Legal Documents

Our legal commitments
to you.

Everything you need to know about how we operate, how we handle your data, and what we agree to when we work together.

SimpleStack AI Growth Systems · Netherlands · Last updated: January 2026

01
Terms and Conditions
Applies to all SimpleStack AI Growth Systems services · Last updated: January 2026

1. Who we are

SimpleStack AI Growth Systems is a sole proprietorship registered in the Netherlands, providing AI-powered chat and voice assistant services to businesses in the EU and beyond. By purchasing or using our services, you agree to these Terms and Conditions.

2. Services

SimpleStack provides AI assistant services including but not limited to: text chat assistants, voice AI assistants, knowledge base creation, system configuration, hosting, monitoring, and monthly maintenance. The specific services delivered depend on the package selected at the time of purchase.

We reserve the right to modify or update the services offered at any time. Any material changes to an active subscription will be communicated with a minimum of 30 days notice.

3. Payment and setup fees

All packages require a one-time setup fee paid in advance before work begins. Setup fees are non-refundable once work has commenced. Monthly fees are billed from the date your AI assistant goes live.

  • Core package: €149 setup + €97/month
  • Growth package: €379 setup + €197/month
  • Pro package: €697 setup + €297/month

Prices are quoted in euros and are exclusive of VAT where applicable. EU businesses with a valid VAT number may be eligible for 0% VAT. All prices are subject to change with 30 days notice to existing clients.

Monthly fees are fixed at the rate agreed when you subscribe. In the event of a significant increase in AI processing volume or infrastructure costs beyond standard usage thresholds, SimpleStack reserves the right to adjust monthly fees with a minimum of 30 days written notice. Clients may cancel within this notice period without penalty if they do not wish to continue at the revised rate.

4. Promotional pricing

Where promotional discounts are offered (including introductory pricing), these apply to the setup fee only unless otherwise stated in writing. Promotional pricing is available for a limited time and may be withdrawn at any time for new customers. Existing clients on promotional rates will be notified of any changes with 30 days notice.

5. Contract duration and cancellation

All service packages operate on a month-to-month basis with no minimum contract term. To cancel, you must provide 30 days written notice via email to [email protected]. Your service will remain active until the end of the notice period. No refunds are issued for partial months.

Setup fees are non-refundable under any circumstances once work has begun. If you cancel before your assistant goes live, we will refund the setup fee minus any costs already incurred for work completed.

6. Client responsibilities

You agree to:

  • Provide accurate and complete content for training your AI assistant
  • Respond to our requests for content and approvals within 5 business days to avoid delays
  • Ensure that any content you provide does not infringe third-party intellectual property rights
  • Not use the AI assistant for unlawful, harmful, or misleading purposes
  • Inform us promptly of any changes to your business that may affect the accuracy of your assistant

7. Content updates

Each package includes a defined number of content updates per month (1 for Core, 2 for Growth, unlimited minor updates for Pro). A content update covers factual changes to the knowledge base such as updated prices, new services, or revised FAQs. Structural rebuilds or the addition of entirely new content categories are quoted separately.

9. Confidentiality

SimpleStack AI Growth Systems agrees to keep all information provided by the client strictly confidential. This includes but is not limited to: business information, pricing, products and services, customer data, internal documents, system credentials, and any other proprietary information shared during onboarding or in the course of the service relationship.

SimpleStack will not disclose, share, sell, or use client information for any purpose other than building, training, and operating the agreed AI assistant services. All client content is used solely on behalf of that client and is never used to train shared models or shared with other clients.

This confidentiality obligation survives termination of the service agreement and remains in force indefinitely. SimpleStack may only disclose client information where required by law, in which case we will notify the client to the extent permitted by law.

Clients who require a signed Non-Disclosure Agreement (NDA) prior to sharing sensitive information may request one by emailing [email protected]. We will provide a countersigned NDA within 2 business days.

10. Intellectual property

You retain ownership of all content you provide to SimpleStack for training purposes. SimpleStack retains ownership of the systems, tools, and methods used to build and operate AI assistants. Upon termination of services, we will provide you with a copy of your knowledge base document in a standard format upon request.

10. Limitation of liability

SimpleStack provides AI assistant services on a best-effort basis. AI systems may occasionally produce inaccurate or unexpected responses. We are not liable for any direct, indirect, incidental, or consequential damages arising from the use or inability to use our services, including but not limited to loss of revenue, loss of data, or reputational harm.

Our total liability to you for any claim arising from our services shall not exceed the total fees paid by you in the three months preceding the claim.

11. Warranties and disclaimers

We warrant that we will perform our services with reasonable skill and care. We do not warrant that the AI assistant will be error-free, uninterrupted, or that it will meet all of your specific requirements. AI responses are generated automatically and we do not guarantee their accuracy at all times.

12. Governing law

These Terms and Conditions are governed by the laws of the Netherlands. Any disputes arising from these terms shall be subject to the exclusive jurisdiction of the courts of the Netherlands.

13. Changes to these terms

We may update these Terms and Conditions from time to time. Material changes will be communicated to active clients by email with a minimum of 30 days notice. Continued use of our services after that period constitutes acceptance of the updated terms.

14. Contact

LocationNetherlands, EU
02
Privacy Policy
GDPR compliant · EU data storage · Last updated: January 2026
At a glance: We collect only what is necessary. Your data is stored in the EU. We never sell or share it for advertising. You can request deletion at any time.

1. Who we are

SimpleStack AI Growth Systems is the data controller for personal data collected through this website. For data processed as part of AI assistant services deployed for clients, SimpleStack acts as a data processor on behalf of those clients.

2. What data we collect

When you contact us or fill in a form

  • First name and last name
  • Email address
  • Website URL (optional)
  • Any message you include voluntarily

When you book a call

  • Name and email address
  • Appointment date and time preference

When you visit this website

  • IP address (anonymised where possible)
  • Browser type and version
  • Pages visited and time of visit

We do not collect payment card details. These are handled entirely by our payment processor and never pass through our systems.

3. How and why we use your data

  • To respond to your enquiry using the contact details you provided
  • To deliver services you have purchased
  • To send relevant updates where you have given consent
  • To fulfil legal obligations including tax record keeping

4. Legal basis for processing (GDPR Article 6)

  • Consent (Art. 6(1)(a)): For marketing communications and analytics cookies
  • Contract (Art. 6(1)(b)): For delivering services you have purchased
  • Legitimate interests (Art. 6(1)(f)): For responding to direct business enquiries
  • Legal obligation (Art. 6(1)(c)): For tax and financial records

5. How long we keep your data

  • Contact and enquiry data: Up to 24 months from last interaction
  • Client correspondence: Duration of relationship plus 2 years
  • Financial records: 7 years as required by Dutch tax law
  • Analytics data: Aggregated and anonymised only

6. Who we share your data with

We do not sell, rent, or share your data with third parties for advertising purposes. We may share data with:

  • Go High Level (GHL): Our CRM and email platform, used to store contact details and manage communications
  • Calendar booking platform: To facilitate discovery calls
  • Payment processor: To handle setup fee payments securely

All processors are bound by contractual obligations to handle data in accordance with GDPR.

7. International transfers

All personal data is stored and processed within the European Economic Area (EEA). Where any service provider processes data outside the EEA, we ensure Standard Contractual Clauses (SCCs) are in place.

8. Your rights under GDPR

Access

Request a copy of the data we hold about you.

Rectification

Ask us to correct inaccurate or incomplete data.

Erasure

Ask us to delete your data, subject to legal requirements.

Restriction

Ask us to pause processing of your data.

Portability

Request your data in a machine-readable format.

Object

Object to processing based on legitimate interests.

Withdraw consent

Withdraw consent at any time without penalty.

Complain

Lodge a complaint with the Autoriteit Persoonsgegevens.

Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl · +31 70 888 85 00

9. How to exercise your rights

Email us at [email protected] with the subject line "GDPR Data Request." We will respond within 30 days. This service is free of charge.

10. Data security

We apply appropriate technical and organisational measures including encrypted data transmission (HTTPS), access controls, and EU-based infrastructure. In the event of a data breach likely to affect your rights, we will notify the Autoriteit Persoonsgegevens within 72 hours and inform affected individuals without undue delay.

03
Cookie Policy
Last updated: January 2026

1. What are cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and understand how you use the site.

2. Cookies we use

Strictly necessary cookies (no consent required)

  • Cookie consent preference: Remembers whether you have accepted or declined cookies. Stored locally in your browser. Expires when you clear your browser data.
  • Session cookies: Required for basic website functionality. Expire when you close your browser.

Analytics cookies (only with your consent)

  • Where you have accepted analytics cookies, we may collect anonymised data about how visitors use our site. This data is never linked to an individual and is used only to improve our website.

3. Cookies we do NOT use

  • Advertising or retargeting cookies
  • Social media tracking pixels
  • Cross-site tracking of any kind
  • Third-party marketing cookies

4. Managing your cookies

You can change your cookie preferences at any time using the Cookie Settings link in the footer of any page. You can also delete cookies through your browser settings. Note that disabling strictly necessary cookies may affect how the website functions.

5. More information

For more about cookies generally, visit allaboutcookies.org. For questions about our cookie use, contact us at [email protected].

04
Data Processing Agreement
For business clients · GDPR Article 28 compliant · Last updated: January 2026
Who this applies to: This Data Processing Agreement (DPA) applies to all business clients who engage SimpleStack AI Growth Systems to deploy AI assistants that process personal data belonging to their customers or employees. Under GDPR, a written DPA between controller (you) and processor (SimpleStack) is legally required.

1. Definitions

  • Controller: The client business that determines the purposes and means of processing personal data
  • Processor: SimpleStack AI Growth Systems, which processes personal data on behalf of the controller
  • Personal data: Any information relating to an identified or identifiable natural person
  • Processing: Any operation performed on personal data, including collection, storage, use, and deletion
  • GDPR: The General Data Protection Regulation (EU) 2016/679

2. Subject matter and nature of processing

SimpleStack processes personal data on behalf of the client for the purpose of operating AI chat and voice assistant services. This may include receiving, storing, and responding to personal data submitted by the client's end users through the AI assistant.

3. Duration

This DPA is effective for the duration of the service agreement between the client and SimpleStack and terminates automatically upon cancellation of services.

4. Nature and purpose of processing

  • Receiving and processing messages submitted by end users to the AI assistant
  • Storing conversation data required for the functioning of the assistant
  • Forwarding lead information (name, email, enquiry) to the client's inbox or CRM as instructed
  • Maintaining logs for quality assurance and improvement purposes

5. Types of personal data processed

  • Names and contact details (email, phone) submitted by end users
  • Enquiry content and conversation transcripts
  • IP addresses and device information (where applicable)

6. SimpleStack's obligations as processor

SimpleStack agrees to:

  • Process personal data only on documented instructions from the controller
  • Ensure that all personnel with access to personal data are bound by confidentiality obligations
  • Implement appropriate technical and organisational security measures
  • Not engage sub-processors without prior written consent of the controller
  • Assist the controller in responding to data subject requests under GDPR
  • Notify the controller without undue delay upon becoming aware of a personal data breach
  • Delete or return all personal data upon termination of the service agreement
  • Provide all information necessary to demonstrate compliance with GDPR Article 28

7. Sub-processors

SimpleStack currently uses the following sub-processors in the delivery of its services:

  • Go High Level (GHL): CRM, conversation management, and workflow automation. EU data processing available.
  • ElevenLabs: Voice AI processing. Data minimisation applied.
  • Hosting infrastructure: EU-based servers for all data at rest.

The client will be notified of any changes to sub-processors with a minimum of 14 days notice.

8. Data transfers

SimpleStack stores all personal data within the EEA. Where any sub-processor operates outside the EEA, Standard Contractual Clauses (SCCs) approved by the European Commission are in place to ensure adequate protection.

9. Security measures

SimpleStack implements the following technical and organisational measures:

  • Encrypted data transmission via HTTPS/TLS on all connections
  • Access controls limiting data access to authorised personnel only
  • EU-hosted infrastructure with established security certifications
  • Regular review of data handling practices
  • Incident response procedures including 72-hour breach notification to supervisory authority

10. Data subject rights

SimpleStack will assist the controller in fulfilling data subject requests (access, rectification, erasure, portability, restriction, objection) within the timeframes required by GDPR. Requests should be directed to [email protected].

11. Requesting a signed DPA

Business clients who require a countersigned Data Processing Agreement for their own compliance records may request one by emailing [email protected] with the subject line "DPA Request." We will provide a signed document within 5 business days.

SubjectDPA Request
Response timeWithin 5 business days