1. What Data We Collect

We may collect and process the following categories of data:

Personal Information

• Email address (required to create an account)
• Name, professional affiliation, or job title, only where you choose to give them to us (for example when you contact us or discuss a contract plan)

Account & Usage Data

• Account registration details
• Login and authentication activity
• The data and parameters you enter into our tools, which are stored as your analyses
• Technical server logs generated when the application calls our services

We do not run product analytics or session-tracking tools.

Payment Information

Payments for subscriptions and services are processed by Stripe, Inc.

We may receive from Stripe:

• Confirmation of payment
• Billing and subscription status

Alongside your account we store your subscription plan, its status, the current billing period, and, for business purchases, the VAT ID you provide. We do not store card details on our servers.

Stripe processes payment data in accordance with its own Privacy Policy.

Technical Data

• IP address
• Browser type and version
• Device type
• Operating system
• Cookies (strictly necessary session cookies only)

We do not collect special categories of personal data (such as identifiable health data). Users are responsible for ensuring that uploaded data does not contain personally identifiable patient information.

2. How We Collect Your Data

We collect data when you:

• Register for an account
• Start a 14-day free trial
• Subscribe to a paid plan
• Use the EasyHTA application or other EasyHTA tools
• Contact us via email or forms
• Subscribe to updates
• Sign in to the EasyHTA application, which sets strictly necessary session cookies

3. How We Use Your Data

We process your data to:

• Create and manage your account
• Provide access to the EasyHTA application and other EasyHTA tools
• Process subscription payments via Stripe
• Monitor billing and subscription status
• Improve platform functionality and performance
• Ensure platform security and prevent fraud
• Provide customer support
• Send service-related communications
• Send marketing communications (only where consent has been given)

We rely on the following legal bases under the General Data Protection Regulation (GDPR):

• Performance of a contract
• Legitimate interests (product improvement and security)
• Consent (for marketing communications)
• Legal obligations

4. Payment Processing (Stripe)

All payments are securely processed by Stripe, Inc., a third-party payment service provider.

When you make a payment, your payment information is transmitted directly to Stripe and handled in accordance with Stripe’s security standards and Privacy Policy.

EasyHTA does not store or process full credit card numbers.

You can review Stripe’s Privacy Policy at:
https://stripe.com/privacy

5. Data Storage and Security

EasyHTA stores data securely using reputable cloud infrastructure providers, including AWS services.

Security measures include:

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication systems
• Role-based access control
• Encrypted storage where appropriate
• System monitoring and logging

We implement appropriate technical and organisational safeguards to protect your data against unauthorised access, misuse, loss, or alteration.

6. Data Retention

We retain personal data:

• Your account, workspaces, and analyses: for as long as your account exists
• Billing and subscription records: for as long as required for billing, accounting, and other legal obligations
• Analyses you delete yourself: removed permanently 90 days after deletion
• Technical server logs: retained for a limited period for security and troubleshooting

You may request deletion of your account and its data at any time by emailing eemil@easyhta.com.

7. Data Sharing

We do not sell your personal data.

We may share data with:

• Stripe (payment processing)
• Cloud infrastructure providers (Amazon Web Services)
• Professional advisors where legally required

All third-party processors are required to maintain appropriate data protection standards.

8. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

9. Marketing Communications

If you have opted in, we may send you information about:

• Product updates
• Feature releases
• Events
• Service announcements

You may withdraw consent at any time via the unsubscribe link or by contacting us directly.

10. Your Data Protection Rights

Under applicable data protection laws, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure
• Restrict processing
• Object to processing
• Request data portability

You can download a copy of your data at any time from the Billing page in the application. That export covers your account, your workspace memberships, and the analyses you created. Uploaded source data files and computed result files are not included, and billing records are held by Stripe and available through the Stripe billing portal.

We will respond to requests within one month.

To exercise your rights, contact:
eemil@easyhta.com

You also have the right to lodge a complaint with your local data protection authority.

11. Cookies

We use strictly necessary cookies only. They:

• Keep you signed in
• Keep your session secure

We do not use tracking, advertising, or analytics cookies. You may manage cookies via your browser settings.

12. Links to Other Websites

Our website may contain links to external websites. This Privacy Policy applies only to EasyHTA services.

13. Changes to This Policy

We review this Privacy Policy regularly and post updates on this page.

14. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact:

EasyHTA Oy
General questions: zach@easyhta.com
Data protection requests (access, deletion, portability): eemil@easyhta.com