Privacy Policy
Last updated: 29 September 2026
This policy explains how Alin Ghiorghiu, GetEasySoft, Schürbungertweg 10, 8302 Kloten, Switzerland (info@geteasysoft.com) processes personal data when you use geteasysoft.com, buy from us or use our products. It follows the Swiss Federal Act on Data Protection (FADP / nDSG) and, where it applies, the EU General Data Protection Regulation (GDPR).
1. Data we process and why
- Orders and your account: name, email, billing address, VAT number, order and payment details, invoices — to deliver what you bought, issue invoices and meet legal bookkeeping duties (10 years).
- Configurator and project briefs: your answers, texts, files you upload (logo, photos, documents), contact details — to prepare your offer, build your theme and support you. Kept for as long as your project and support last, then deleted after 3 years at the latest. Uploads from briefs that were never sent are deleted after 3 days, preview drafts after 30 days.
- Licences: licence key, website address, product version — to deliver updates and prevent misuse.
- Support and emails: the content of your messages — to answer you.
- Website use: technical data (IP address, browser, pages, time) in server logs — for security and to run the site; kept up to 30 days.
Legal bases (GDPR): performance of a contract, legal obligations, our legitimate interests (security, fraud prevention, improving our products) and your consent where we ask for it.
2. AI preview
If you click “Generate preview” in the configurator, your answers (without your name, email and phone) and texts you provided are sent to Anthropic PBC (USA) to generate the sketch, and search terms are sent to Pexels (Canada/Germany) to find photos. Anthropic does not use data sent through its API to train its models. Using the preview is optional.
3. Who processes data for us
- Hoston SRL, Romania (EU) — hosting of the website, shop, briefs and files.
- Cloudflare, Inc. (USA / global network) — security and content delivery.
- Stripe Payments Europe Ltd. (Ireland) and Stripe, Inc. (USA) — card payments. We never see your full card number.
- Anthropic PBC (USA) — AI preview (optional, see section 2).
- Pexels GmbH — stock photos for the preview.
- Our licence and update server, operated by us on servers of Hoston SRL, Romania (EU). When you use our plugins, it receives your licence key, your website address and the plugin version to check the licence and deliver updates.
- Easy Connect MCP “Connect with Google” (optional quick connect, license.easysoftapp.eu): if you choose it instead of your own Google Cloud project, your website sends the Google sign-in through our relay. The relay passes the one-time authorization and later token refreshes between your website and Google; it does not store your Google tokens or read your Google data. You can disconnect at any time in the plugin.
- Domain registries (RoTLD, EURid, Verisign …) receive only the domain name you check for availability.
Transfers to countries without an adequate level of data protection (such as the USA) are based on the EU Standard Contractual Clauses or the Swiss-US / EU-US Data Privacy Framework where the provider is certified.
4. Cookies and consent
We use necessary cookies to run the website, the shop and your account. Other cookies (preferences, statistics, marketing) are only used with your consent, which you can give, change or withdraw at any time with the “Cookie settings” link at the bottom of every page. Every cookie, its purpose and how long it is kept are listed in our Cookie Policy.
Consent log: to prove your cookie choice we record, without your name or full IP address, the date and time, a random consent ID, the categories you allowed, the policy version, the language and address of the page, and your IP address shortened and converted with a one-way keyed hash. We keep these records for 12 months, then delete them automatically (legal basis: our legal obligation to demonstrate consent, Art. 7(1) and 6(1)(c) GDPR, and our legitimate interest, Art. 6(1)(f) GDPR; Swiss FADP). They are stored on our server at Hoston SRL, Romania (EU).
5. Your rights
You can ask for access to your data, correction, deletion, restriction, a copy of your data (data portability) and object to processing, and you can withdraw consent at any time. Write to info@geteasysoft.com. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or to the data protection authority in your EU country.
6. Security
We use encrypted connections (HTTPS), two-factor authentication for our team, encrypted storage of API keys and restricted access to uploaded files.
7. Changes
We update this policy when our services change. The current version is always on this page.