This Privacy Notice explains what personal information SIM PLC 5000 collects when you visit simplc5000.com, use the app at app.simplc5000.com, join the waitlist, or contact us, and how we use and protect it. We collect only what we need to run the Service, and we do not sell your personal information or use it for advertising.
1. Who we are
The Service is operated by Carlos Garcia, doing business as SIM PLC 5000 as a sole proprietor in Puerto Rico. We are responsible for the personal information described here. Contact: simplc5000@gmail.com.
2. Information we collect
Information you give us
- Account information: your email address, a display name, and your password. Passwords are stored only as a one-way cryptographic hash; we cannot read them.
- Your projects: the ladder programs, tags, names, and descriptions you create in the app.
- Legal acceptances: which version of the Terms of Use and this Privacy Notice you accepted, when, and the IP address and browser information of that request, so we can show what you agreed to.
- Waitlist sign-ups: name, email, your role (for example learner or educator), an optional note, an optional plan preference, and the time and version of your consent to receive launch updates.
- Contact form messages: name, email, role, topic, and your message.
- Billing information (paid plans): handled by our payment processor, Stripe. We receive and store your Stripe customer and subscription identifiers, your plan, subscription status, billing period dates, and limited card details such as brand and last four digits. We never receive or store your full card number or security code.
Information collected automatically
- Sign-in sessions: when you sign in, we store a session record with your IP address, browser user-agent string, and timestamps, and set a session cookie in your browser.
- Abuse prevention: to limit automated sign-in attempts and form spam, we keep short-lived rate-limit records. For the waitlist and contact forms we store only a keyed hash of your IP address, not the address itself. If bot protection is enabled on a form, Cloudflare Turnstile checks your browser for signs of automation.
- Server logs: our hosting provider records standard request information such as IP address, requested URL, time, and browser type to operate and secure the Service.
- Email delivery status: for emails we send, we record the recipient, message type, and delivery status (for example delivered or bounced).
3. How we use information
- To create and secure your account, sign you in, and keep you signed in.
- To store, run, and show your projects and enforce plan limits.
- To process payments, manage subscriptions, and keep required financial records.
- To send service emails, such as password resets, billing receipts and notices, and important changes to our terms.
- To send launch updates to people who joined the waitlist and agreed to receive them.
- To answer your messages and provide support.
- To detect, prevent, and investigate fraud, abuse, security incidents, and violations of our terms.
- To comply with law and respond to lawful requests, and to protect our legal rights.
4. Service providers and sharing
We share personal information only with providers that help us run the Service, only as needed for the purposes above, and under their own privacy and security commitments:
| Provider | What it does |
|---|---|
| Vercel | Hosts the website and app and processes requests and server logs. |
| Turso | Stores the application database. |
| Resend | Sends transactional emails and reports delivery status. |
| Google (Gmail) | Receives our email, including notifications of waitlist sign-ups and contact messages. |
| Stripe | Processes payments and manages subscriptions and invoices. |
| Cloudflare | Provides bot protection (Turnstile) on public forms when enabled. |
We may also disclose information if required by law or legal process, to protect the rights, safety, or property of users, the public, or us, or as part of a transfer of the Service, in which case this notice will continue to apply to your information. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
5. Analytics and advertising
We do not currently use analytics, advertising, or cross-site tracking tools. If we add analytics in the future, we will update this notice and the Cookies and Local Storage page first, and ask for your consent where required.
6. Cookies and local storage
We use only the cookies and browser storage needed to sign you in, remember your theme, and let the app work offline. See Cookies and Local Storage for the full list.
7. Email
Account emails, such as password resets and billing notices, are part of the Service and cannot be turned off while you have an account. Waitlist launch updates are sent only if you agreed to receive them; ask us to remove you at any time by emailing simplc5000@gmail.com, and any marketing email we send will include a way to opt out. We do not send email to addresses entered in the contact form except to reply to your message.
8. How long we keep information
- Account, projects, and legal acceptances: until you delete your account or ask us to delete it.
- Sign-in sessions: expire after 30 days, or earlier when you sign out.
- Waitlist sign-ups: until you ask to be removed, or 12 months after public launch, whichever comes first.
- Contact messages and email delivery records: up to 24 months.
- Rate-limit records: hours to days.
- Billing and transaction records: as long as tax and accounting laws require, even after you delete your account.
- Backups and provider logs: deleted data may remain in backups or provider logs for a limited period until they are overwritten.
9. Security and breach notification
We use reasonable safeguards, including encrypted connections (HTTPS), hashed passwords, access-restricted infrastructure, and rate limiting. No system is perfectly secure. If a security breach affects your personal information, we will notify you and the authorities as required by applicable law, including Puerto Rico Act No. 111-2005, which requires notice to affected Puerto Rico residents and to the Puerto Rico Department of Consumer Affairs (DACO).
10. Your choices and rights
- Access and correction: you can see and change your projects in the app. Email us to request a copy of your personal information or to correct it.
- Deletion: you can delete your account and projects at any time from the Account page in the app. To delete waitlist or contact-form information, email us from the address you used.
- Opting out of updates: email us to leave the waitlist or stop launch updates.
- Privacy signals: because we do not sell or share personal information for advertising, there is nothing further to opt out of; we honor Global Privacy Control signals by default.
Depending on where you live, you may have additional rights under local law. We will respond to requests within 45 days and may need to verify your identity first. We will not treat you differently for exercising your privacy rights.
11. Children and teens
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it. If you believe a child under 13 has given us information, contact us. Teens aged 13 to 17 may use the Service only with a parent or guardian’s permission, as described in the Terms of Use.
12. Where information is processed
We operate from Puerto Rico, and our providers process information in the United States and other countries where they operate. If you use the Service from outside the United States, your information will be transferred to and processed in the United States.
13. Changes to this notice
We may update this notice. The version and effective date at the top of this page show when it last changed. For material changes, we will notify you by email or in the app before they take effect.
14. Contact
For privacy questions or requests, email simplc5000@gmail.com.
Questions about this document? Email simplc5000@gmail.com.