Privacy Policy

Last updated: February 2026

Eazy Connect ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use our website (eazy-connect.com) and services.

1. Data Controller

The data controller is Eazy Connect, based in Belgium. For any questions regarding this privacy policy, contact us at [email protected].

2. What Data We Collect

We collect data that you provide directly:

Account information: email address, name (when creating an account via email, Google OAuth, or magic link).
Profile data: name, job title, company, bio, phone number, social media links, and uploaded content (avatars, logos) that you add to your digital profile.
Order data: shipping address, payment information (processed securely by Stripe — we never store card details), and order history.
Usage data: click events on profile buttons (anonymous analytics), pages visited, and device information collected automatically.

3. Legal Basis for Processing

We process your data based on:

Contract performance: to create your account, deliver NFC cards, and host your digital profile.
Legitimate interest: to improve our services and provide click analytics on your profile.
Consent: for marketing communications (you can opt out at any time).

4. How We Use Your Data

Your data is used to:

Provide and maintain your digital business card profile.
Process and ship your NFC card orders.
Send transactional emails (order confirmations, shipping updates, card claim links).
Provide click analytics on your profile buttons.
Improve our platform and user experience.

5. Third-Party Services

We use the following third-party services to operate our platform:

Supabase (EU region): database hosting, authentication, and file storage.
Stripe: secure payment processing. Stripe's own privacy policy applies to payment data.
Vercel / our own servers: website hosting.

We do not sell, trade, or rent your personal data to third parties.

6. Data Retention

We keep your data for as long as your account is active. If you delete your account, your profile data and uploaded files are removed within 30 days. Order records are retained for 7 years as required by Belgian tax law.

7. Cookies

We use essential cookies only:

Authentication cookies: to keep you logged in.
Language preference cookie (NEXT_LOCALE): to remember your chosen language.

We do not use third-party tracking cookies or advertising cookies.

8. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

Access: request a copy of the personal data we hold about you.
Rectification: correct inaccurate or incomplete data.
Erasure: request deletion of your personal data ("right to be forgotten").
Portability: receive your data in a structured, machine-readable format.
Restriction: limit how we process your data.
Object: object to processing based on legitimate interest.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

9. Data Security

Your data is stored securely using industry-standard encryption. All connections use HTTPS/TLS. Uploaded files are stored in secure cloud storage with access controls. Passwords are hashed and never stored in plain text.

10. Children

Our services are not intended for children under 16. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or a notice on our website. The "last updated" date at the top reflects the latest revision.

12. Contact

For privacy-related questions or to exercise your rights, contact us at [email protected].