Privacy policy

This Privacy Policy describes how Eazybroker (trade name EazyBroker; "we", "us", or "our") handles information when you use our websites, applications, and related services (collectively, the "Service"). By using the Service, you agree to this policy. If you do not agree, please discontinue use.

1. Who this applies to

This policy applies to workspace owners, team members, and counterparty users who access the party portal. It also covers visitors who browse our marketing pages or authentication flows.

2. Information we process

• Account and authentication data: such as name, username, email address, password hashes, session tokens, and email verification artifacts needed to secure access.
• Workspace and brokerage data:information you enter into the product—parties, transactions, financial amounts, notes, documents metadata, print configurations, and similar operational records stored in your deployment's database.
• Technical and security data: such as IP addresses, user agent strings, approximate timestamps, and diagnostic logs emitted by hosting infrastructure or application error reporting when enabled by your deployment.
• Communications: messages you send to us (for example via email) and any delivery metadata required to respond.
• WhatsApp Business (Meta):when a workspace owner connects WhatsApp via Meta Embedded Signup, we receive WhatsApp Business Account identifiers, phone number metadata, encrypted access tokens, message content, delivery status, and related webhook events needed to operate the WhatsApp inbox. We do not request or store Facebook profile email through Meta's email permission—brokers authenticate with EazyBroker credentials, and Meta login in that flow is used only to authorize the WhatsApp connection.
• Meta Platform administration (operators only): platform administrators may connect a separate Facebook Login for Business configuration used solely for Meta Platform tools (for example App Management with the manage_app_solution permission). That connection stores an encrypted Meta user access token, Meta user identifiers, requested/granted/missing permission scopes, and short-lived sanitized Graph API response caches. It is not used for broker WhatsApp messaging. Administrators can disconnect at any time from Admin → Meta, which deletes the encrypted token and related caches.

3. How we use information

• To provide, maintain, and improve the Service.
• To authenticate users, prevent abuse, and enforce access controls.
• To send transactional emails (such as verification or password reset) when mail is configured for your deployment.
• To comply with law or protect rights, safety, and integrity.

4. Legal bases (where applicable)

Depending on jurisdiction, we rely on contractual necessity (to deliver the Service you requested), legitimate interests (such as securing the platform and measuring reliability), and consent where required (for example optional marketing communications, if offered separately).

5. Sharing and subprocessors

We do not sell your personal information. We share data only as needed to operate the Service, including with infrastructure providers (for example hosting, databases, email delivery) selected by whoever deploysEazyBroker. Your organization's administrator controls many of those choices when self-hosting or using a managed deployment. WhatsApp messaging is delivered through Meta Platforms; their terms and privacy policies also apply to data processed on WhatsApp infrastructure.

6. WhatsApp disconnect and Meta data deletion

Workspace owners can disconnect WhatsApp at any time from workspace Settings → WhatsApp. Disconnecting removes the workspace integration and encrypted Meta access token from our systems. Account owners may also delete their EazyBroker account from account settings. Meta may send data-deletion requests for Facebook Login used during Embedded Signup; status for those requests is available at /meta/data-deletion.

7. Data retention

We retain information for as long as your account is active and for a reasonable period afterward to resolve disputes, enforce agreements, and comply with legal obligations. Workspace brokerage records may be retained longer where required for audit or regulatory reasons—your team should align retention with its own compliance program.

8. Security

We implement reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is 100% secure; you are responsible for safeguarding credentials and workspace access.

9. International transfers

Depending on where the Service is hosted, information may be processed in countries other than your own. We rely on appropriate safeguards where required by law.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, or export personal information, and to object to or restrict certain processing. Contact your workspace administrator for product-held data, or email us at the address on the contact page for account-level requests.

11. Children

The Service is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

12. Changes

We may update this policy from time to time. We will post the updated version with a new "Last updated" date and, where appropriate, provide additional notice.

13. Contact

This Service is provided by Eazybroker (trade name EazyBroker). Questions about this policy can be sent to support@eazybroker.in or via the contact page on this website.