Privacy Policy

1 Scope of this Privacy Policy

Please read this Policy before submitting any personal information through our website or apps, or before using our Services.

This Policy does not govern all information Easylim may process. Our responsibilities to clients and service providers are governed by a separate Data Protection Addendum, and our obligations to employees by our internal employment policies.

This Policy is part of and governed by our Terms of Use. Any capitalized terms not defined here have the same meaning as in our Terms of Use.

2 What information do we collect?

Depending on your use of Easylim, we collect two types of information: personally identifiable and non-personally identifiable.

3 Why we need your personal data

We do not sell any data, including your personal data. We collect and process personal data only in accordance with applicable data-protection and privacy laws, and only to the extent needed to provide you access to Easylim.

4 How we receive information

• Automatically through use of the Services — when you browse the site and perform actions in the product.
• Device and connection information — the computer, phone, tablet, or other devices you use to access the Services.
• Cookies and tracking technologies — Easylim and our analytics/advertising partners use cookies and similar technologies.
• Logs — non-personal data from our Internet logs: IP addresses, browser types, domain names, and other anonymous statistics.
• From other users — when they submit content mentioning you through the Service.
• From linked services — when you or your admin integrate a third-party service with Easylim.
• From partners — advertising and market-research partners.

5 Your rights

• Opt-out — from (i) direct marketing, (ii) automated decision-making and profiling, (iii) collection of sensitive data, (iv) any new processing.
• Access — to the data we hold about you.
• Changes — request updates or corrections.
• Portability — transfer your data to other providers.
• Erasure — delete data that is no longer relevant.

Contact us via the form on the website with any questions about your personal data.

6 Data transfer and retention

Your data may be transferred, stored, and processed by us and third parties outside the country where you reside, including in the USA.

We retain personal data only as long as reasonably necessary to provide the Services, unless a longer retention period is required by law.

7 Children

The Easylim Service is not intended for children under 16. We do not collect personally identifiable information from such individuals.

8 How we use the information we collect

• Provide a great Easylim experience, operate the business, and improve the product.
• Send a welcome email after account creation and other Easylim-related communications.
• Run statistical analysis of user behavior to improve the Services.

9 Disclosure to third parties

We do not disclose your information to third parties except as described in this Policy:

• Laws and legal rights — in accordance with applicable laws.
• External contractors — independent contractors and service providers that help deliver Easylim.
• Business sale — sale, merger, or transfer of all or substantially all Easylim assets.
• Affiliates — to our corporate affiliates.

10 External links

The Easylim Service may link to other websites and services. Please review the privacy policies of each one carefully.

11 Security

We use physical, electronic, and managerial procedures to protect your information. No method of transmission or storage is perfectly secure, but we work to minimize risk.

12 Do Not Track

We do not respond to browser "Do Not Track" signals.

13 Updating and correcting your data

You have the right to request updates or corrections to your personal information through the form on the website.

14 Changes to this Policy

We may update this Policy from time to time. Please review this page periodically for changes.

15 Google user data and API services

When you connect your Google account to Easylim, we access Google user data through Google APIs to provide calendar synchronization. We request the following OAuth scopes:

• https://www.googleapis.com/auth/calendar.events — read, create, update, and delete calendar events for two-way synchronization between Easylim tasks and your Google Calendar, including RSVP responses.
• https://www.googleapis.com/auth/calendar.calendarlist.readonly — retrieve the list of your calendars so you can choose which to sync.

We request only the minimum scopes necessary to provide the integration features you enable.

We do not:

• sell Google user data to third parties;
• use Google user data for advertising or ad personalization;
• let humans read Google user data, except (a) with your explicit consent for specific data, (b) to comply with applicable law, (c) for security investigations and internal operations with data anonymized or aggregated where possible;
• use Google user data to develop, improve, or train AI/ML models.

15.1 How we store Google data

OAuth refresh and access tokens are stored encrypted at rest using AES-256. We may cache calendar event metadata (identifier, title, start/end time, attendees) to display events without re-fetching every page load. The cache is refreshed on each sync. Data in transit between Easylim and Google APIs is protected with TLS 1.2 or higher.

15.2 Retention and revocation

You can disconnect your Google account at any time in Easylim Settings → Integrations. On disconnection all OAuth tokens are deleted immediately and any cached event data is purged within 30 days. You may also revoke Easylim's access directly in your Google Account at myaccount.google.com/permissions.

To request full deletion of Google-derived data from our systems, contact us through the website form or email [email protected].

16 Contact