Privacy Policy

This policy explains what personal data Easify handles, why, and what you can do about it. It covers both this website and the Easify CRM application at app.easifycrm.com.

Two different roles

It matters which of these applies to you, because your rights differ.

When you use this website, or contact us, Easify is the controller. We decide what is collected and why.

When your brokerage uses the Easify CRM, Easify is the processor. Your company is the controller of the lead data inside it: the buyers’ names, phone numbers, conversations and budgets. We hold and process that data on your company’s instructions. If you are a buyer whose details are in a brokerage’s Easify account, your request should go to that brokerage; we will support them in answering it.

What we collect

From this website

• What you send us in the contact form: your name, company, email address, phone number, team size and message.
• Technical data attached to that submission: your IP address and browser user agent, retained with the message. We use these only to detect and block automated abuse of the form.
• A language preference, stored in your browser’s local storage if you use the language toggle. It never leaves your device and we cannot read it.

This site uses the Meta Pixel, which sets Meta advertising cookies and tells Meta when a page is viewed, a contact link is clicked or the contact form is sent. We use it to measure and improve our Facebook and Instagram ads. The contents of the form are not sent to Meta. You can limit ad tracking in your Meta ad preferences or block these cookies in your browser.

From the CRM application

• Account data: the name, email address, phone number and role of each user your company creates.
• Customer data your company puts in, or connects: leads and their contact details, activity history, notes, statuses, and WhatsApp conversations with the company number.
• Data received from Meta, where your company has connected it: lead-form submissions, inbound WhatsApp messages and delivery statuses, and campaign, ad set and ad structure.
• Operational logs: authentication events and webhook delivery records, kept so failures can be diagnosed and lost messages recovered.

Why we process it

• To provide the service your company subscribed to.
• To deliver leads and messages reliably, including retrying and recovering deliveries that failed.
• To secure the service: rate limiting, abuse detection, and investigating incidents.
• To bill and support the account.
• To answer enquiries you send us.

Where Egyptian Law 151 of 2018 on Personal Data Protection applies, our basis is the performance of a contract with your company and our legitimate interest in keeping the service secure and working. Where the GDPR applies, the same two bases apply.

Who it is shared with

We do not sell personal data and we do not share it for advertising.

• Meta Platforms, where your company has connected WhatsApp or Meta ads. Data passes between Easify and Meta so those features work, under Meta’s own terms.
• Our hosting and email providers, who process data on our instructions in order to run the service and send transactional email.
• Where the law requires it, in response to a valid legal demand.

How long it is kept

• Contact form submissions: kept while we are in contact and for up to 24 months after the last exchange, then deleted.
• CRM data: kept for as long as your company’s account is active. On termination, your company can export it; we delete it within 90 days of the account closing unless a longer period is required by law.
• Operational logs: kept for a limited period sufficient to investigate failures, and not used for any other purpose.

Security

Access to production data is restricted to the people who need it to operate the service. Each company’s data is isolated from every other company’s. Authentication tokens are short-lived, refresh tokens are held in HTTP-only cookies, and credentials for connected Meta accounts are encrypted at rest.

No system is perfectly secure. If a breach affects your data, we will notify your company and, where required, the relevant authority.

Your rights

Subject to the applicable law, you may ask to access, correct, delete, or receive a copy of your personal data, or object to particular processing.

• If you contacted us through this site, write to the address below.
• If your data is in a brokerage’s CRM account, contact that brokerage. They control it. We will help them respond.

International transfers

Some processing may take place outside Egypt, including by Meta and by our infrastructure providers. Where that happens we rely on the safeguards those providers offer and on contractual terms requiring equivalent protection.

Children

Easify is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18.

Changes

If this policy changes materially, we will update the date at the top and, for changes that affect existing customers, notify the account’s administrators.

Contact

Questions or requests about this policy: easifycrm@gmail.com.