Privacy Policy

1. Data Controller and Contact Information

For the purposes of GDPR and applicable data protection laws, the User is the Data Controller of the personal data they enter into the Service, and the Provider acts as the Data Processor.

Provider Details:

Company Name: EazyCRM

Headquarters: Str. Batistei, Romania

Email: contact@eazy-crm.com

2. Information We Collect

We may collect and process the following types of data:

a) Information you provide directly

• Name, email address, and contact details for account creation.
• Account login credentials.
• Information entered into the CRM: emails, leads, contact details, custom fields, product information, and email templates.

b) Automatically collected information

• IP address, browser type, operating system, and device information.
• Log data regarding access dates/times, actions performed, and system usage.
• Cookies and similar tracking technologies (see Section 8).

c) Billing information

Payment details are processed securely by Stripe; we do not store full card numbers or sensitive financial data.

3. How We Use the Data

We process personal data for the following purposes:

• To provide and maintain the Service.
• To manage subscriptions, billing, and payments.
• To improve the functionality and security of the platform.
• To communicate with Users, including sending system updates and service-related notifications.
• To comply with legal obligations.

We do not sell, rent, or trade your data to third parties.

4. Legal Basis for Processing (GDPR)

We process personal data based on:

• Contract performance – necessary to deliver the Service you subscribed to.
• Legitimate interest – for improving services and preventing fraud.
• Legal obligation – to comply with tax and accounting regulations.
• Consent – for optional features like marketing communications (you can withdraw consent anytime).

5. Data Sharing and Third-Party Services

We may share personal data with:

• Payment processors (Stripe) – for subscription payments.
• Hosting providers – for secure storage of data.
• Email delivery services – for sending transactional emails.
• Legal authorities – if required by law.

All third-party providers are bound by GDPR-compliant data processing agreements.

6. International Data Transfers

If we transfer personal data outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention

Account data is retained as long as your account is active.

Data entered into the CRM is retained until you delete it or your account is closed.

Backups may be stored for up to 30 days for disaster recovery purposes.

After account deletion, we securely erase or anonymize personal data within 30 days, except where legal retention obligations apply.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Authenticate Users.
• Save preferences and settings.
• Analyze usage to improve our Service.

You can control cookies via your browser settings, but some features of the Service may not function properly if cookies are disabled.

9. Security Measures

We implement industry-standard measures to protect personal data, including:

• Data encryption in transit (HTTPS) and at rest.
• Secure data centers with restricted access.
• Regular security audits and monitoring.

However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Your Rights (GDPR and other laws)

As a User, you have the following rights:

• Right to access – obtain a copy of your personal data.
• Right to rectification – correct inaccurate or incomplete data.
• Right to erasure – request deletion of your data (“right to be forgotten”).
• Right to restrict processing – limit how your data is processed.
• Right to data portability – receive your data in a structured, machine-readable format.
• Right to object – stop processing for certain purposes.
• Right to withdraw consent – for processing based on consent.

To exercise these rights, contact us at contact@eazy-crm.com.

11. Data Processing Agreement (DPA)

For GDPR compliance, we provide a Data Processing Agreement to customers acting as Data Controllers. This agreement outlines our obligations as a Data Processor.

12. Children’s Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

📧 contact@eazy-crm.com