Privacy Policy — EasyDeploy

1. General Information

This Privacy Policy describes the rules for processing personal data of users of the EasyDeploy website and services.

The controller of personal data is EasyDeploy Spółka z o.o., based at ul. Gospodarcza 26, 20-213 Lublin, Poland, entered in the National Court Register (KRS) under number: 9462769900, hereinafter referred to as the "Controller" or "EasyDeploy".

For privacy and data protection matters, please contact the Controller at: [email protected].

Rules for the use of cookies and similar technologies are described separately in the EasyDeploy Cookie Policy.

2. Scope of This Policy

This Policy applies to personal data processed in connection with:

use of the EasyDeploy website,
contact forms, the waitlist, and demo / early access requests,
creating and using a user Account and the administration panel,
logging in via third-party identity providers, in particular Facebook Login (OAuth),
use of free and paid plans, including billing,
correspondence and support communication with EasyDeploy.

3. What Data We Collect

Depending on how you interact with EasyDeploy, we may collect the following categories of data:

Contact and account data — such as first and last name, email address, company name, and job role, provided when signing up for the waitlist, requesting a demo, creating an Account, or contacting us.
Login and identity data via OAuth providers — if you choose to log in or register using Facebook Login or another third-party identity provider, we receive from that provider the data you authorise to be shared, typically your name, email address, profile picture, and a unique account identifier issued by the provider.
Billing data — such as billing address, VAT/tax identifiers, and payment confirmation data, processed for Paid Plans via an external payment operator. EasyDeploy does not store full payment card details.
Technical and usage data — such as IP address, device and browser type, log files, diagnostic data, and information about how the website and Service are used, collected automatically, including via cookies as described in the Cookie Policy.
Support and correspondence data — content of messages, tickets, and other communication you send us, together with any attachments or information you choose to include.

4. Purposes and Legal Basis for Processing

We process personal data for the following purposes and on the following legal bases (Article 6(1) GDPR):

to provide and maintain the website, Account, and Service — necessity for the performance of a contract or to take steps prior to entering into a contract (Art. 6(1)(b)),
to authenticate you when you log in via Facebook Login or another identity provider — necessity for the performance of a contract (Art. 6(1)(b)),
to respond to contact form, waitlist, and demo requests, and to handle support and complaints — necessity for the performance of a contract or our legitimate interest in responding to enquiries (Art. 6(1)(b) and (f)),
to issue invoices and settle payments — compliance with a legal obligation (Art. 6(1)(c)),
to ensure the security, stability, and proper functioning of the website and Service, and to prevent abuse — our legitimate interest (Art. 6(1)(f)),
to send marketing or product communications — your consent (Art. 6(1)(a)), where required by law, which can be withdrawn at any time,
to use analytical cookies for statistical purposes — your consent given via the cookie banner (Art. 6(1)(a)), as described in the Cookie Policy,
to establish, pursue, or defend legal claims — our legitimate interest (Art. 6(1)(f)).

5. Login via Facebook and Other Identity Providers

If you use Facebook Login (or another third-party OAuth provider) to register or log in, that provider acts as an independent data controller of the data it collects on its own platform, and EasyDeploy acts as a data controller for the data it subsequently receives and processes.

We only request the minimum data necessary to create and operate your Account, typically:

your name,
your email address,
your public profile picture,
a unique identifier assigned to you by the provider.

You can review and manage the permissions granted to EasyDeploy at any time in your Facebook account settings, and you can revoke access on the provider's side independently of deleting your EasyDeploy Account.

6. Recipients of Data

Personal data may be disclosed to the following categories of recipients, to the extent necessary for the purposes described above:

hosting and infrastructure providers,
email and communication service providers,
payment operators handling billing for Paid Plans,
analytics providers, such as Google Analytics and Meta Pixel, in connection with analytical cookies,
identity providers, such as Meta / Facebook, in connection with OAuth login,
professional advisors, such as accounting or legal service providers,
public authorities, where required by applicable law.

Where such recipients process personal data on our behalf, we enter into data processing agreements with them in accordance with applicable law.

7. International Data Transfers

Where personal data is transferred outside the European Economic Area in connection with the use of the providers listed above, EasyDeploy applies appropriate safeguards required by law, in particular:

adequacy decisions issued by the European Commission,
standard contractual clauses,
or other lawful transfer mechanisms.

8. Data Retention Period

Personal data is retained for no longer than necessary for the purposes for which it was collected, in particular:

Account and Service data — for the duration of the Account's existence and for the period required to fulfil legal obligations or defend claims afterwards,
billing data — for the period required by tax and accounting regulations,
contact form, waitlist, and demo request data — for the period necessary to handle the request and, where consented to, for marketing communication until consent is withdrawn,
support correspondence — for the period necessary to resolve the matter and for a reasonable period afterwards for accountability purposes.

9. Your Rights

Subject to the conditions set out in applicable data protection law, you have the right to:

access your personal data and obtain a copy of it,
rectify inaccurate or incomplete data,
request erasure of your data ("right to be forgotten"),
request restriction of processing,
object to processing based on our legitimate interest, including for direct marketing,
data portability,
withdraw consent at any time, without affecting the lawfulness of processing before withdrawal,
lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland or another competent supervisory authority.

To exercise any of these rights, please contact us at [email protected].

10. How to Request Deletion of Your Data

You can request deletion of your personal data and your Account, including data received via Facebook Login or another identity provider, at any time by:

sending a request to [email protected] from the email address associated with your Account, with the subject "Data deletion request", or
using the account deletion option in the Panel, where available.

We will confirm receipt of your request and complete the deletion without undue delay, unless we are required or entitled to retain certain data for a longer period under applicable law (for example, accounting records or data needed to establish, pursue, or defend legal claims). Where only partial deletion is possible for this reason, we will inform you which data is retained and why.

Deleting your EasyDeploy Account does not automatically revoke the permissions you granted to EasyDeploy on Facebook or another identity provider's platform — you can manage or revoke those permissions independently in that provider's account settings.

11. Cookies

The website uses cookies and similar technologies. Detailed information on the types of cookies used, their purposes, and how to manage them is available in the EasyDeploy Cookie Policy.

12. Data Security

EasyDeploy applies technical and organisational measures appropriate to the risk in order to protect personal data against unauthorised access, loss, disclosure, or destruction, including access controls, encryption in transit, and limiting access to data to authorised personnel and processors.

13. Automated Decision-Making

EasyDeploy does not make decisions based solely on automated processing, including profiling, which would produce legal effects concerning you or similarly significantly affect you.

14. Changes to This Privacy Policy

The Controller may periodically update this Privacy Policy, in particular in the event of:

changes to applicable law,
changes to the scope of data processed or the tools and providers used,
changes to the operation of the EasyDeploy website or Service.

The current version of the Privacy Policy is always published on the EasyDeploy website, together with the date of its last update.