Privacy Policy
Last updated: June 2026
Introduction
This Privacy Policy explains how undosa LLC ("SimplifyAccess", "we", "our", or "us") collects, uses, stores, and protects personal information when you use our websites, applications, accessibility platform, and related services.
We are committed to transparency, data minimization, and responsible processing of personal information.
By using our services, you agree to the practices described in this Privacy Policy.
Data Controller
The data controller responsible for processing personal data is:
undosa LLC
undosa LLC
8 The Green B
Dover, DE 19901
United States
Notice: admin.simplify-access.com/legal/imprint
Privacy: admin.simplify-access.com/legal/privacy
Website Operation
Purpose
We process technical information necessary to provide, secure, and maintain our websites and services.
Data Processed
- IP address
- Browser information
- Device information
- Operating system information
- Referring website
- Request information
- Technical logs
Legal Basis
GDPR Art. 6(1)(f) – Legitimate Interest
Our legitimate interest is operating secure and reliable online services.
Retention Period
Server logs are generally retained for up to 90 days unless longer retention is required for security investigations or legal obligations.
Processing Locations
- European Union
- United States
Consent Management
Purpose
We use a Consent Manager to record and manage privacy choices relating to optional technologies and services.
Data Processed
- Consent status
- Consent categories
- Timestamp
- Browser identifier
- Technical consent metadata
Legal Basis
GDPR Art. 6(1)(a) – Consent
GDPR Art. 6(1)(c) – Legal Obligation
Retention Period
Consent records are retained as necessary to demonstrate compliance with applicable privacy laws.
Withdrawal of Consent
Users may withdraw or modify their consent at any time through the Consent Manager available on the website.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Google Analytics 4
Purpose
We use Google Analytics 4 to understand how visitors use our website and to improve website performance, usability, and content.
Data Processed
- IP address (subject to Google's anonymization features where applicable)
- Browser information
- Device information
- Pages visited
- Session information
- Usage information
- Approximate geographic information
Legal Basis
GDPR Art. 6(1)(a) – Consent
Retention Period
Data is retained according to the retention settings configured within Google Analytics.
Processing Locations
Google may process data in:
- European Union
- United States
- Other countries where Google operates infrastructure
Recipients
Google LLC
Consent Requirement
Google Analytics is only activated after a user has granted consent through the Consent Manager.
Withdrawal of Consent
Users may withdraw consent at any time through the Consent Manager.
Google reCAPTCHA
Purpose
We use Google reCAPTCHA to protect forms, accounts, and services against spam, abuse, and automated attacks.
Data Processed
- IP address
- Browser information
- Device information
- Interaction information
- Security-related signals
Legal Basis
GDPR Art. 6(1)(f) – Legitimate Interest
Our legitimate interest is protecting our services and users against fraud, abuse, and malicious activity.
Retention Period
Determined by Google according to its own retention policies.
Processing Locations
Google may process data globally through its infrastructure.
Recipients
Google LLC
Customer Accounts
Purpose
We process account information necessary to provide access to the SimplifyAccess platform.
Data Processed
- Name
- Email address
- Password hash
- Company information
- Domain information
- Account preferences
- Subscription information
Legal Basis
GDPR Art. 6(1)(b) – Performance of a Contract
Retention Period
Account information is retained while the account remains active and for any additional period required by applicable law.
Processing Locations
- European Union
- United States
Subscription and Billing
Purpose
We process billing information to provide subscriptions, invoices, payments, and related financial services.
Data Processed
- Name
- Billing address
- Email address
- Subscription information
- Transaction information
- Payment information
Legal Basis
GDPR Art. 6(1)(b) – Performance of a Contract
Retention Period
Financial records may be retained for the period required by applicable accounting, tax, and legal obligations.
Processing Locations
Global infrastructure operated by our payment providers.
Recipients
Stripe, Inc.
Additional Information
Payment card information is processed directly by Stripe and is not stored on SimplifyAccess systems.
Customer Support
Purpose
We process information submitted through support requests and customer communications.
Data Processed
- Name
- Email address
- Support messages
- Attachments
- Communication history
Legal Basis
GDPR Art. 6(1)(b) – Performance of a Contract
GDPR Art. 6(1)(f) – Legitimate Interest
Retention Period
Support records may be retained for up to three years after the last customer interaction.
Accessibility Platform Services
Purpose
The SimplifyAccess platform provides accessibility management, accessibility analysis, accessibility reporting, accessibility settings management, and related accessibility services.
Data Processed
Depending on the services used:
- Account information
- Website domain information
- Website content submitted for analysis
- Accessibility configuration settings
- Accessibility reports
- Accessibility audit results
Legal Basis
GDPR Art. 6(1)(b) – Performance of a Contract
Retention Period
Data is retained while necessary to provide the contracted services and for any applicable legal retention period.
AI-Powered Features (Platform Customers Only)
Important Scope Limitation
The AI-powered features described below are available exclusively to registered platform customers.
The public SimplifyAccess product website does not submit visitor content to OpenAI services.
Purpose
Providing accessibility-related content processing features.
Features
- Plain language generation
- Content simplification
- Accessibility-related content assistance
Data Processed
- Website content submitted by the customer
- Technical request metadata
Data Not Intended for Processing
These services are not intended for processing:
- Payment information
- Account credentials
- Customer financial information
- Website visitor profiles
Legal Basis
GDPR Art. 6(1)(b) – Performance of a Contract
Processing Locations
OpenAI may process submitted content within the United States and other locations where its infrastructure providers operate.
Recipients
OpenAI, LLC
Retention Period
Content is processed only as necessary to provide the requested functionality.
Cookies, Local Storage, and Similar Technologies
We use cookies, local storage, session storage, and similar technologies to:
- Maintain user sessions
- Store accessibility preferences
- Remember user settings
- Record consent choices
- Improve website functionality
- Enable analytics where consent has been granted
- Support security mechanisms
Users may control cookies through browser settings and through the Consent Manager.
Disabling certain technologies may impact website functionality.
International Data Transfers
Some of our service providers operate internationally and may process personal information outside your country of residence.
Where required by applicable law, we implement appropriate safeguards designed to protect personal information during international transfers.
Data Subject Rights
Depending on your location and applicable law, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Delete personal data
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent
- Lodge a complaint with a supervisory authority
Requests may be submitted using our contact information listed below.
Data Security
We implement technical and organizational measures designed to protect personal information, including:
- Encryption in transit
- Access controls
- Authentication systems
- Logging and monitoring
- Security reviews
- Abuse prevention measures
While we take reasonable measures to protect information, no system can be guaranteed to be completely secure.
Children's Privacy
Our services are not directed to individuals under the age of 18.
We do not knowingly collect personal information from children under 18.
If you believe a child has provided personal information to us, please contact us so appropriate action can be taken.
Third-Party Services
Our websites and services may contain links to third-party websites or services.
We are not responsible for the privacy practices of third parties and encourage users to review their privacy policies separately.
Vendors and Subprocessors
We maintain a separate Vendors & Subprocessors page listing our current service providers, infrastructure providers, and subprocessors together with their roles and processing activities.
Summary of Processing Activities
| Processing Activity | Legal Basis | Consent Required |
|---|---|---|
| Website Operation | GDPR Art. 6(1)(f) – Legitimate Interest | No |
| Consent Management | GDPR Art. 6(1)(a) – Consent, GDPR Art. 6(1)(c) – Legal Obligation | Yes |
| Google Analytics 4 | GDPR Art. 6(1)(a) – Consent | Yes |
| Google reCAPTCHA | GDPR Art. 6(1)(f) – Legitimate Interest | No |
| Customer Accounts | GDPR Art. 6(1)(b) – Performance of a Contract | No |
| Subscription & Billing | GDPR Art. 6(1)(b) – Performance of a Contract | No |
| Customer Support | GDPR Art. 6(1)(b) – Performance of a Contract, GDPR Art. 6(1)(f) – Legitimate Interest | No |
| Accessibility Platform Services | GDPR Art. 6(1)(b) – Performance of a Contract | No |
| AI-Powered Features (Platform Customers Only) | GDPR Art. 6(1)(b) – Performance of a Contract | No |
Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
The updated version will be published on this page together with the revised effective date.
Continued use of our services after changes become effective constitutes acceptance of the updated Privacy Policy.
Contact Us
If you have questions regarding this Privacy Policy or the processing of your personal information, please contact us.
undosa LLC
Email: dpo@simplify-access.com
Contact: admin.simplify-access.com/legal/contact
Support: admin.simplify-access.com/support