Storage model
- All Easy Social accounts use one application and one Postgres database. Row-level security in the database keeps each account's records separate, so an account can only read its own data.
- The application, database, uploaded files, and generated outputs are stored on a virtual server provided by Hostinger in Kuala Lumpur, Malaysia. Property reels are rendered on Airea Digital's own computers in New Zealand.
- Service credentials, such as payment and email keys, are kept in a separate secrets store and are not part of the application's code.
Retention and deletion
Account records are retained while needed to provide the service, meet audit obligations, support users, or satisfy legal and accounting requirements. When you delete your account it is scheduled for deletion, and the account and its records are permanently removed from the live database 30 days later. Personal information that must be kept for legal, tax, dispute, or security reasons is retained only for that purpose. Finished property reels and their download links are kept for 48 hours after the reel is ready, then deleted.
Backups
Each night an encrypted backup of the Easy Social database and stored files is taken on the hosting server, and each day a copy is transferred to a separate encrypted backup store in New Zealand. Backups are kept on a rolling schedule of up to about 12 months and are then deleted.
Data export
Users can request an export of account, profile, generated content references, and service data where legally and technically appropriate. Some settings are directly editable in the app.
Incident response
- Contain suspected incidents by revoking access, rotating credentials, switching off affected features, or isolating affected services.
- Assess what happened, what data is affected, which accounts are affected, and whether serious harm is likely.
- Notify affected people and the Office of the Privacy Commissioner where required by the New Zealand Privacy Act 2020.
- Fix the root cause, record the incident, and update controls or documentation to reduce recurrence.