Privacy Policy
Simcha Solutions LLC ("Simcha Solutions," "we," "us," or "our")
1. Scope and where we operate
This Privacy Policy explains how Simcha Solutions LLC collects, uses, and shares personal information in connection with:
- our websites, including simchasolutions.com and simchadbstudio.com (the "Sites");
- our hosted beta sandbox at beta.simchadbstudio.com (the "Sandbox"); and
- our sales, marketing, and support communications.
United States only. Our Sites, Sandbox, and services are intended for businesses located in the United States. They are not directed to, offered to, or intended for individuals located in the European Economic Area, the United Kingdom, or Switzerland, and we do not knowingly collect personal information from individuals in those regions. If you are located in the EEA, the UK, or Switzerland, please do not use the Sites, submit information through our forms, or request access to the Sandbox.
This policy does not cover data inside self-hosted deployments of Simcha DB Studio. When a customer installs and runs Simcha DB Studio in their own environment, we do not host, access, or process the databases, schemas, queries, or credentials that customer connects to the product. That data stays entirely with the customer, who is its controller. See Section 9.
2. Information we collect
Information you give us. When you request beta access, download a gated resource, contact us, or apply to our programs, we collect the information you submit, which may include your name, work or personal email address, company, role, team size, and anything you write in a message or use-case field.
Beta sandbox account data. If you are admitted to the Sandbox, we collect your account details (name, email) and basic usage information needed to operate and support your workspace. Any non-production databases you choose to connect to the Sandbox, and any content you place there, are processed only to provide the Sandbox to you.
Information collected automatically. When you visit the Sites we collect limited technical information such as IP address, approximate location derived from IP, browser and device type, referring page, and pages viewed. We use a privacy-focused analytics service that does not use cookies or build cross-site profiles (see our Cookie & Tracking Notice).
Anti-abuse information. We use a bot-protection challenge on our forms, which processes technical signals to distinguish humans from automated abuse.
Sensitive personal information. We do not intentionally collect sensitive personal information (such as government identifiers, precise geolocation, health, or financial-account information), and we ask that you not submit it through our forms or into the Sandbox.
3. Categories of personal information, sources, purposes, and retention
The following table summarizes the categories of personal information we collect, using the categories defined under California law, along with the sources, purposes, and how long we keep each.
| Category | Examples | Source | Purpose | Retention |
|---|---|---|---|---|
| Identifiers | Name, email address | You; our forms | Respond to requests; operate accounts; communicate | Duration of the relationship plus up to 24 months, then deleted or anonymized |
| Commercial or professional information | Company, role, team size, use case | You | Evaluate requests; qualify and support | Same as identifiers |
| Internet or network activity | IP address, pages viewed, referrer | Automatically from your device | Operate, secure, and improve the Sites; prevent abuse | Analytics kept in aggregate; raw logs a short period |
| Approximate geolocation | Region inferred from IP | Automatically from your device | Confirm US eligibility; security | Not retained beyond the request in identifiable form |
| Account and usage data (Sandbox) | Login and workspace activity | The Sandbox | Provide, secure, and support the Sandbox | Deleted when the beta ends or the account is closed, subject to short backups |
We do not use personal information for automated decision-making that produces legal or similarly significant effects, and we do not sell or share personal information (see Section 5).
4. How we use information
We use personal information to: evaluate and respond to beta access requests and resource downloads; provision, operate, secure, and support the Sandbox; send you the materials, links, or account communications you requested; communicate with you about Simcha Solutions and Simcha DB Studio, including product updates and, where permitted, marketing (you can opt out at any time); operate, protect, and improve the Sites and our services, including preventing fraud and abuse; carry out sales, professional-services, and contracting activities; and comply with legal obligations and enforce our agreements.
5. How we share information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only as follows:
- Service providers who help us operate, listed in Section 6, under written contracts that restrict their use of the data to providing services to us.
- Professional advisors such as lawyers, accountants, and auditors, where necessary.
- Legal and safety disclosures where required by law or to protect our rights, users, or the public.
- Business transfers, in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
6. Service providers
We share personal information only with a small set of reputable United States based or US-available service providers that help us operate, in the following categories:
- cloud hosting, storage, serverless compute, and transactional email;
- bot-protection and security services for our forms;
- website analytics (privacy-focused and cookieless);
- business email and domain services; and
- customer relationship management for leads and communications.
Each is engaged under a written contract that limits its use of the data to providing services to us. Customers who require a current list of named subprocessors may request our Data Processing Addendum, which identifies them.
7. Data location
We are based in the United States and process personal information in the United States. Because we do not offer our services to individuals in the EEA, the UK, or Switzerland, we do not rely on cross-border transfer mechanisms such as Standard Contractual Clauses.
8. Data retention
We keep personal information only as long as needed for the purposes described here and as summarized in the table in Section 3: to respond to your request, to operate your Sandbox account, to maintain our business records, and to comply with legal obligations. When no longer needed, we delete or anonymize it.
9. Self-hosted deployments: our role
Simcha DB Studio is self-hosted software. When you deploy it in your own environment, you determine what databases it connects to and what data it processes, and you are the controller of that data. Simcha Solutions does not receive, host, or have access to it. Our processing of your personal information in that context is limited to the license, support, and business relationship (for example, your contact and license details), not the contents of your databases. For customers who require it, a Data Processing Addendum is available covering any limited processing we perform.
10. Your rights (United States)
Depending on your state of residence, you may have the right to: know and access the personal information we hold about you; correct inaccurate personal information; delete personal information; obtain a portable copy; and opt out of the "sale" or "sharing" of personal information and of certain targeted advertising and profiling. We do not sell or share personal information, and we do not conduct targeted advertising or profiling, so there is nothing to opt out of in those categories. California residents have these rights under the CCPA and CPRA; residents of states such as Virginia, Colorado, Connecticut, Texas, and others have comparable rights under their state laws.
We will not discriminate or retaliate against you for exercising these rights.
11. How to exercise your rights, verification, and appeals
Submitting a request. You may submit a request by emailing contactus@simchasolutions.com with the subject line "Privacy Request," or by using our contact form at simchasolutions.com/contact. You may use an authorized agent where the law allows.
Verification. To protect your information, we will verify your request by matching the details you provide (such as the email address on file) and may ask for additional information reasonably necessary to confirm your identity before we act.
Timing. We will respond within the time your state law requires (generally 45 days, extendable where permitted).
Appeals. If we decline your request, you may appeal by replying to our decision or by emailing contactus@simchasolutions.com with the subject line "Privacy Appeal." We will respond to your appeal within the time your state law requires and explain our decision. If you remain unsatisfied, you may contact your state attorney general.
12. Security
We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit and at rest for data we host, least-privilege access controls, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Children
The Sites and our services are intended for businesses and are not directed to children under 16, and we do not knowingly collect personal information from children.
14. Changes to this policy
We may update this policy from time to time. We will post the updated version with a new "Last updated" date at the bottom of this page and, where appropriate, provide additional notice.
15. Contact us
Simcha Solutions LLC
1163 West Peachtree St NE, Atlanta, GA 30309
Email: contactus@simchasolutions.com
Last updated: July 23, 2026