Legal

Privacy Notice

Effective September 12, 2026

1. Overview

This Privacy Notice explains how Simply Invent Labs LLC (“Simply Invent Labs,” “we,” “us,” or “our”) handles information when you use Sevloom’s websites, applications, APIs, hosted services, and related features (the “Service”). It does not apply to a separately operated or modified self-managed deployment.

2. Information we collect

Depending on how you use the Service, we may collect:

• Account information: name, email address, authentication identifiers, session information, and access status;
• Workspace and circle information: names, memberships, invitations, roles, settings, and administrative activity;
• Device information: device and app identifiers, device name, platform, app version, push-notification tokens, pairing activity, and delivery state;
• Page information: title, message, severity, source, identifiers, timestamps, delivery events, acknowledgements, and related metadata;
• Notification information: notification treatment requested for a page and related delivery or diagnostic information communicated to the Service. Device permission prompts and notification controls are managed by the operating system; displaying a prompt does not itself mean that the Service receives a record of it;
• API and integration information: API-key metadata, request metadata, configuration, deduplication identifiers, and integration activity. Secret values may be displayed only when created and should be protected by you;
• Support and waitlist information: contact details, requests, messages, and correspondence; and
• Technical information: IP address, browser, operating system, logs, diagnostics, security events, and usage information.

We may receive information directly from you, workspace administrators, other circle participants, connected systems, devices, identity providers, and service providers.

3. How we use information

We use information to provide, authenticate, secure, maintain, troubleshoot, and improve the Service; route and display pages; manage accounts, workspaces, circles, devices, invitations, notification permissions, and Critical Alert settings; record delivery and acknowledgement events; prevent abuse and misuse of urgent-notification features; communicate with you; respond to support requests; enforce our terms; and comply with law.

Critical Alert and delivery records help us operate, secure, troubleshoot, measure, and audit the Service. They do not mean that Sevloom monitors an incident, confirms an emergency, contacts emergency services, or guarantees that a recipient received or acted on a page.

Where applicable data-protection law requires a legal basis, we process information as necessary to perform our agreement with you, comply with legal obligations, or pursue legitimate interests in operating, protecting, and improving the Service, subject to your rights and interests. Where processing requires consent, we rely on that consent. A device notification permission is not blanket consent to unrelated processing.

4. How we disclose information

We may disclose information:

• to recipients, members, administrators, and devices as directed by the Service’s configuration, including the delivery of urgent or Critical Alert notifications selected by an authorized sender;
• to vendors that provide cloud hosting, authentication, networking, notification delivery, analytics, security, and support functions;
• to comply with law or valid legal process, or to protect rights, safety, security, and the integrity of the Service;
• in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets; and
• with your direction or consent.

We do not sell personal information for money. We do not disclose page content for third-party behavioral advertising.

5. Workspace administrators and other users

If you use an organization-managed workspace, its owners or administrators may manage your membership and access information associated with that workspace. Other circle participants may see information necessary for shared paging, such as sender, page, delivery, acknowledgement, and device-related details. Contact the relevant organization about its own privacy practices.

For closed circles, this shared visibility also applies to family members, friends, and other authorized participants. Notification previews may expose page content on a lock screen or connected device according to the recipient’s settings. Recipients may retain, copy, or forward information outside Sevloom; leaving a circle, revoking permissions, or deleting an account does not recall those copies.

Simply Invent Labs determines the purposes and means of processing information used for its own account administration, security, support, and legal obligations. For organization-submitted information processed on an organization’s behalf, the respective roles and responsibilities depend on the processing activity, applicable law, and agreement with that organization. An organization’s own notice may also apply. Organizations that require a data-processing agreement should contact us before submitting information that requires one; this Notice is not a substitute for that agreement.

6. Data minimization and sensitive information

Send only information necessary for the intended team-support or personal-group request, including supplemental urgent security or personal-safety notifications. Do not place passwords, private keys, authentication tokens, financial account data, health information, government identifiers, or other sensitive or regulated information in page content or support requests unless we expressly agree in writing to support that data. A request for help can itself reveal sensitive circumstances: keep it brief and share only necessary details with appropriate recipients.

If you include a location or information about another person in a page, ensure you have authority to share it and that it is necessary for the request. Content you submit is processed as page or support information even if it contains information you should not have included. You are responsible for having a lawful basis and required notices or consents for information you submit about others, including recipients of Critical Alerts. Do not use the Service for covert tracking, coercive monitoring, or unwanted contact.

7. Retention

We retain information for as long as reasonably necessary to provide and secure the Service, maintain required records, resolve disputes, and enforce agreements. Retention depends on the data type, workspace settings, operational needs, and legal requirements. Deletion may not be immediate, and limited copies may remain in backups, security records, or records we must retain by law.

Removing a device or leaving a circle does not necessarily delete historical pages, acknowledgements, or administrative records associated with other participants or an organization. Account deletion, circle removal, and deletion of shared content are different actions. Applicable privacy rights still apply to information we retain; copies held independently by recipients or other operators are subject to their own practices and obligations.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information. No system or transmission method is completely secure, and we cannot guarantee absolute security, availability, delivery, or notification behavior. You are responsible for protecting credentials, API keys, paired devices, notification permissions, and access to your accounts and systems. Do not use a Critical Alert as evidence that an incident was verified or resolved.

9. International processing

The Service and its providers may process information in the United States and other countries. Those locations may have different data-protection laws than your location. Where required, we use appropriate safeguards for cross-border transfers.

Contact us for information about the processing locations and transfer safeguards applicable to your use of the Service, or to request a copy of applicable safeguards subject to necessary redactions. This Notice does not itself establish a transfer mechanism or represent participation in a certification framework.

10. Your choices and requests

You may update certain information through the Service and may leave circles, remove devices, or request account-related assistance where those controls are available. Depending on your location, you may have legal rights to request access, correction, deletion, portability, restriction, or objection. These rights may be subject to exceptions, identity verification, and an organization’s control of workspace data.

To make a privacy request, email [email protected]. We may ask for information needed to verify your identity and authority.

Where we rely on consent, you may withdraw it without affecting the lawfulness of earlier processing. You may control notification and Critical Alert permissions in device settings; turning them off does not itself delete your account or previously shared pages. Where applicable, you may complain to your local data-protection authority and exercise privacy rights without unlawful discrimination. If we process information on an organization’s behalf, we may direct a request to that organization or assist it in responding, as required by law.

11. Children

The Service is not directed to or available for use by children under 13 or below a higher minimum age required by applicable law, including through family circles or paired devices. Older minors may participate only where legally permitted and with required parent or legal-guardian involvement. A circle owner’s invitation or assertion of parental permission does not replace any legally required child-privacy process.

If you believe we have collected information from a child who is not eligible to use the Service, contact us so we can investigate and take the steps required by law, including deletion where required. These restrictions do not transfer Simply Invent Labs’ own child-privacy obligations to parents or circle administrators.

12. Self-managed source code

A person or organization operating a modified or self-managed Sevloom deployment is responsible for that deployment and its privacy disclosures. Simply Invent Labs does not receive information merely because someone uses published source code.

13. Changes and contact

We may update this Notice as the Service or law changes. We will post the revised version and update its effective date, and provide additional notice or obtain consent for material changes where required by law. Questions or privacy requests can be sent to [email protected].