Privacy Policy

Easeinbiz Technologies ("we," "our," or "us") is committed to protecting your personal data. This Privacy Policy explains what information we collect when you use the Easeinbiz SaaS platform, how we use it, who we share it with, and the rights you have over your data. By creating an account or using our platform, you agree to the practices described in this policy.

1. Information We Collect

A. Account & Identity Information

When you sign up or manage your organization:

Full name, email address, and password (hashed)
Organization name, industry, and team size
Role within your organization (owner, admin, staff, client)
Profile photo (if provided)
How you found us (onboarding survey)

B. Billing & Payment Information

When you subscribe to a paid plan:

Payment card details — processed and tokenized by Paystack. We do not store raw card numbers.
Billing address and transaction history
Subscription plan, billing cycle, and renewal dates
Wallet balance and virtual account details (where applicable)

C. Platform Usage Data

As you use the platform, we collect:

Tasks, projects, assignees, comments, and deadlines you create
Client records, leads, forms, and form responses
Campaign data, content items, and approval workflows
Finance records: sales, invoices, expenses, payroll runs
Files and media uploaded to the platform (stored securely in Supabase Storage)
Analytics data you connect (social media metrics, Google Ads, ecommerce)

D. Automatically Collected Data

IP address and approximate geolocation (country/city level)
Browser type, operating system, and device information
Pages visited, features used, time spent, and clickstream data
Session tokens and authentication timestamps
Error logs and performance diagnostics

2. How We Use Your Information

Service Delivery — To provide, maintain, and improve the Easeinbiz platform and all its features.
Account Management — To create and manage your account, workspaces, and team memberships.
Billing & Subscriptions — To process payments via Paystack, manage plan changes, and send invoices.
Customer Support — To respond to your inquiries, resolve disputes, and troubleshoot issues.
Security & Fraud Prevention — To detect and prevent unauthorized access, abuse, or fraudulent activity.
Product Improvement — To analyze usage patterns and improve platform performance and features.
Communications — To send service emails (password resets, billing receipts, feature updates). Marketing emails are sent only with your consent and you can unsubscribe at any time.
Legal Compliance — To fulfill obligations under Nigerian law (NDPR, FIRS tax records, CAMA).

3. Legal Basis for Processing

Contract: Processing necessary to deliver the service you subscribed to.
Legitimate Interests: Security monitoring, fraud prevention, and product analytics.
Consent: Marketing communications and optional cookies. Withdrawable at any time.
Legal Obligation: Retention of financial records as required by Nigerian law.
NDPR (Nigeria): All processing complies with the Nigeria Data Protection Regulation 2019 and the NDPR Implementation Framework.
GDPR (EU/UK users): For EU/UK-based users, we apply GDPR-equivalent protections including lawful basis, data subject rights, and DPA contracts with processors.

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We share data only with:

Legal & Regulatory Disclosure

We may disclose your data to law enforcement, regulators, or courts when required by law, a court order, or to protect the rights, property, or safety of Easeinbiz, our users, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to the same privacy protections.

5. International Data Transfers

Easeinbiz serves businesses primarily in Nigeria and Africa. Your data is stored on Supabase infrastructure hosted on AWS servers. Data may be processed in jurisdictions outside Nigeria. We ensure appropriate safeguards are in place, including:

Data Processing Agreements with all international processors
Encryption in transit (TLS 1.2+) and at rest (AES-256)
Compliance with NDPR Article 2.6 on cross-border data transfers
Standard Contractual Clauses for EU/UK data transfers where applicable

6. Data Retention

Account data: retained while your account is active, and for 30 days after deletion.
Billing & financial records: retained for 7 years in compliance with Nigerian financial regulations.
Platform content (tasks, campaigns, leads, etc.): retained for the duration of your subscription plus 30-day grace period.
Support communications: retained for 2 years.
Usage logs and analytics: retained for 12 months.
Marketing preferences: retained until you unsubscribe or request deletion.

After retention periods expire, data is securely deleted or irreversibly anonymized.

7. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your account and personal data (subject to legal retention obligations).
Portability: Request your data in a structured, machine-readable format (JSON/CSV).
Restriction: Request that we limit processing in specific circumstances.
Objection: Object to processing based on legitimate interests.
Opt-out: Unsubscribe from marketing emails at any time via the unsubscribe link or by emailing support@easeinbiz.com.

To exercise any of these rights, email us at support@easeinbiz.com with the subject line "Data Rights Request." We respond within 30 days.

8. Cookies & Tracking

We use cookies and similar technologies to operate and improve the platform. See our full Cookie Policy for details.

Essential cookies: required for authentication, session management, and security.
Analytics cookies: help us understand how users interact with the platform (e.g., PostHog).
Preference cookies: remember your settings and preferences.

You can manage or disable non-essential cookies through your browser settings. Disabling essential cookies will affect platform functionality.

9. Data Security

We apply industry-standard technical and organizational measures to protect your data:

TLS encryption for all data in transit
AES-256 encryption for data at rest (Supabase/AWS)
Row-Level Security (RLS) policies — users can only access data within their own organization
Multi-factor authentication (MFA) support
Regular security reviews and access audits
Strict access controls — only authorized personnel can access production data

No system is 100% secure. In the event of a data breach affecting your rights, we will notify you within 72 hours as required by NDPR and applicable law.

10. Children's Privacy

Easeinbiz is a business platform intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that a minor's data has been provided, we will delete it immediately. If you believe this has occurred, contact us at support@easeinbiz.com.

11. Third-Party Links

The platform may include links to third-party websites, integrations, or services. We are not responsible for the privacy practices of those third parties. We recommend reviewing their privacy policies before sharing personal information with them.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in the law, our platform, or our data practices. We will notify you of material changes via email or an in-app notification at least 14 days before they take effect. The "Last Updated" date at the top of this page always reflects the most recent revision.

Questions about this policy?

Reach our team at support@easeinbiz.com or visit www.easeinbiz.com. We respond within 2 business days.