Privacy Policy

1. Our role: businesses and their clients

Easyology serves two groups. For the businesses that subscribe to our Services (the shops, salons, and studios that use Easyology to run their operations), we act as a data controller for the account and billing information we collect directly from them. For the client and appointment records a business enters into Easyology about its own customers, the business is the controller and Easyology acts as a data processor — we process that information on the business’s behalf and under its instructions. If you are a customer of a business that uses Easyology, please direct requests about your records to that business; we will assist them in responding.

2. Information we collect

• Account information — your name, email address, phone number, business name and type, and the staff accounts you create.
• Client and appointment data — information that businesses enter about their customers, such as names, contact details, service history, notes, and booking details.
• Transaction information — records of services and products sold, amounts, tips, commissions, and receipts. We never store full payment card numbers. See section 4.
• Usage and device data — log data, IP address, browser and device type, and how you interact with the Services, collected to keep the platform secure and reliable.
• Cookies and similar technologies — used to keep you signed in, remember preferences, and understand usage. You can manage non-essential cookies through our cookie banner. See section 7.

3. How we use information

• Provide, operate, and maintain the Services.
• Process bookings, checkouts, commissions, and subscription billing, and send transactional messages such as appointment confirmations and reminders.
• Provide customer support and respond to your requests.
• Secure the platform, prevent fraud and abuse, and debug issues.
• Improve and develop features, and measure how the Services are used.
• Comply with legal obligations and enforce our terms.

We do not sell your personal information.

4. Payments and card data

Card payments are handled entirely by a third-party, PCI-DSS-compliant payment processor. Easyology does not store, process, or transmit full payment card numbers on its own systems. We retain only non-sensitive transaction metadata — such as amount, date, and a masked reference — needed to display receipts and reporting.

5. How we share information

We share information only as needed to run the Services:

• Service providers — trusted vendors who help us operate the platform, including cloud hosting, our payment processor, and SMS/email delivery providers. They may process information only on our instructions.
• Between businesses and their staff — account data is shared with the business and the staff members it authorizes, based on their roles.
• Legal and safety — when required by law, to enforce our agreements, or to protect the rights, safety, and security of users and the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. How we protect information

We use industry-standard safeguards designed to protect personal information, including encryption of sensitive data in transit and at rest, strict tenant isolation so each business’s data is kept separate, role-based access controls, and continuous monitoring. No method of transmission or storage is completely secure, but we work continuously to protect your information and to notify affected parties as required by law in the event of a breach.

7. Cookies

We use strictly necessary cookies to operate the Services (for example, to keep you signed in) and, with your consent, analytics cookies to understand usage. You can accept or decline non-essential cookies using the consent banner, and you can change your choice at any time through your browser settings.

8. Data retention

We retain personal information for as long as your account is active or as needed to provide the Services, and afterward only as required to comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. Account holders can manage much of their information directly in the app. To make a request, contact us using the details below. If your information is held by a business that uses Easyology, we will refer your request to that business and assist them in responding.

10. Children

The Services are intended for businesses and adults. We do not knowingly collect personal information directly from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

11. International data transfers

We operate the Services using cloud infrastructure that may process and store information in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers of personal information.

12. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, make reasonable efforts to provide additional notice through the Services.

13. Contact us

If you have questions about this Privacy Policy or how we handle your information, email us at Info@easyologyus.com.