Privacy

SCOPE

SimpleStates is operated personally by an individual and is not a separate corporation. This policy covers the SimpleStates website, purchases and artifact recovery, the StateMirror AI Developer Plugin, and StateMirror Core. These have separate data flows. Core is self-hosted software; its operator controls its deployment and the evidence stored there.

DEVELOPER PLUGIN

The StateMirror AI Developer Plugin is a skills-only package of instructions, reference documents, and local helper scripts. It has no dedicated MCP server, hosted SimpleStates service, plugin authentication, or SimpleStates-operated telemetry endpoint. It is used within the developer's chosen AI or developer environment, which may be hosted or local. The plugin does not automatically send project files or application evidence to SimpleStates.

A developer may choose to use a helper in application code to submit selected evidence to a separately configured StateMirror Core endpoint. That endpoint is controlled by its operator, not SimpleStates. The AI or developer host may process prompts, project files, and generated content under its own service and privacy terms.

STATEMIRROR CORE

StateMirror Core is self-hosted software that preserves application-submitted evidence. Its operator controls the Core deployment, storage, access, and retention. Integrity verification checks payload, hash, and chain integrity; it does not establish that evidence is factually true, complete, or accurate, or that an application decision was correct. Applications remain responsible for their own state, decisions, and actions.

WEBSITE AND SUPPORT

Vercel hosts the SimpleStates website. Vercel Web Analytics is not enabled for the production project as of this policy's effective date, and the website application has no separate client-side analytics integration, login system, or browser-storage implementation. Vercel and related hosting or security services may process request information to deliver and protect the site and operate their services.

If you contact simplestateshelp@gmail.com, the sender's and recipient's email providers process the message and its contents. Support correspondence may be retained as reasonably necessary to respond, maintain operational records, and meet applicable obligations.

PURCHASES AND RECOVERY

When you start a purchase, the website sends checkout information to Stripe, including the selected product and its metadata, price, currency, and the email address if provided. Stripe Checkout handles payment information. Checkout is configured to offer tax-ID collection. Stripe sends payment events to the website, which checks their signatures and records the complete event payload in the purchase ledger. The payload may include additional information supplied through Checkout.

The ledger stores purchase and fulfillment details such as Stripe event, checkout session, and payment-intent identifiers; purchase email; product, artifact version, amount, currency, and payment status; and an artifact grant reference used for delivery and recovery. To recover a purchase, provide the purchase email and Stripe Checkout Session reference. The website compares them with the ledger and, if they match, returns a link to the purchased file.

A temporary signed download URL may expire. That does not by itself remove the purchase grant or ledger record. The website does not currently apply automatic expiration to purchase grants.

SERVICE PROVIDERS

SimpleStates uses Vercel for website hosting, Stripe for checkout and payment events, Neon PostgreSQL for the purchase ledger, Cloudflare R2 for artifact files, and Gmail for support correspondence. Each provider handles information under its own terms and privacy practices.

RETENTION AND PRIVACY REQUESTS

Purchase and fulfillment records may be retained as reasonably necessary to complete purchases, deliver and recover products, maintain accounting and transaction records, prevent fraud and abuse, and meet applicable legal obligations. Website application code does not currently schedule automatic deletion of purchase events, orders, artifact grants, or delivery-failure records. We do not promise a fixed retention period. Provider-controlled logs, backups, and records are subject to the relevant provider settings and practices.

Send privacy inquiries and requests concerning personal information to simplestateshelp@gmail.com. Requests are reviewed individually. We may verify that a request relates to you and will handle rights that apply. Some transaction information may need to be retained for the purposes described above or as required by applicable obligations.

CONTACT

For privacy questions or requests, contact SimpleStates at simplestateshelp@gmail.com.