Privacy Policy

This page describes the personal data the EazyPlan application stores, what it is used for, which service providers receive it, and what happens when you delete it.

The identity and contact details of the operator responsible for this service, the legal basis for each use, and the statements required by applicable law are pending legal review and will be added here. Until then, send privacy questions and requests through the contact form.

Account: your name, email address, password (stored only as a one-way hash), sign-in times, two-factor sign-in settings if you turn them on, your profile photo if you add one, and the language, country, currency, time zone and notification preferences you choose.

Guests: the names, email addresses and replies (attendance, party size, dietary notes, comments) of the people you invite. Guests reply through a personal link and do not need an account.

Technical data: the server writes your IP address to its error log. Counters that limit repeated requests keep your IP address, your account, or (for sign-in and email-address checks) your email address for 15 minutes to 24 hours, depending on the action; a password reset request stores the IP address and browser identification with the request. When error reporting is configured, Sentry receives server errors with request bodies, cookies, tokens and links removed. Where the iOS app is available, it reports crashes and app sessions (start, length and whether it crashed) to Sentry; these are not linked to your account. The application includes no third-party advertising or data-broker integrations. When enabled, registration, password recovery, verification-email resend and contact forms load Cloudflare Turnstile for abuse prevention. Cloudflare receives browser and network signals, including your IP address. The API verifies a short-lived token without forwarding form contents or storing that token. This integration does not request a pre-clearance cookie. Place search and map previews use OpenStreetMap; sample blog covers use Unsplash. These services also receive your IP address. Browser errors are reported to Sentry only after you accept analytics and diagnostics in Cookie Preferences. Reports exclude account context, form contents, request details and session recordings; personal links and email addresses are redacted.

Messages: what you write in the contact form (name, email address, subject, message) and, where vendor inquiries are offered, in them. The contact form takes no attachments.

Planning data: the plans, tasks, budgets, locations, menus, seating, photos and vendor contacts (names, phone numbers, prices) you or your team enter, stored so you and your team can use them.

Optional first-party outcome analytics: if you explicitly opt in during registration or in Privacy settings, we record your account ID, numeric source ID, event type and time for verified signup, first plan, finalized event, provider-accepted invitation, first RSVP and reconciled paid subscription. We do not send these records to an analytics provider.

To run the features you use: store your events, show them to your team, send the invitations and emails you ask for, and record guest replies.

Email: account emails (verification, password reset, security notices), team and guest invitations, and contact-form notifications to the operator go through the configured email provider. An email is recorded as sent only when the provider accepts it.

Troubleshooting and security: error logs and error reports are used to fix problems; rate limits and sign-in records protect accounts from abuse.

AI settings: a provider key you save is stored encrypted and is used to list that provider's models and, when you choose to use your own key, to draft invitation copy. When AI invitation drafting is available and you turn it on (both AI settings and your consent on that invitation), the invitation's title, date and venue are sent to the configured AI provider to draft copy; nothing is sent otherwise.

The legal basis for each of these uses is pending legal review and will be stated here.

Service providers chosen by the operator process data for hosting, the database and file storage, email delivery and error reporting. Ask through the contact form for the current list.

Your team: plans in a shared team are visible to its members according to their roles. Guests open their own invitation through a personal link.

Maps and places: when you search for a place while planning, the text you type is sent from your browser to OpenStreetMap's Nominatim service, and a map preview loads from openstreetmap.org. A saved inquiry remains private in the vendor portal until you explicitly share it with a verified vendor account. Email delivery is a separate action when a verified email route is enabled.

When configured and with analytics consent, Google Analytics receives page views and browser/network information. Google advertising features remain disabled. Its configured page views omit query strings, fragments and personal link tokens. With both analytics and separate marketing consent, Meta Pixel receives public page views (including campaign parameters), browser/network information and advertising cookie identifiers to measure ads. Private workspaces and personal invitation/gallery links are excluded from Meta tracking. Account IDs and form contents are not explicitly sent to either provider. Google Tag Manager also requires analytics consent; its configured tags receive public-page and browser/network information.

Passwords are stored as one-way hashes, saved AI provider keys are stored encrypted, and two-factor sign-in is available.

Application access is scoped to account and team permissions.

No independent security audit is claimed for this release.

Encrypted connections and backups depend on the hosting configuration and are not described here until they are verified.

No online system can guarantee absolute security. Report a security concern through the contact form.

See and correct: you can view and edit your profile, settings, events and guests in the app.

Correction you cannot make yourself, an objection, or a question about how your data is used: send a privacy request through the contact form.

Deletion: delete your account in Settings on the website, or in the iOS app where it is available. Deletion is immediate and permanently removes your profile and your personal plans. Shared teams you own pass to their longest-standing member.

A copy of your data: download a private personal account archive in Settings. For a broader reviewed copy, send a privacy request through the contact form.

Before data is shared or deleted on request, you may be asked to confirm the request from the email address on the account. Which rights apply to you depends on applicable law, which is pending legal review.

The site stores a few cookies and browser-storage items for sign-in, your language, your theme and your cookie choice. The cookie policy lists each one.

Google Analytics cookies are optional and are set only after analytics consent. Advertising cookies are not enabled.

Accept or reject analytics in the cookie banner. You can change your choice using the Cookie Preferences button at any time.

You can delete cookies and site storage in your browser settings; doing so signs you out and resets your language and theme.

Account and event data are kept while your account exists and removed when you delete it, except as described below.

What remains after you delete your account: plans you created in a shared team stay with that team, and team invitations you accepted stay in the team's history with your email address. Contact-form messages and server logs stay until they are removed under a retention schedule that has not been set yet.

Some items you delete in the app are first marked as deleted and kept until a clean-up job removes them permanently. The retention periods for these items, delivery records, contact messages and logs are being decided.

Backup copies can contain deleted data until the backup itself expires.

Optional outcome records are deleted immediately when you turn analytics off or delete your account. A reconciliation job removes stale records and records older than 90 days. Later opt-in does not track earlier activity.

EazyPlan is built for people who organize events. The application does not ask for a user's age.

The minimum age for an account and how data about children is handled are pending legal review.

If you believe a child has created an account, tell us through the contact form.

Use the public contact form for privacy or support questions, and choose a privacy request for a copy, a correction or a deletion of your data.

The service records an inquiry only when operator contact delivery is configured.

A saved receipt does not confirm inbox delivery or an appointment.

No response deadline is promised.