SimpleCommerceSync is owned and managed by Image in a Box, LLC. SimpleCommerceSync, its affiliated companies, and its third-party service providers ("SimpleCommerceSync") value your privacy. This Privacy Policy (“Policy”) applies to all users of SimpleCommerceSync's website (“SimpleCommerceSync Website Visitors”), and governs data collection and usage on SimpleCommerceSync's website by Image in a Box. This policy applies only to customer and website visitor data collected through our platform and marketing website. It does not apply to human resources (HR) data. For purposes of this Policy, “You” and “Your” refer to SimpleCommerceSync Website Visitors. By using this website, You consent to the data gathering and usage practices described in this Policy.

COLLECTION, USE, AND SECURITY OF YOUR PERSONAL INFORMATION

SimpleCommerceSync wants You to be aware that SimpleCommerceSync automatically collects information about Your computer software and/or hardware, such as, but not limited to IP address, browser type, domain names, access times, and referring website addresses, as well as anonymous demographic information that is not unique to You (“Your Information”). SimpleCommerceSync may use Your Information for the purpose of providing quality service to You, and to understand general statistics regarding the use of its website. Also, SimpleCommerceSync may use this non-personal information to inform You about products and services offered by SimpleCommerceSync.

We store your personal data on our platform indefinitely, allowing you the flexibility to manage and maintain your event-related information for as long as you need. If you decide to remove your data, you can request deletion at any time by contacting support@SimpleCommerceSync.io. Upon receipt of a deletion request, we will promptly remove your data from our systems in compliance with applicable legal requirements.

LEGAL BASIS FOR PROCESSING PERSONAL DATA

We process personal data based on the necessity of a contract. When you sign up for one of our platforms, you enter into a contractual agreement with us to provide services that enable you to connect to both your QuickBooks and HubSpot accounts. The personal data collected is solely used for the execution and delivery of our services as outlined in this agreement. We commit to not using your personal data for any purposes other than those necessary to fulfill our contractual obligations to you.

INTERNATIONAL DATA TRANSFERS

Your personal data is stored and processed in the United States. We are committed to protecting your data with the highest level of security measures. All data in transit is encrypted using TLS 1.3, the most advanced security protocol available. Additionally, our databases are protected with multi-factor authentication and are accessible only by personnel who have been granted limited access rights, ensuring your data remains secure and private.

We may disclose personal information to trusted third-party service providers who assist us in operating our platform, delivering services, and maintaining system security. These third parties are authorized to use your personal data only as necessary to perform the services on our behalf and in accordance with our instructions. Third-party providers include:

Amazon Web Services (AWS) – Cloud hosting and infrastructure
Stripe – Payment processing services
Sentry.io – Application performance monitoring and error tracking
HubSpot – CRM and marketing automation platform

SimpleCommerceSync wants You to be aware that when You fill out any forms on SimpleCommerceSync's website, the information you provide on the forms (“Personal Identifiable Information”) will be used to inform You about products and services offered by Image in a Box.

SimpleCommerceSync does not sell or rent Your Information or Personal Identifiable Information to third parties.

SimpleCommerceSync may keep track of the types of products You view on SimpleCommerceSync's website or have placed in Your online shopping cart on SimpleCommerceSync's website so that SimpleCommerceSync may keep You informed of the latest products and quality improvements SimpleCommerceSync has made to its products.

If you visit another website through a link provided on SimpleCommerceSync's website, SimpleCommerceSync encourages you to review the privacy policies or statements on the linked websites, as SimpleCommerceSync is not responsible for Your privacy on linked websites.

SimpleCommerceSync may amend this Policy in the future. Therefore, SimpleCommerceSync encourages You to revisit this page occasionally so You are informed about SimpleCommerceSync's most recent statements on privacy.

Image in a Box, LLC (doing business as SimpleCommerceSync) is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC). We may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

SimpleCommerceSync's USE OF AUTOMATIC DATA COLLECTION TECHNOLOGIES; OPTING OUT

SimpleCommerceSync employs Google Analytics and Google Adwords on its website and uses Display and Search Remarketing, Audience Demographics and Interests Reporting, and Google Display Network Impression Reporting. to provide general, anonymized information about Your activity on SimpleCommerceSync's website. This information does not provide SimpleCommerceSync with personal information, but it does These services help SimpleCommerceSync understand and better market to its website audience. Google Analytics and Google Adwords do not collect personally identifiable information to share with SimpleCommerceSync or others SimpleCommerceSync will not facilitate the merging of personally-identifiable information with non-personally identifiable information collected through any Google Analytics or Google Adwords without Your consent. To opt-out of Google Analytics visit this site. To opt out of Google Adwords visit the following URLs http://optout.networkadvertising.org/?c=1 and https://www.google.com/settings/ads/plugin.

Additionally, SimpleCommerceSync employs HubSpot and Hotjar on its website. HubSpot is used to collect personal information that you provide about yourself and information about how you navigate our website. Hotjar anonymously collects information about how individual users interact with our website to optimize for usability. Information to opt-out of HubSpot can be found here and Hotjar here.

RIGHTS OF DATA SUBJECTS

As a data subject, you have the following rights under the GDPR:

Right to Access: You have the right to request access to your personal data that we process.
Right to Rectification: You can request correction of inaccurate personal data.
Right to Erasure ('Right to be Forgotten'): You may request the deletion of your personal data, as permitted by law. Following your deletion request, we will also remove your data from our platform, in accordance with HubSpot’s rules for deletion.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
Right to Data Portability: You have the right to receive the personal data you have provided to us, in a structured, commonly used and machine-readable format, and to transmit those data to another controller.
Right to Object: You have the right to object to the processing of your personal data under certain conditions.

To exercise any of these rights, please contact us at support@imageinabox.com (or support@simplecommercesync.com). We are committed to addressing any requests in a timely manner.

CHILDREN UNDER THIRTEEN

SimpleCommerceSync's website is not intended for children under the age of thirteen. SimpleCommerceSync does not knowingly collect personally identifiable information from people under the age of thirteen. If You are under the age of thirteen, you must ask your parent or guardian for permission to use this website. If you believe we might have any information from or about a child under 13, please contact Michelle Givens, Managing Director, at mgivens@imageinabox.com or (256) 886-8269.

DATA BREACH NOTIFICATION PROCESS

In the unfortunate event of a data breach, we will promptly notify affected individuals and relevant authorities within 72 hours of becoming aware of the breach, in accordance with GDPR requirements. Our notification will include details of the breach, the possible impacts on you, and the measures we have taken or will take in response. We are committed to cooperating fully with regulatory authorities to resolve any issues related to the data breach.

SimpleCommerceSync CONTACT INFORMATION

SimpleCommerceSync welcomes your comments or questions about this Policy. If you believe SimpleCommerceSync has not adhered to this Policy or would like your information deleted from SimpleCommerceSync's website storage, please contact support at support@simplecommercesync.com or (256) 886-8269.

EFFECTIVE DATE: JANUARY 25, 2026

LAST UPDATED: JANUARY 25, 2026