Privacy Policy

1. Overview

SimpleFiber Communications LLC ("SimpleFiber," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you visit simplefiber.com or use any of our internet, voice, security, or managed technology services. By using our services, you agree to the practices described in this policy.

2. Information We Collect

We collect information in the following categories:

• Contact & Account Information: Your name, business name, address, email address, and phone number.
• Payment Information:Billing details required to process payments. Payment card numbers are processed by PCI-compliant third-party payment processors — we do not store credit or debit card numbers.
• Service Usage Data: Bandwidth usage, connection speeds, and network performance metrics needed to deliver and maintain your service.
• Call Records (CPNI): Customer Proprietary Network Information including call detail records associated with your voice service.
• Network Performance Data: Device status, signal quality, and related technical data from equipment we manage on your behalf.
• Website Cookies & Analytics: IP address, browser type, pages visited, referring URLs, and similar data collected through cookies and analytics tools when you visit our website.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services.
• Process billing and payments.
• Deliver customer support. We may record customer support calls for quality assurance and training purposes.
• Manage and optimize our network to ensure reliable performance.
• Develop and improve our products and services.
• Comply with applicable laws and regulations.

4. What We Do NOT Do With Your Information

• We do NOT sell your personal information.
• We do NOT sell your browsing history.
• We do NOT share your data with advertisers.
• We do NOT use your CPNI for marketing purposes beyond your current services.

5. When We Share Information

We may share your information in the following limited circumstances:

• Service Providers: With trusted third parties who help us operate our business, such as payment processors and support tools. These providers are contractually obligated to protect your information.
• Legal Requirements: When required by law, court order, subpoena, or other legal process.
• Safety & Rights: To protect the rights, property, or safety of SimpleFiber, our customers, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of company assets.

6. Cookies & Tracking

We use essential cookies to make our website work properly and analytics cookies to understand how visitors use our site. We use Google Analytics for website traffic analysis. You can manage your cookie preferences through our cookie consent banner or your browser settings.

7. CPNI (Customer Proprietary Network Information)

Federal law protects your Customer Proprietary Network Information, which includes details about your phone calls such as numbers called, call duration, and calling patterns. We use CPNI only to provide and support the services you currently receive from us. We will not use your CPNI for other purposes unless you give us explicit permission.

8. Data Security

We use industry-standard security measures to protect your information, including encryption, access controls, and secure data centers. While we take reasonable steps to safeguard your data, no system is 100% secure, and we cannot guarantee absolute security.

9. Third-Party Subprocessors

SimpleFiber uses third-party service providers ( "subprocessors") to operate and improve our services, including cloud hosting, telecommunications carriers, speech recognition, language model providers, email delivery, payment processing, and analytics. Every subprocessor we engage is bound by contractual terms that:

• Require them to process data only on our documented instructions and only for the scope of the service they provide.
• Require them to maintain confidentiality, security, and privacy standards that meet or exceed applicable law.
• Prohibit them from using customer data for their own purposes, including AI/ML training, unless we have specifically opted into such use on a particular tenant's behalf.

A current list of our subprocessors is available to existing customers on request under our Master Services Agreement. To request the list, email legal@simplefiber.com. We will notify existing customers in advance of any material change to the subprocessor list as required by their contracts.

For a high-level overview of our security posture, data center tier, and infrastructure controls (without naming specific vendors), see our Security Overview.

10. Data Retention

We retain your information for as long as your account is active and for a reasonable period afterward for legal and business purposes. Call records are retained in accordance with FCC requirements. You may request deletion of your data at any time, subject to legal retention obligations.

11. Children's Privacy

Our services are designed for businesses and are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Texas Privacy Rights

If you are a Texas resident, the Texas Data Privacy and Security Act gives you certain rights regarding your personal information, including the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information (subject to legal exceptions).
• Opt out of the sale of your personal data (though we do not sell your data).

To exercise these rights, contact us at privacy@simplefiber.com.

13. California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell your personal information. To exercise your rights, contact us at privacy@simplefiber.com.

14. AI Receptionist — Connected Calendar Accounts

Our AI Receptionist service lets a business customer optionally connect a Google Calendar or Microsoft 365 / Outlook calendar so our automated receptionist can schedule appointments on the business's behalf during phone calls. The business owner initiates this connection from our admin portal; the people who call the business never sign in and never see calendar data.

• What we access.With your authorization, we access your calendar's free/busy availability and the ability to create, update, and delete calendar events. For Google we request only the calendar.events scope plus your basic profile (name and email) to identify the connected account — we do not request your broader calendar settings or any other Google data. For Microsoft we request Calendars.ReadWrite and basic sign-in.
• How we use it.Solely to (1) check availability so we don't double-book, and (2) create or modify the appointment events a caller requests. We do not read the contents of your existing events beyond the busy/free times needed to avoid conflicts.
• How we store it.The access and refresh tokens that authorize this connection are encrypted at rest and stored only to operate the booking feature. We store the connected account's email address for display in your portal.
• What we do NOT do. We do not sell or share calendar data with third parties, use it for advertising, or use it to train artificial-intelligence or machine-learning models.
• Google API Limited Use.SimpleFiber's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Revoking access. You can disconnect a calendar at any time from the Integrations tab in your portal, which deletes our stored tokens. You can also revoke access directly at myaccount.google.com/permissions (Google) or myaccount.microsoft.com (Microsoft).

15. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' notice by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our services after the effective date constitutes acceptance of the updated policy.

16. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: