1. Overview
Easify ("we", "our", or "us") is a bank statement analysis and MCA underwriting platform operated by Easify. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform at easify.net.
By accessing or using Easify, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform.
2. Information We Collect
Account Information
- Full name, email address, and password when you register
- Organization name and role within your team
- Profile photo (if provided or fetched from a social login provider)
Uploaded Documents
- Bank statement PDFs you upload for analysis
- Extracted transaction data, balances, and financial summaries derived from those documents
Usage Data
- Pages visited, features used, and actions taken within the platform
- IP address, browser type, device type, and operating system
- API request logs and processing metadata
Payment Information
- Billing details are collected and processed by Stripe. We do not store full card numbers on our servers.
Social Login Data
- If you sign in via Google, Microsoft, or LinkedIn, we receive your name, email, and profile photo from those providers
3. How We Use Your Information
- To provide, operate, and improve the Easify platform
- To process bank statement uploads and generate analysis and underwriting reports
- To manage your account, organization, and subscription
- To send transactional emails such as password resets and billing receipts
- To monitor platform performance, detect errors, and prevent abuse
- To comply with legal obligations and enforce our terms of service
We do not sell, rent, or trade your personal information or uploaded documents to third parties for marketing purposes.
Information we receive from Google is used only as described in Google User Data below, which takes precedence over this section.
4. Google User Data
Easify's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
What we access, and why. We request Google data only when you choose a feature that needs it, and use it only to provide that feature to you:
- Sign in with Google (email address and basic profile): to sign you in to your Easify account and show your name and photo in the app.
- Gmail read-only access (
gmail.readonly), when you connect the Email Parser: to find unread messages in your inbox that have PDF attachments, import those PDFs, and extract the bank statements and financing applications in them into your organization's Easify workspace. We read only messages matching that search and do not modify, delete, or send mail with this permission. - Gmail send access (
gmail.send), when you click Connect Gmail: to send, from your own address, the deal submissions you choose to send to the lenders you select. We send nothing you have not chosen to send.
What we do not do with Google user data.
- We do not use it for advertising, including retargeting, personalized, or interest-based ads.
- We do not sell it, and we do not transfer it to data brokers or information resellers.
- We do not use it to develop, improve, or train generalized or non-personalized AI or machine-learning models, and we do not allow our service providers to do so.
- We do not use it for analytics, product research, or any purpose other than providing and improving the user-facing features described above.
- Easify staff do not read it, except with your explicit consent for a specific message (for example, a support request), when needed for security purposes such as investigating abuse, or to comply with applicable law.
Transfers. We transfer Google user data only as needed to provide the features above: to our cloud hosting provider (AWS) for storage; to the AI document-extraction provider we use (Anthropic) solely to read the PDF attachments you imported, under terms that prohibit using the content to train its models; to the lenders you choose when you send a submission; or as required by law.
Storage and deletion. Google access tokens are stored on access-controlled servers and used only by the features above. Imported attachments and the data extracted from them are kept in your organization's workspace under the retention terms below. You can disconnect Gmail at any time from the Email Parser settings in Easify, and revoke Easify's access at myaccount.google.com/permissions. To have imported Google data deleted, contact [email protected].
5. Bank Statement Data
Bank statements you upload are processed by our proprietary bank-identification engine to extract transaction data, cash flow summaries, and underwriting insights. This data is:
- Stored securely and associated only with your organization's account
- Never shared with other organizations or sold to third parties
- For complex or not-yet-recognized statement formats, content may be processed by a third-party AI extraction provider solely to extract it for you, under terms that prohibit the provider from using it to train its models
- Retained for as long as your account is active or as needed to provide the service
You are responsible for ensuring you have the appropriate authorization to upload any financial documents to our platform.
6. Data Sharing & Third Parties
We share data only with the following trusted service providers, strictly to operate the platform:
- Stripe — Payment processing and subscription management
- Plaid — Secure bank-account connectivity, when a merchant chooses to link live bank data
- Google / Microsoft / LinkedIn — Social authentication (only when you choose to use SSO)
- AWS — Cloud infrastructure and file storage
- Anthropic — AI extraction of statements and applications that our own parsers cannot read; content is not used to train its models
We may disclose information if required by law, court order, or to protect the rights, property, or safety of our users or the public.
7. Data Security
We take reasonable technical and organizational measures to protect your data, including:
- HTTPS/TLS encryption for all data in transit
- Encrypted storage for sensitive credentials and tokens
- Role-based access controls — team members only see their organization's data
- Automatic deletion of uploaded statement files after processing
- Regular security reviews and dependency updates
See our Security page for more detail. No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
8. Data Retention
We retain your data for as long as your account remains active. If you delete your account:
- Your personal information and uploaded documents will be permanently deleted within 30 days
- Aggregated, anonymized analytics data may be retained indefinitely (this never includes Google user data)
- Billing records may be retained as required by applicable law
9. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Object to or restrict certain types of processing
- Export your data in a portable format
To exercise any of these rights, contact us at [email protected].
10. Cookies
We use essential cookies to maintain your login session and ensure the platform functions correctly. We do not use tracking or advertising cookies.
11. Children's Privacy
Easify is intended for business use only and is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the platform after changes constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
- Email: [email protected]
- Website: easify.net