Privacy Policy

Effective date: October 1, 2026

This Privacy Policy explains how Simplicity USA Inc. ("Company," "we," "us"), collects, uses, discloses, and protects personal information when you access the Sara AI platform, websites, mobile applications, and related services (the "Services"). This Policy applies to U.S. users, who are principally real estate professionals. It also applies to personal information about other people that we hold because it appears in the data our users work with — for example, property owners, occupants, and agents named in MLS or public records — and Section 3 explains how any of those people can ask us to correct or remove information about them. This Policy is accessible at any time from within our applications and on our website.

1. Information We Collect

Account & Profile Data

Name, business email, phone, brokerage affiliation, license number, billing address, and account settings. You can create an account with an email and password, or sign in using a third-party service — Sign in with Apple, Google, or Microsoft — in which case we receive the information you authorize that service to share with us, such as your name and email address. If you use Apple's "Hide My Email" feature, we receive only the private relay email address Apple generates for you.

Payment Data

Payments are handled by our payment processors — Stripe for purchases made on our website, and Apple for in-app purchases made through our iOS app. We do not collect or store full payment card numbers. We receive limited transaction information from our processors, such as subscription status, plan type, and transaction date.

Customer Content

Prompts, chat transcripts, uploaded files, listing details, client names and contact details, generated reports, AI Output, and related metadata.

Usage & Device Data

Log data, IP address, app and browser type, operating system version, device identifiers, push notification tokens, time zone, referring pages, feature use, crash reports, diagnostic data, and cookies/SDK events.

Integrations & Third-Party Data

MLS/IDX data and other data you connect or authorize the Company to access.

Support & Communications

Support messages, feedback, survey responses, and marketing preferences.

We do not intend to collect Sensitive Personal Information such as social security numbers, government IDs, health or biometric data. Please do not submit such data via the Services.

2. How We Use Information

We use the information we collect to:

• Provide, operate, and secure the Services;
• Generate AI Output and reports per your instructions;
• Process subscriptions and payments through our payment processors;
• Send transactional communications such as reports and account notices;
• Send push notifications, where you have enabled them on your device;
• Detect, prevent, and investigate fraud, abuse, and security incidents;
• Personalize features and improve models, prompts, and user experience;
• Provide customer support;
• Comply with law and enforce our Terms;
• Market our Services — you can opt out of marketing at any time.

We collect and use data only for the purposes described in this Policy. We do not use your data for purposes unrelated to providing and improving the Services without your consent.

3. AI Processing; Accuracy; Automated Decisions

We use third-party model providers and infrastructure to process prompts, Customer Content, and context necessary for AI Output generation. By default, we do not allow model providers to use your Customer Content for training or improving foundation models unless you or your organization opt in, or use is limited to safety or abuse prevention.

We may use de-identified, aggregated Service usage data to improve our systems and develop new features. We will not attempt to re-identify de-identified data.

A Note About Accuracy

AI models generate answers by predicting the content most likely to follow from a request and from the data available to them. The most likely content is not always the most factually accurate. For that reason, no one should rely on the factual accuracy of AI Output (as defined in our Terms of Service). AI Output may contain inaccurate, incomplete, or outdated statements about identifiable individuals — including property owners, occupants, and agents named in MLS or public records — and about properties themselves.

Correcting Inaccurate Information

If you believe that AI Output or information held in the Services contains inaccurate personal information about you, you may ask us to correct or remove it by writing to support@onesimplicity.com, whether or not you have an account with us. To protect personal information from unauthorized access or change, we may ask you to verify your identity before we act on a request; if we cannot verify it, we will tell you and will not be able to honor the request. We will use commercially reasonable efforts to correct or remove the information, taking into account its nature and the purpose of processing it, and we will respond within 45 days, which we may extend once by a further 45 days where applicable law permits. Where information cannot be corrected inside a model, we may instead suppress or remove the affected output.

Automated Decision-Making

The Services generate analyses, rankings, and estimates at the direction of a licensed real estate professional, who reviews them and is the decision-maker. We do not use AI Output or profiling to make any decision about a consumer's access to housing, credit, insurance, or tenancy, and our Terms prohibit our users from using AI Output to make or materially determine such a decision without professional review, or from providing it to a lender, insurer, appraiser, or consumer reporting agency for use in one. We do use automated processes to administer accounts and to detect and prevent fraud, abuse, and security incidents.

4. Sharing of Information

We share information with:

• Service Providers/Processors — for hosting, storing, analyzing, sending email/SMS, processing payments (e.g., Stripe), and providing AI model inference, subject to contractual confidentiality and security obligations.
• Your Organization — if you use an organizational account, your admins may access usage metrics and certain content per organizational settings.
• Third Parties You Authorize — such as MLS/IDX, CRM, or email platforms you connect.
• Legal and Safety — when required by law, subpoena, or to protect rights, safety, and security.
• Business Transfers — in connection with a merger, acquisition, or asset sale.

Any third party with whom we share user data — including service providers, analytics tools, and third-party SDKs, as well as any parent, subsidiary, or related entity with access to user data — is required to provide the same or equal protection of your data as stated in this Privacy Policy.

We do not sell personal information or share it for cross-context behavioral advertising as defined under applicable state privacy laws.

5. Cookies and Tracking

We use technical cookies and similar technologies only for authentication, analytics, and functional features such as share links within the platform. We do not use marketing or retargeting cookies outside the platform. You can control cookies through your browser settings; some functions may not work without essential cookies.

Our mobile applications do not "track" you as defined by Apple's App Tracking Transparency framework: we do not link data collected from our apps with third-party data for advertising purposes, we do not share your data with data brokers, and we do not use the Apple Advertising Identifier (IDFA).

6. Mobile Applications

Device Permissions

Our mobile apps may request access to device features such as notifications, the camera, or your photo library (for example, to upload listing photos or documents). Each permission is optional, is requested through your operating system's standard prompt, and can be granted or revoked at any time in your device settings.

Push Notifications

With your permission, we send push notifications about your account, reports, and Service activity. You can disable push notifications at any time in your device settings or in-app notification preferences.

Crash Reports and Diagnostics

We collect crash logs and performance diagnostics from our apps to identify and fix problems. This data is used only for troubleshooting and improving app stability.

App Store Purchases

If you subscribe through Apple's in-app purchase in our iOS app, Apple processes your payment and collects data under its own terms and privacy policy. We receive only the subscription status information needed to provide the Services.

7. Data Retention and Deletion

• Chat history, reports, and artifacts: until you delete them or up to 24 months after account inactivity.
• System logs: 12 months.
• Backups: 30 days, then securely deleted.
• Support and billing records: as required by law.

Account Deletion

You can permanently delete your account and associated personal data at any time directly within the Services (Settings → Delete Account) — including from within our mobile apps — or by emailing support@onesimplicity.com. Account deletion removes your profile, Customer Content, and associated personal data within 30 days, with residual copies purged from backups within a further 30 days. We may retain limited records where required by law (for example, billing and tax records) or to resolve disputes and enforce our agreements.

8. Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of your data, including encryption in transit and at rest, access controls, and monitoring. If we become aware of a data incident materially affecting your information, we will notify you within 96 hours of discovery, as required by applicable law.

9. Your Choices; Revoking Consent

Access, Correction, Deletion

You may access, update, or delete certain information from your account settings, delete your account entirely as described in Section 7, or contact support@onesimplicity.com. We may retain limited information as permitted by law.

Revoking Consent

You may revoke consent to optional data processing at any time: withdraw device permissions in your device settings, disable push notifications, disconnect third-party integrations from your account settings, opt out of marketing communications, or delete your account. Revoking consent does not affect the lawfulness of processing that occurred before revocation.

Marketing Preferences

You may opt out of marketing emails using unsubscribe links or by contacting us. Transactional messages will continue.

Global Privacy Control

We respect GPC browser signals indicating your preference to opt out of data sharing.

10. Children's Privacy

The Services are not directed to or intended for children under 13 (or 16 where applicable). We do not knowingly collect or solicit children's personal information. If we become aware that a child under 13 has registered or provided personal information, the account will be promptly suspended or deleted with associated data removal per applicable law. Parents or guardians may contact support@onesimplicity.com to request deletion.

11. State Privacy Rights

Depending on your state (including California, Colorado, and Florida), you may have rights to know, access, delete, or correct your personal data. To exercise these rights, contact support@onesimplicity.com. We will not discriminate against you for exercising your privacy rights.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Material changes will receive in-app notification. Continued use of the Services constitutes acceptance of the updated Policy.

13. Contact Us

For privacy questions or to exercise your rights:
Simplicity USA Inc.
Mailing address: 3000 El Camino, Palo Alto, CA 94306
support@onesimplicity.com