privacy policy.

1. Information We Collect

We may collect the following types of information:

• Personal Information: Includes name, email address, company name, job title, phone number, and mailing address.
• Billing Information: While we do not store any credit card information on our systems or web applications, we may collect billing address and transaction details. All credit card processing is securely handled by Stripe, a third-party payment processor.
• Usage Information: IP addresses, device identifiers, browser type, pages visited, emails opened, and links clicked.
• Anonymous Information: Includes cookies, web beacons, and similar tracking technologies.
• Employee Filing Information: Through our ACA reporting applications, we collect information submitted by employers about their employees for the purpose of preparing and submitting IRS Form 1095-C filings. This information may include personal identifiers, employment details, and healthcare coverage information, and is retained in compliance with IRS regulations.

2. How We Use Your Information

We use your information to:

• Provide and improve our services
• Personalize your experience
• Process transactions
• Communicate with you about products, updates, and promotional offers
• Ensure the security of our websites and services
• Comply with legal obligations

3. Legal Basis for Processing

We collect and process your personal data under the following legal bases:

• Your consent
• Performance of a contract
• Legal compliance
• Legitimate interests

4. Sharing and Disclosure of Information

We do not sell, rent, or lease your personal information. We may share your data:

• With our subsidiaries, affiliates, or partners that assist us in providing services (subject to strict confidentiality)
• When required by law, court order, or legal process
• To protect our rights, property, or safety

5. Third-Party Services and International Transfers

We may use trusted third-party services for hosting, analytics, payment processing (e.g., Stripe), and communication. These providers are contractually bound to protect your data and use it solely for agreed-upon purposes. Your data may be transferred to and stored in countries outside your jurisdiction, including the United States, where data protection laws may differ.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Recognize repeat visitors
• Track usage patterns
• Customize content
• Improve website performance

You may disable cookies in your browser settings, though doing so may impact website functionality. To manage Google Ads cookies, visit the Google Ads Settings page.

7. Data Retention

We retain your information only as long as necessary to fulfill the purposes described in this policy, or as required by law.

Employee data submitted by employers for IRS Form 1095-C filings is retained in compliance with IRS requirements and for the benefit and use of the employer. We do not process deletion requests from employees, as the data is owned and managed by the employer. Employers may choose to delete employee data at their discretion. However, once data has been filed with the IRS, the associated 1094 XML data is retained by Cimplx as a permanent record of the submission.

8. Security

We implement technical, administrative, and physical safeguards to protect your data. Access is limited to authorized personnel. Despite our efforts, no method of transmission over the internet is completely secure.

9. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data
• Object to or restrict data processing
• Withdraw consent at any time
• Request data portability

To exercise these rights, contact us using the information below. Please note that if your data was submitted by an employer through our reporting applications, requests must be directed to the employer who controls that data.

10. Children's Privacy

Our websites are not intended for children under the age of 13. We do not knowingly collect personal data from children. If you believe we have collected such data, contact us immediately.

11. Do Not Track (DNT) Signals

We currently do not respond to browser-based DNT signals.

12. Changes to This Privacy Policy

We may update this policy from time to time. Material changes will be posted prominently on our homepage. Please review this policy periodically.

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact: