Privacy Policy for DataEasy
Last updated October 30, 2026 · Template text, to be reviewed before publication.
This policy explains what personal data DataEasy (https://dataeasy.app), operated by [Company legal name], collects, why, and what you can do about it. It covers two situations: you as a DataEasy customer, and the visitors of websites that use DataEasy.
1. Data about our customers
When you create and use an account, we are the controller of:
- Account data: name, email address, profile picture from your sign-in provider, and your preferences.
- Billing data: plan, invoices and payment status. Card details are handled by our payment processor and never stored on our servers.
- Support data: the messages you send us.
- Usage data: how you use the dashboard, to keep the service secure and improve it.
We use this data to provide the service, bill you, answer you, send service emails and, if you agree, occasional product updates (you can unsubscribe at any time). Our legal bases are the performance of our contract with you, our legitimate interests, and your consent where required.
2. Data about website visitors
When a website uses DataEasy, its owner is the controller and we act as processor, under our data processing agreement. The tracking script records:
- pages viewed, referrer, campaign parameters (UTM, ref, via) and custom goals sent by the website;
- browser, operating system, device type and screen size, derived from the user agent and viewport;
- approximate location (country, region, city) derived from the request;
- random identifiers stored in first-party cookies (
dataeasy_visitor_id,dataeasy_session,dataeasy_first_seen) to count unique visitors and sessions; - when the website connects a payment provider, the payments linked to a visitor identifier, which may include the customer's name and email as sent by the provider.
IP addresses are used transiently to apply the website owner's exclusion rules and to derive location; they are not shown in dashboards. Visitors can stop being tracked by blocking cookies or scripts, and should contact the website owner to exercise their rights.
3. Our own website
https://dataeasy.app uses DataEasy itself to measure visits and signups, with the same cookies described above. We don't use advertising trackers.
4. Service providers
We share data only with providers that help us run DataEasy, under contracts that protect it:
- hosting and edge network (e.g. Vercel);
- database and authentication (e.g. Supabase);
- payments (e.g. Stripe);
- transactional email (e.g. Resend).
The current list is kept in our DPA. Some providers may process data outside your country; when data leaves the EEA, we rely on adequacy decisions or standard contractual clauses.
5. Retention
Account data is kept while your account is open and deleted within 30 days of closure, except invoices we must keep for accounting. Analytics data is kept while the website is in your account and deleted when you delete the website or your account.
6. Your rights
Depending on where you live, you can ask to access, correct, export or delete your data, object to or restrict its processing, and withdraw consent. Write to ravasini.aziendale@gmail.com. You can also complain to your local data protection authority.
7. Security
Data is encrypted in transit, access is restricted to what each person needs, and webhooks from payment providers are verified with signing secrets. No system is perfectly secure; we will notify affected customers without undue delay if a breach occurs.
8. Changes
We will post updates here and notify customers by email of significant changes.
Data controller for customer data: [Company legal name], [Registered address]. Contact: ravasini.aziendale@gmail.com.