personal Information from a child younger than sixteen, SimpleRose will take steps to delete that information. If you believe SimpleRose has collected Personal Information from a child younger than sixteen, please report this by contacting SimpleRose.
12. THIRD-PARTY LINKS AND SERVICES. The Services may contain links to third-party websites, tools, and services. SimpleRose is not responsible for the privacy practices of third parties. This Policy does not apply to third-party websites, tools, or services. You should review the privacy notices of any third-party service you access from or through the Services.
13. EXPORT COMPLIANCE. Information you submit to the Services, including Submitted Content, may be subject to United States export control laws, including without limitation the Export Administration Regulations administered by the United States Department of Commerce. You are responsible for ensuring that your use of the Services and your submission of information to the Services complies with applicable export control and sanctions laws. You may not use the Services in, or submit information that originates from or is destined for, any jurisdiction subject to United States export sanctions.
14. CHANGES TO THIS POLICY. SimpleRose may update this Policy from time to time. When SimpleRose makes material changes, SimpleRose will update the Effective Date at the top of this Policy, and by signing in, you acknowledge your acceptance of the changes. Your continued use of the Services after the updated Policy becomes effective constitutes your acknowledgment of the changes. If you do not agree to a material change, you should discontinue use of the Services and contact SimpleRose to request account deletion.
15. GOVERNING LAW AND FORUM. This Policy shall be governed by, construed and interpreted according to the laws of the State of Missouri, without regard to the conflicts of law provisions of any state or jurisdiction. Any action will be brought in the state or federal courts located in the city and county of St. Louis, Missouri. If it is judicially determined that either party may file an action, suit or judicial proceeding in federal court, such action, suit or judicial proceeding shall be filed in the Federal District Court for the District of Missouri. Any legal action in connection with this Agreement must be filed within two (2) years after the cause for such action has accrued.
16. CONTACT. If you have questions about this Policy, wish to exercise any of your rights, or would like to receive a current list of Subprocessors, please submit your request to SimpleRose.
END OF SIMPLEROSE PRIVACY POLICY