Privacy Policy

Privacy Policy
Data Compliance & Consent

SimpSocial is committed to compliance with all applicable data privacy and consumer protection laws, including but not limited to:

  • Telephone Consumer Protection Act (TCPA)
  • Telemarketing Sales Rule (TSR)
  • California Consumer Privacy Act (CCPA/CPRA)
  • CAN-SPAM Act
  • Children’s Online Privacy Protection Act (COPPA)

Clients must obtain and maintain express written consent before initiating any automated outreach through SimpSocial (voice, SMS, email, or AI-driven messaging). Consent records must be stored and made available upon request for audit or complaint review. AI communications through Sarah AI are trained to adhere to TCPA guidelines and must only be used with leads that have opted in.

Platform Usage & Compliance Obligations

You agree not to use the platform to:

  • Send marketing messages without documented consent
  • Engage in deceptive or unfair telemarketing practices
  • Contact consumers listed on federal or state Do-Not-Call registries unless exempt
  • Use SimpSocial to impersonate or spoof other businesses
  • Circumvent privacy protections or spam filters via unauthorized means

You are solely responsible for ensuring that the content, timing, and recipients of all outreach comply with applicable laws and your own internal privacy and data use policies.

CRM & Third-Party Integrations

SimpSocial GoCRM may sync with third-party platforms (including CRMs, DMS systems, Meta Lead Ads, Google Ads, CarGurus, Cars.com, etc.). You authorize SimpSocial to:

  • Send and receive data in real-time
  • Tag, disposition, and route leads automatically
  • Store customer data securely in the cloud
  • Trigger automated responses based on configured workflows

You retain responsibility for the legality of the data you import or generate through these integrations.

AI Usage Disclosure

SimpSocial’s Sarah AI may simulate human conversation via SMS, email, and voice. AI-generated responses are transparently labeled in our records and can be reviewed upon request. Clients are expected to disclose automated communication to end-users in compliance with FTC guidance.

Data Privacy & Security

SimpSocial maintains industry-standard encryption and access controls. Data is hosted in secure environments with SOC 2, ISO 27001, or equivalent certifications. SimpSocial does not sell user or lead data.

Payment, Subscriptions & Termination

Payment obligations are outlined in your Master Service Agreement or subscription order. Early termination may result in fees as agreed upon in your onboarding documents.

Jurisdiction

This Agreement is governed by the laws of the State of New York (Nassau County). All disputes shall be resolved by binding arbitration in Los Angeles County, California, unless otherwise required by law.

Facebook & Instagram Data Privacy and User Data Deletion

SimpSocial LLC (“SimpSocial,” “we,” “us,” or “our”) provides customer engagement, lead management, and communication services to businesses through our platform including SimpSocial GoCRM which integrates with Meta platforms such as Facebook and Instagram.

This section explains how SimpSocial collects, uses, stores, and deletes information received through Meta APIs, including Facebook Messenger, Instagram Direct Messages, Facebook Pages, Instagram accounts, and Meta Lead Ads.

1. Facebook and Instagram Information We Collect​

When a Facebook Page or Instagram account is connected to SimpSocial, or when a consumer interacts with a business through Facebook or Instagram, we may receive and process information made available through Meta’s APIs.

Depending on the Meta integration and permissions granted by the business, this information may include:

  • Facebook Page information and identifiers.
  • Instagram account information and identifiers.
  • Page-Scoped User IDs (PSIDs) and other Meta-provided user identifiers.
  • Instagram-scoped identifiers associated with users interacting with an Instagram account.
  • Customer profile information made available through Meta's APIs, such as a profile name or username.
  • Customer message content sent through Facebook Messenger or Instagram Direct Messages.
  • Message timestamps and conversation or interaction information.
  • Media or attachments included in customer messages, where made available through the applicable Meta API.
  • Lead information submitted through Facebook or Instagram Lead Ads, including information such as name, email address, telephone number, and other fields submitted by the user.
  • Information necessary to identify, route, manage, and respond to customer inquiries and leads.

We only request and process Meta data that is necessary for the functionality and services configured by the business using SimpSocial.

2. How We Use Facebook and Instagram Data

SimpSocial uses information received from Meta platforms to provide and operate customer engagement and lead-management services for businesses.

This may include:

  • Receiving and displaying Facebook Messenger and Instagram Direct Messages for authorized business users.
  • Allowing authorized customer service, sales, or dealership personnel to respond to customer inquiries.
  • Maintaining conversation history so authorized users can understand and manage ongoing customer interactions.
  • Receiving and managing leads submitted through Facebook and Instagram Lead Ads.
  • Routing and assigning leads to authorized users or teams.
  • Recording customer interactions and timestamps for customer service and lead-management purposes.
  • Supporting configured automated workflows and customer follow-up (strictly outside of or within Meta's standard 24-hour messaging policy window, and never utilizing the HUMAN_AGENT tag).
  • Providing reporting, analytics, and operational features associated with the business's use of SimpSocial.
  • Maintaining the security, reliability, and functionality of our services.

SimpSocial does not use Facebook or Instagram messaging data for purposes unrelated to providing the services configured by the authorized business customer.

3. How Facebook and Instagram Data Is Shared

SimpSocial does not sell Facebook or Instagram user data.

We do not rent or provide Facebook or Instagram messaging data to third-party marketers or advertisers for their independent marketing or advertising purposes.

Meta data may be made available to authorized users of the SimpSocial account associated with the relevant business, such as dealership personnel, customer service representatives, or other authorized account users, solely to provide the services requested by that business.

We may also use service providers that assist us in operating our platform, such as cloud hosting, database, security, communications, and infrastructure providers. Such providers are permitted to process information only as necessary to provide services to SimpSocial and are subject to appropriate contractual and security requirements.

4. Storage and Security of Facebook and Instagram Data

Meta data processed by SimpSocial is stored in our cloud-based systems and databases used to operate the SimpSocial platform.

We use reasonable administrative, technical, and organizational safeguards designed to protect customer and user information against unauthorized access, disclosure, alteration, or destruction. These safeguards include access controls, authentication mechanisms, encryption where appropriate, monitoring, and other security measures appropriate to the nature of the information.

Access to Facebook and Instagram data is limited to authorized personnel and systems that require access to perform their functions.

5. Data Retention

SimpSocial retains Facebook and Instagram data only for as long as reasonably necessary to provide the applicable services, maintain conversation and lead-management functionality, comply with contractual obligations, resolve disputes, maintain security, prevent abuse, and satisfy applicable legal or regulatory requirements.

Retention periods may vary depending on the type of information, the business customer’s configuration, and applicable legal requirements.

When Facebook or Instagram data is no longer required for these purposes, SimpSocial will delete, de-identify, or otherwise dispose of the information in accordance with our applicable data-retention practices.

6. User Data Deletion Requests

Individuals may request deletion of Facebook or Instagram information that SimpSocial has received and stored in connection with their interactions with a SimpSocial-powered business.

To request deletion:

  • Send an email to support@simpsocial.com.
  • Use the subject line “Facebook/Instagram Data Deletion Request.”
  • Include your name and, if available, the Facebook or Instagram profile information, email address, telephone number, or other information that can help us identify the relevant records.
  • If your request relates to a particular business or dealership using SimpSocial, please include the business or dealership name.
  • We may request additional information reasonably necessary to verify the request and identify the applicable data.
  • After verifying the request, we will process the deletion of applicable personal data in accordance with our legal and contractual obligations and applicable retention requirements.

If certain information must be retained to comply with a legal obligation, resolve a dispute, prevent fraud or abuse, or satisfy another lawful requirement, we may retain that information for the applicable period and delete it when that requirement no longer applies.

7. Revoking Facebook App Access

You can also revoke an application’s access to your Facebook account through Facebook‘s account settings.

Generally, you can do this by:

  • Log in to your Facebook account.
  • Open Settings & Privacy and then Settings.
  • Navigate to Apps and Websites.
  • Locate the applicable SimpSocial application.
  • Select Remove to revoke the application's access.

Removing an application’s access prevents the application from continuing to access information through the permissions that were revoked. Removing access does not necessarily delete information that was previously received and stored by SimpSocial. To request deletion of previously stored SimpSocial data, follow the User Data Deletion Request process above.

Facebook and Instagram may change the location or wording of account settings from time to time. Users should follow the current account-management options provided by Meta.

8. Meta Platform Compliance

SimpSocial processes Facebook and Instagram data in accordance with applicable Meta platform requirements and permissions.

We do not request access to Meta data unless it is necessary for a feature or integration being used by an authorized SimpSocial customer. We use Meta data only for the purposes described in this Privacy Policy and the applicable SimpSocial service.

8.1 Meta Messenger HUMAN_AGENT Tag Compliance

When utilizing Meta’s HUMAN_AGENT message tag across Facebook Messenger or Instagram Direct Messaging, messages sent using this tag are strictly limited to manual, human-agent responses from authorized business personnel for the purpose of resolving an ongoing customer support inquiry.

In compliance with Meta Platform Policy:

  • Human Agent Requirement: Messages sent using the HUMAN_AGENT tag are initiated and sent solely by live human support representatives. The HUMAN_AGENT tag is not used by artificial intelligence systems, automated workflows, bots, marketing triggers, or other automated messaging systems, including Sarah AI.
  • Response Window: Use of the HUMAN_AGENT tag is limited to responding to customer inquiries and providing customer support within the period permitted by Meta Platform Policy, and in no event beyond the applicable maximum 7-day period.
  • Non-Promotional Scope: Messages sent using the HUMAN_AGENT tag must be directly related to resolving the customer's specific support inquiry. They must not contain advertising, promotional offers, marketing campaigns, sales broadcasts, or other promotional content.
  • Human Oversight: SimpSocial requires authorized human personnel to review and send messages using the HUMAN_AGENT tag. Automated or AI-generated messages are not sent using this tag.
9. Contact Us

For questions regarding Facebook or Instagram data, privacy, or a request to delete information, please contact:

SimpSocial LLC
27 Trinity Place Suite 202
New York, NY 10006
Phone: (888) 829-1110
Email: support@simpsocial.com

Please include “Facebook/Instagram Data Deletion Request” in the subject line when requesting deletion of Meta-related data.




No leads were lost. reduced overhead.
Swipe to setup a demo
Swipe to learn more