Privacy Policy

EzyCommunity is an all-in-one community, course, and membership platform that helps creators and businesses build, manage, and monetize online communities. This Privacy Policy explains how EzyCommunity (“we,” “us,” or “our”) collects, uses, discloses, and protects information when you use our website, applications, and related services (collectively, the “Services”).

This Privacy Policy applies to everyone who interacts with the Services, including people who create and manage communities on our platform (“Community Owners” or “Creators”) and people who join, participate in, or purchase access to those communities (“Members”). EzyCommunity also offers an Agency (or “SaaS”) plan that lets a Creator (“Agency Partner”) use our infrastructure to run their own, fully white-labeled community or course business — under their own branding and domain — and resell access to their own end-clients, who may in turn run their own Communities with their own Members.

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our practices, please do not use the Services.

This Privacy Policy should be read together with our Terms of Service.

1. A Note on Creator-Owned Communities

EzyCommunity allows Creators to build and run their own independent communities (“Communities”) on our platform. When a Creator operates a Community, sets pricing, collects registrations, or communicates with Members, the Creator — not EzyCommunity — generally determines what personal information is collected and how it's used within that Community. In these cases, the Creator acts as the data controller (or “business,” under U.S. state privacy laws) for that information, and EzyCommunity acts as a data processor or service provider, handling the information only on the Creator's instructions and only to operate the Services.

Agency/SaaS Plan. Where a Creator operates as an Agency Partner, this relationship has an extra layer: the Agency Partner is the data controller for their white-labeled business (including their end-clients and those end-clients' Members), EzyCommunity acts only as the underlying infrastructure/processor, and each end-client may in turn control data for their own Community's Members — the same logic as a standalone Creator, just one level down.

2. Information We Collect

2.1 Information You Provide to Us

• Account and Registration Information. When you create an EzyCommunity account, we collect information such as your name, email address, password, phone number, and profile details (e.g., profile photo, bio).
• Community Setup Information. If you're a Creator, we collect information you provide to configure your Community, including branding, pricing plans, policies, course content, and payout details.
• Content You Post. Posts, comments, messages, files, images, videos, and other content you share within Communities, courses, chats, or direct messages.
• Payment and Billing Information. When you subscribe to EzyCommunity or purchase access to a Community, our third-party payment processors collect your payment card or bank details directly. We do not store full card numbers; we retain limited transaction records (e.g., last four digits, billing address, amount, date) for invoicing, tax, dispute resolution, and fraud prevention.
• Communications. Information you provide when you contact support, respond to surveys, apply for a job with us, or otherwise correspond with us.

2.2 Information Collected Automatically

• Device and Log Information. IP address, browser type, operating system, device identifiers, referring URLs, and pages viewed.
• Usage Information. Actions you take on the Services — pages visited, features used, links clicked, videos watched, search queries, and similar interaction data.
• Cookies and Similar Technologies. We and our service providers use cookies, pixels, and local storage to operate the Services, remember preferences, measure performance, and, where permitted, support advertising. See our Cookie Policy for details and opt-out choices.
• Approximate Location. We may infer general location (e.g., city or country) from your IP address for security, currency display, and localization purposes.

2.3 Information from Third Parties

• Single Sign-On and Social Logins. If you log in via Google or another third-party service, we receive basic profile information from that provider.
• Integrations. If a Creator connects third-party tools (e.g., email marketing, payment, analytics, or automation platforms) to their Community, information may flow between those tools and EzyCommunity as configured by the Creator.
• Publicly Available Sources. We may supplement account information with information from publicly available sources for verification or fraud-prevention purposes.

2.4 Google User Data

When you connect your Google account to EzyCommunity, we request the following permissions (OAuth scopes):

• See your primary Google Account email address (https://www.googleapis.com/auth/userinfo.email) — used to show which Google account is connected in your integration settings.
• Manage Google Calendar events created by EzyCommunity (https://www.googleapis.com/auth/calendar.events) — used solely to create, update, and delete Google Calendar events (with an attached Google Meet link) for the community events you host.

We do not read, list, or access any of your other Google Calendar data. We only act on the events our application itself creates for your community events.

2.5 Limited Use Disclosure

EzyCommunity's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2.6 Google Workspace Data & AI Model Policy

• No AI/ML Model Training. EzyCommunity does not use, transfer, or sell data obtained through Google Workspace APIs (including Google Calendar data) to develop, improve, or train foundational, generalized, or third-party Machine Learning (ML) or Artificial Intelligence (AI) models.
• Data Isolation. Any Google Workspace user data processed by EzyCommunity is strictly used to deliver core platform functionalities (such as scheduling events and generating Google Meet links) and is never shared with third-party AI service providers for model training or secondary purposes.

3. How We Use Information

We use the information we collect to:

• Provide, operate, secure, and maintain the Services, including hosting Communities, processing payments and payouts, and enabling course delivery;
• Create and manage accounts, and authenticate logins;
• Process transactions and send related confirmations, receipts, and invoices;
• Provide customer support and respond to inquiries;
• Send administrative and service-related communications (e.g., security alerts, policy updates, billing notices);
• With your consent or as permitted by law, send marketing communications about EzyCommunity's products and features, and allow opt-out at any time;
• Monitor, analyze, and improve the performance, usability, and reliability of the Services;
• Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service;
• Comply with legal obligations and enforce our agreements.

4. How We Share Information

We do not sell your personal information. We disclose information only as described below:

• With Creators. If you're a Member, the Creator of a Community you join can access information you provide within that Community (e.g., registration details, posts, course progress, purchase history) so they can operate and manage their Community. Or, where applicable, the Agency Partner (or their end-client) operating the white-labeled platform hosting that Community.
• With Service Providers. We share information with vendors who perform services on our behalf, such as cloud hosting, payment processing, email delivery, analytics, customer support tooling, and security services. These providers are contractually restricted from using your information for any purpose other than providing services to us.
• With Google's APIs. Where you connect your Google account, we transmit requests to Google's APIs solely to deliver the Calendar and Meet integration you enabled, as described in Section 2.4.
• With Payment Processors. Payment details are shared directly with processors such as Stripe/PayPal to complete transactions and payouts.
• For Legal Reasons. We may disclose information if required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of EzyCommunity, our users, or the public.
• In a Business Transfer. If EzyCommunity is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.
• With Your Consent. We may share information for other purposes with your explicit consent.
• Aggregated or De-Identified Data. We may share information that has been aggregated or de-identified such that it no longer reasonably identifies you.

AI-Powered Features

EzyCommunity may offer AI-powered features (for example, content suggestions, moderation assistance, or search) built on models from trusted third-party providers. Where these features process your content or personal information, we do so to generate the requested output and improve your experience. We do not permit third-party AI providers to use your personal information to train their general-purpose models, and any such processing is subject to contractual confidentiality and security commitments.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, understand how the Services are used, and, where applicable, measure the effectiveness of our marketing. You can control cookies through your browser settings; disabling certain cookies may limit functionality. Where required by law, we will request your consent before placing non-essential cookies.

6. Data Retention

We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When a Creator closes a Community or a user deletes their account, we delete or anonymize personal information within a reasonable period, except where retention is required for legal, tax, security, or legitimate business purposes (such as fraud prevention or dispute records).

7. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction, including encryption in transit, access controls, and regular security reviews. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If you believe your account has been compromised, please contact us immediately at [email protected].

8. International Data Transfers

EzyCommunity is based in the United States and stores, processes, and transfers information on servers and databases located in Frankfurt, Germany. In certain circumstances, information may also be stored, processed, or transferred to servers in other countries where our affiliates, trusted service providers, or business partners operate, as necessary to provide our services and in accordance with applicable law.

If you use our Services outside Germany, including in the European Economic Area (EEA), United Kingdom, or Switzerland, your personal information may be transferred to, stored, and processed in Germany and, where necessary, in other countries where our affiliates or service providers operate. By accessing our Services or otherwise providing us with your information, you acknowledge that your information may be transferred and processed as described in this Privacy Policy.

We rely on appropriate legal mechanisms to transfer personal information across borders where required by applicable data protection laws. When personal information is processed by our service providers on our behalf, we take appropriate measures to ensure that such transfers comply with applicable law, including, where applicable, the use of the European Commission's Standard Contractual Clauses (SCCs) or other recognized transfer mechanisms.

We take a number of steps to protect your privacy, including entering into Data Processing Agreements with our customers and, where appropriate, our service providers. If you would like more information about the safeguards we have in place for international data transfers, please contact us at [email protected].

9. Your Rights and Choices

Depending on where you live, you may have rights to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your personal information, subject to certain legal exceptions;
• Object to or restrict certain processing;
• Port your data to another provider in a structured, machine-readable format;
• Withdraw consent where processing is based on consent; and
• Opt out of marketing communications at any time using the unsubscribe link in our emails or your account settings.

If you are a Member of a specific Community and your request relates to information the Creator controls, we may direct you to contact the Creator directly, and can assist the Creator in responding where we act as their processor.

Region-Specific Notices

European Economic Area, UK, and Switzerland. We process personal information on the legal bases of contract performance, legitimate interests, consent, and legal obligation, as applicable. You have the right to lodge a complaint with your local data protection authority.

California and other U.S. States. Residents of California, Colorado, Connecticut, Virginia, and other states with comprehensive privacy laws may have additional rights, including the right to know what categories of personal information we collect and disclose, the right to delete, the right to correct, and the right to opt out of targeted advertising or the “sale” or “sharing” of personal information (we do not sell personal information as defined under these laws).

10. Children's Privacy

The Services are intended for individuals aged 12 and older. Users who are 16 or older may use the Services independently. Individuals between the ages of 12 and 15 may use the Services only with the verifiable consent or authorization of a parent or legal guardian.

The Services are not directed to, and are not intended for use by, children under the age of 12. We do not knowingly collect personal information from individuals under 12.

Where parental or guardian consent is required, we may take reasonable steps to verify that such consent has been provided, as required by applicable law.

If we learn that we have collected personal information from an individual under 12, or from an individual aged 12–15 without the required parental or guardian consent, we will take reasonable steps to delete that information promptly.

Parents or legal guardians who believe we may have collected personal information from a child or minor in violation of this policy should contact us at [email protected].

11. Third-Party Links and Services

The Services may contain links to third-party websites, plug-ins, or integrations that are not operated by us. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies before providing any information to them.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated policy with a revised “Last Updated” date and, where changes are material, provide additional notice (such as an in-app notification or email). Continued use of the Services after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: