Privacy Policy

1. Controller and contact

EasySetup.co is the controller for personal data processed through the service. Correspondence address: 1209 Orange Street, Wilmington, DE 19801, USA. Contact privacy@easysetup.co or use Settings > Privacy & Data after signing in.

2. Data we process

• Account and contact data: name, email, phone, address, language and country.
• Identity, company-formation, ownership, director and application data, including uploaded documents.
• Orders, payments, invoices, discounts, subscriptions and renewal records. EasySetup does not store card numbers or CVV.
• Support messages, notifications, device platform, security events and audit records.
• Keyed hashes of IP addresses, user agents and technical logs required to secure the service.

3. Purposes and legal bases

• Contract: accounts, applications, payments, document delivery, support and renewals.
• Legal obligation: company, tax/accounting, anti-fraud and lawful-authority requirements.
• Legitimate interests: security, error monitoring, abuse prevention, audits and service improvement.
• Consent: optional marketing or similar processing where consent is required. Consent can be withdrawn.

4. Recipients and processors

Data may be shared only as necessary with Stripe, Resend, private object-storage and backup providers, malware scanning and rate-limiting infrastructure, Expo notifications, public registries, authorities and appointed professional advisers. We do not sell personal data to advertising networks.

5. International transfers

Because services are global, data may be transferred outside your country. We use the contractual and technical safeguards required by applicable law and limit provider access by purpose and authorization.

6. Retention

• Company, application, payment and legally required document records: for the applicable obligation, with a default maximum of 7 years.
• Customer documents marked for deletion: queued for permanent deletion after a 30-day recovery period.
• Security and audit records: default 7 years; delivery logs 90 days; processed payment webhook records 180 days.
• Encrypted operational backups: default 30 days.
• Records subject to a legal hold, dispute or fraud review may be retained in restricted form only as long as necessary.

7. Security

Private files use application-layer AES-256-GCM encryption and separately managed storage and backup keys. Uploads are checked for type, size, signature and malware. Authorization, rate limits, security headers, audit trails and backup verification are applied. No internet system can guarantee absolute security.

8. Cookies and local storage

We use storage needed for sign-in, CSRF protection, security and preferences you explicitly select. The app currently uses no advertising or behavioral-tracking cookies. See the Cookie Policy for details.

Cookie Policy

9. Your rights

• Access and receive a portable copy of your data.
• Correct inaccurate data.
• Request erasure, restriction or object where applicable.
• Withdraw consent where processing relies on it.
• Complain to a competent data-protection authority.

10. Exercising your rights

Use Settings > Privacy & Data to download a JSON export immediately and to submit and track erasure, correction, restriction or objection requests. We may request additional verification to protect the account. Requests are handled within the period required by applicable law.

11. Automated decisions

EasySetup does not make decisions with legal or similarly significant effects based solely on automated processing. Security signals may temporarily pause an action for human review.

12. Children

Services are not intended for anyone under 18. Contact privacy@easysetup.co if you believe a child’s data was processed inadvertently.

13. Changes

Material changes will be announced in the app or by registered email. The effective date appears at the top of this page.