Privacy Policy

We collect personal information you and your organisation provide and that is generated through use of the service, including:

• Account & identity: name, email, password (stored hashed), role, and organisation details.
• Business data you enter: clients, sites, jobs, quotes, invoices, purchase orders, timesheets, employee and subcontractor records, pay details, and related records.
• Payment information: processed by our payment provider (Stripe). We do not store full card or bank-account numbers on our servers.
• Sensitive information: where you choose to record it (for example tax file numbers or bank details for payroll), used only to provide the service.
• Usage & device data: log data, IP address, device and browser information, and product-analytics events.

We use personal information to provide, secure, support and improve the service; to process payments and manage subscriptions; to send transactional and service emails; to detect and prevent fraud and abuse; and to comply with our legal obligations. We do not sell your personal information.

We disclose personal information to trusted service providers (sub-processors) who help us run EasyFlow, only as needed to provide the service:

• Stripe: payment processing and subscription billing.
• Xero: accounting sync, where you connect your Xero account.
• Resend: transactional email delivery.
• Cloudflare R2: file and document storage.
• Sentry: error monitoring.
• Vercel & Neon: application hosting and database.

We may also disclose information where required by law. We do not otherwise share your business data with third parties without your instruction.

We host the application database in Australia (Sydney region) where practicable. Some sub-processors listed above may store or process limited data overseas; we take reasonable steps to ensure they handle it consistently with the Australian Privacy Principles.

We use industry-standard measures to protect personal information, including encryption in transit, access controls, audit logging, and rate limiting. No system is perfectly secure; you are responsible for keeping your account credentials confidential.

We retain personal information for as long as your account is active and as needed to comply with legal, accounting and tax obligations. You may request access to, or correction of, your personal information at any time.

Deleting your account: you can delete your account from within EasyFlow (Profile → Delete account). Deleting an organisation owner’s account permanently removes the organisation and its data and cancels any active subscription. Where we are legally required to retain certain records, we anonymise rather than delete them.

We use essential cookies to keep you signed in and to operate the service, and analytics cookies to understand product usage. You can control cookies through your browser settings; disabling essential cookies may stop the service working.

EasyFlow is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16.

If you have a privacy concern, contact us first at malakye@easyflow.au. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this policy from time to time. Material changes will be notified in-app or by email. The “last updated” date above reflects the current version.

EASYFLOWAI PTY LTD (ABN 31 686 450 206). Contact: malakye@easyflow.au.