What we collect
- Account details such as name, email address, phone number, role, password hash, OAuth identity, invite and reset state.
- Profile and brand details such as job title, public contact details, headshot, agency name, logos, colours, website links, social links, and saved tool settings.
- Content entered into the platform, including property listings, campaign details, social content, letter recipients, commission inputs, and generated videos, PDFs, or image assets.
- Information needed to connect and publish through supported social platforms when you choose to use those features.
- Technical records needed to run and secure the service, including session cookies, IP addresses, rate-limit events, login attempts, and audit events.
Payments
Card payments are handled by Stripe Checkout and Stripe Billing Portal. Easy Social does not receive or store full card numbers or CVC values. The app stores Stripe customer and subscription references, subscription status, trial state, and billing-related service messages.
How we use information
- To provide the platform, authenticate users, enforce roles, and keep tenant data separated.
- To generate requested social tiles, social content, property reels, letters, campaign plans, calculations, emails, and download links.
- To support users, troubleshoot issues, prevent abuse, and keep audit evidence for account and security events.
- To manage free trials, subscriptions, invoices, account notices, and security notices where self-serve billing is enabled.
- To meet legal, tax, accounting, and privacy obligations.
Easy Social does not sell personal information. Customer content is not used to train external AI models.
Storage and retention
The current Easy Social host and primary database storage are in New Zealand. Generated files and uploads are stored in the configured Easy Social data directory for the relevant client or tenant. Some providers process limited information overseas to deliver their services.
Active account records are retained while the account is active. After cancellation or deletion, personal information is deleted or de-identified within a reasonable operational window unless it must be kept for legal, tax, dispute, security, audit, or backup reasons.
Disclosure
Information is shared only where needed to run Easy Social, provide support, process payments, deliver email, perform sign-in, generate maps or addresses, or comply with law. The current subprocessors are listed on the subprocessors page.
Your rights
Under the New Zealand Privacy Act 2020, you may request access to, correction of, or deletion/export of personal information Easy Social holds about you. Contact [email protected].
Privacy breaches
If a privacy breach is likely to cause serious harm, Easy Social will notify affected people and the Office of the Privacy Commissioner as required by the Privacy Act 2020.