Privacy Policy

Last Updated: April 25, 2026

1. Introduction

Welcome to EazyPost (“we,” “our,” or “us”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. Information We Collect

  • Personal Information: Name, email address, and profile picture (via Google Sign-In).
  • Authentication Data: OAuth tokens and session data to maintain your login state.
  • Social Media Data: We access your connected social accounts (Facebook Pages, Instagram Business, LinkedIn, etc.) strictly to perform actions you authorize (scheduling posts, reading analytics).
  • Content: Images, videos, and text you upload to our platform.

3. Google API Services & User Data

EazyPost uses Google Sign-In (OAuth 2.0) solely to authenticate users. The following sections describe exactly how we interact with Google user data.

3a. Data Accessed

When you sign in with Google, we request the following OAuth 2.0 scopes:

  • email — your primary Google account email address.
  • profile — your display name (given and family name) and profile photo URL.

We do not request access to Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google service beyond basic identity information.

3b. Data Usage

Google user data is used exclusively for the following purposes:

  • Creating or identifying your EazyPost account (account registration and login).
  • Pre-filling your display name and avatar in the application.
  • Sending transactional emails (password resets, workspace invitations) to your Google email address.

We do not use Google user data to train AI or machine-learning models, serve advertisements, or transfer data to data brokers or advertisers.

3c. Data Sharing

We do not sell or share your Google user data with any third party except as strictly necessary to operate the service:

  • Resend — receives your email address solely to deliver transactional emails you have requested (e.g., OTP codes, workspace invitations).
  • Neon (PostgreSQL) — your account data (name, email, profile photo URL, Google account ID) is stored in our cloud database to maintain your account.

Your Google user data is never shared with AI content-generation providers (OpenAI, DeepSeek, Groq), analytics platforms, or any other third party.

3d. Data Storage & Protection

  • All data is transmitted over encrypted HTTPS/TLS connections.
  • Account data is stored in a Neon PostgreSQL serverless database with access restricted to authenticated backend services only.
  • Google OAuth access tokens are used transiently during sign-in and are not persisted to our database after your session is established.
  • Our backend infrastructure is hosted on hardened Docker containers with network-level firewall rules and no direct public database access.

3e. Data Retention & Deletion

Google user data (name, email, profile photo URL, Google account ID) is retained for as long as your EazyPost account is active. If you delete your account or submit a deletion request:

  • All personal data associated with your account is permanently deleted from our database within 48 hours.
  • Backups containing your data are purged within 30 days.

To request deletion, email support@eazypost.cm with the subject line “Data Deletion Request” and your registered email address, or follow the steps at eazypost.cm/legal/data-deletion.

4. How We Use Your Data

We use your information for the following legitimate business purposes:

  • To provide the scheduling and publishing services.
  • To generate AI-powered captions and content suggestions.
  • To provide customer support and respond to inquiries.
  • To improve our platform's security and performance.

5. Data Sharing & Third Parties

We do not sell your data. We share data only with the following trusted service providers necessary to operate our business:

  • Cloudinary: For secure media storage.
  • Resend: For transactional emails (invites, alerts).
  • OpenAI / DeepSeek / Groq: For AI content generation (content only — Google user data is never sent to these providers).
  • Neon: Serverless PostgreSQL hosting for all account and application data.

6. Your Rights

Depending on your location, you may have the right to access, rectify, or delete your personal data at any time. To exercise these rights, contact us at support@eazypost.cm or visit our Data Deletion page.

If you have questions about this policy, please contact us at support@eazypost.cm.