Privacy Policy

1. Introduction

OnPremEasy ("we", "us", "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you use our on-premises infrastructure cost calculator ("the Service").

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address — used for authentication (magic link sign-in), account identification, and transactional communications.

2.2 Calculation Data

When you use the calculator, we process:

• Product selections and configuration inputs you provide.
• Provider and currency preferences.
• Generated sizing recommendations and cost estimates.

If you save a calculation, this data is stored in your account for later retrieval.

2.3 Billing Information

Payment processing is handled by our payment partner, Paddle.com Market Limited ("Paddle"). We do not directly collect or store your payment card details, bank account information, or billing address. Paddle processes this information as the Merchant of Record in accordance with their own Privacy Policy.

We receive from Paddle: transaction identifiers, purchase confirmations, pack codes, and token amounts to credit to your account.

2.4 Usage and Technical Data

We automatically collect:

• Log data — IP address, browser type, operating system, referring URL, pages visited, and timestamps.
• Analytics data — We use Google Analytics to understand how the Service is used. Google Analytics uses cookies and collects anonymized usage data. You can opt out using the Google Analytics Opt-out Browser Add-on.
• Session data — authentication tokens stored in secure HTTP-only cookies to maintain your session.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Authenticate your identity and manage your account.
• Process token purchases and maintain your balance.
• Save and retrieve your calculations.
• Send transactional emails (magic links, calculation results, receipts).
• Analyze usage patterns to improve the Service.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with legal obligations.

We do not sell your personal data. We do not use your calculation inputs or results to train machine learning models beyond the scope of generating your specific recommendation.

4. Data Sharing

We share your information only with the following categories of third parties, and only as necessary to provide the Service:

We may also disclose information if required by law, regulation, or valid legal process.

5. Data Retention

• Account data — retained for as long as your account is active, plus a reasonable period after deletion for legal and operational purposes.
• Saved calculations — retained until you delete them or your account is closed.
• Billing records — retained for the period required by applicable tax and financial regulations (typically 7 years).
• Log and analytics data — retained for up to 26 months, then aggregated or deleted.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS) and at rest.
• Secure HTTP-only session cookies.
• Hashed authentication tokens (magic links are never stored in plain text).
• Rate limiting on authentication and API endpoints.
• Webhook signature verification for payment events.

No method of transmission or storage is 100% secure. If you become aware of a security vulnerability, please contact us immediately.

7. Cookies

We use the following cookies:

• Session cookie (essential) — maintains your authenticated session. HTTP-only, secure, expires when you log out or after inactivity.
• Analytics cookies (optional) — placed by Google Analytics to understand usage patterns. You may opt out as described above.

We do not use advertising or tracking cookies.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data and request a copy.
• Correct inaccurate or incomplete data.
• Delete your account and associated data.
• Export your saved calculations.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at privacy@onpremeasy.com. We will respond within 30 days.

9. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for any international transfers, including standard contractual clauses where required.

10. Children's Privacy

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where appropriate, by email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or requests, contact us at:

• Email: privacy@onpremeasy.com