Your data, handled with care.

Who we are and what this policy covers

Easy Hive Ltda, a limited company registered in Brazil (CNPJ 60.290.383/0001-01) with its head office in São Paulo, SP, Brazil ("Easy Hive," "we," "us" or "our"), runs a done-for-you AI and automation agency and builds software for online businesses. Easy Hive and Easy Clones are brands of the Easy Group.

This Privacy Policy explains how we process personal information that we collect through the digital properties and activities that link to it (together, the "Service"), including:

• our website easyhive.pro and its pages, free downloads and checkout;
• our web apps on easyhive.pro subdomains (for example Easy Calendar, Easy Forms, Easy Leads, Easy Studio and our team tools), including public booking pages and hosted forms;
• our desktop apps (for example Easy Shorts and Easy Sticky), kits and software products (for example Easy Stack and our whitelabel kits and Claude skills);
• The Hive newsletter, our email and SMS messages, our Skool community and our social media pages;
• sales and discovery calls, events and webinars; and
• the services we provide to our clients.

When we act for a client. When we build or run systems for a client and process personal information about that client's own customers or leads, we do so as the client's service provider (a "processor" under GDPR and LGPD), on the client's instructions and under our agreement with them. In that case the client's privacy policy governs that information, and questions about it should go to the client first.

Notices for specific regions. If you live in a US state with a privacy law, read the US state privacy rights notice. If you are in the European Economic Area, the United Kingdom or Switzerland, read the Notice to European users. If you are in Brazil, read the Notice to users in Brazil (LGPD).

Personal information we collect

Information you give us. Depending on how you interact with us, this may include:

• Contact data, such as your first and last name, email address, phone number, company name, job title, website and social media handle.
• Business and project data, such as your answers to our application, fit quiz, assessment or intake forms, including revenue range, team size, the tools you use, your goals and project details.
• Booking data, such as the meeting type, date, time zone and answers you give when you book a call through Easy Calendar.
• Communications data, such as the content of emails, messages, chat, comments, support requests and survey answers you send us.
• Call data. We may record and transcribe sales, discovery and client calls, and use AI tools to summarize them, so we can follow up accurately and improve our work. When a call is recorded, our note-taking assistant joins as a visible participant named "Easy Notes". If you do not want to be recorded, tell us before or during the call and we will turn recording off.
• Transaction data, such as the products you buy, amounts, dates, invoices and license keys. Card and bank details are entered directly with our payment processors (for example Stripe) and we do not store full card numbers.
• Account data for our apps, such as your name, email, role, password or sign-in link, settings and the workspace you belong to.
• Content you upload or create, such as files attached to a form, forms and pages you build, board content, notes and tasks, together with related metadata.
• Marketing data, such as your subscription status, consent records (including the date, page and wording of an email or SMS opt-in) and your preferences.
• Client data. If you are a client, the access credentials, data and documents you share with us so we can deliver the services. These are handled under our agreement with you.

Information from other sources. We may combine the information above with information from:

• Public sources, such as public social media profiles and posts, public websites and business directories. For example, we analyze publicly available short-form videos to research content trends.
• Business data providers, which supply professional contact details of businesses that may be interested in our services.
• Partners and platforms, such as Skool (when you join our community), Stripe (when you pay), Google (when you connect a calendar) and advertising platforms (aggregated campaign results).
• Clients and referrers, when a client or a contact introduces you to us.

Information collected automatically. We, our service providers and our advertising partners may automatically collect:

• Device data, such as IP address, browser and operating system, device type, language, and approximate location derived from your IP address.
• Online activity data, such as pages viewed, time on page, the page or ad that referred you, UTM campaign tags and click identifiers, links clicked and form interactions.
• Email and message interaction data, such as whether you opened an email or clicked a link in it, using tracking pixels and tagged links.

Some of this is collected with cookies and similar technologies. See our Cookie Notice.

Desktop apps. Our desktop apps process your files on your own device. They do not send your media or documents to us unless a feature clearly says it does (for example, an optional upload or sync you choose to use).

Information about others. If you give us information about another person (for example, a colleague you add to a booking or a contact you import into one of our apps), you confirm that you have the right to share it with us.

How we use personal information

We use personal information for these purposes, or as described when we collect it:

• Providing the Service: running our website and apps, creating and securing accounts, processing bookings, forms and purchases, delivering downloads, license keys and kits, and providing support.
• Delivering client services: scoping, building, managing and reporting on the systems we provide, and billing for them.
• Communicating with you: replying to you, sending booking confirmations and reminders, service messages, and security or policy updates.
• Marketing: sending The Hive newsletter and other marketing emails or texts you have asked for, posting in our community, and personalizing these messages. You can opt out at any time.
• Advertising and measurement: measuring which ads, posts and pages bring visitors and customers, and showing our ads to people likely to be interested, including people similar to our existing contacts. See Advertising and the sale or sharing of data.
• Improving the Service: analytics, research, testing and developing new products and content.
• Security and compliance: preventing fraud and abuse, protecting our systems, keeping records required by tax and accounting law, enforcing our terms, and responding to lawful requests.
• Aggregated and de-identified data: we may create aggregated or de-identified data that no longer identifies you and use it for any lawful purpose. We will not try to re-identify it.

Artificial intelligence. We use AI services (for example models from Anthropic and other providers reached through OpenRouter) to help transcribe and summarize calls, draft content, answer questions and run automations. Personal information you give us may be processed by these providers on our behalf. Where a provider offers the choice, we use settings that do not allow it to train its models on our data. We do not use AI to make decisions that have legal or similarly significant effects on you.

Business decisions about you. We may score applications and form answers to decide which calls and offers fit you best. A person on our team reviews these results, and you can always contact us to talk to a human.

How we share personal information

We do not sell personal information for money. We share it only with:

• Service providers that process it on our behalf, including: Supabase (database), Vercel (app hosting), Cloudflare (DNS and network security), DigitalOcean (servers for our automation and internal tools), Google Workspace (email, documents, calendar), Resend and Amazon Web Services (email delivery), Telnyx (SMS), Stripe (payments), Anthropic and OpenRouter (AI processing), Slack (internal team communication), Zoom and Google Meet (video calls) and Skool (community). This list can change as our tools change.
• Advertising and analytics partners, such as Meta (Facebook and Instagram) and Google, for the advertising and measurement purposes described below.
• Payment processors. Stripe processes card and wallet payments under its own privacy policy, available at stripe.com/privacy.
• Platforms you connect or use, such as Skool, Google Calendar or a third-party app you link to one of our apps. Their own terms and privacy policies apply.
• Our clients, when you are one of their customers or leads and we are processing your information for them.
• Professional advisers, such as lawyers, accountants, auditors and insurers.
• Authorities and others, when we believe in good faith that the law requires it or that it is needed to protect rights, safety or property.
• Business transfers, such as investors, buyers or successors in connection with a financing, merger, acquisition, reorganization or sale of assets, subject to this policy.
• Other people, at your direction, for example when you add attendees to a meeting or post in our community.

Text messaging. We will not share mobile phone numbers, text messaging opt-in data or consent with any third party or affiliate for their own marketing or promotional purposes. The categories of sharing above exclude text messaging originator opt-in data and consent; that information will not be shared with any third parties, except service providers that deliver our messages for us.

Advertising and the sale or sharing of data

We use the Meta Pixel and Google Analytics on our website, and we may send event data to Meta through its Conversions API (for example, that a form was submitted, with a matching event identifier and, where permitted, a hashed email address or phone number). This lets us measure our ads and show them to people likely to be interested. Some US state laws may treat this as "selling" or "sharing" personal information for targeted advertising, even though no money changes hands.

You can opt out at any time by choosing Reject or turning off advertising in Cookie settings (linked at the bottom of every page of our site), by emailing us at team@easyhive.pro, or by turning on the Global Privacy Control (GPC) signal in your browser. We treat a GPC signal as a valid request to opt out of the sale or sharing of your personal information for that browser. Visitors from the European Economic Area, United Kingdom, Switzerland and Brazil are asked for consent before these tools run.

Your choices

• Marketing emails. Use the unsubscribe link in any marketing email, or email us. You will still get service messages, such as booking confirmations and receipts.
• Text messages. Reply STOP to any text to stop receiving them, or HELP for help. Message and data rates may apply, and message frequency varies.
• Cookies and advertising. Use Cookie settings on our site, your browser settings, or the opt-out tools listed in our Cookie Notice.
• Call recording. Ask us at any time not to record a call.
• Your account. You can review and update your account details in the app, or ask us to close your account.
• Do Not Track. Browsers' "Do Not Track" setting is not a standard, so we do not respond to it. We do honor GPC as described above.
• Not giving information. Some information is needed to provide the Service. If you do not provide it, we may not be able to book your call, deliver a download or provide a service.

Retention

We keep personal information for as long as we need it for the purposes in this policy, then delete or anonymize it. As a guide:

• marketing contacts are kept until you unsubscribe, after which we keep a minimal record so we keep honoring your opt-out;
• leads and booking records are kept while there is an active business conversation and for up to 3 years after our last contact;
• call recordings and transcripts are kept for as long as useful for the related relationship, and deleted on request where the law allows;
• client, contract, invoice and tax records are kept for at least 5 years after the end of the relevant year or contract, or longer where the law requires; and
• app account data is kept while the account is active and deleted within a reasonable time after it is closed, except where we must keep it longer by law.

Backups may keep copies for a limited time before they are overwritten.

Security

We use technical and organizational measures designed to protect personal information, including encrypted connections, access controls, row-level security on our databases, restricted keys and least-privilege access for our team. No system is completely secure, so we cannot guarantee absolute security. If we learn of a breach that affects you, we will notify you and the authorities as the law requires.

International transfers

We are based in Brazil and most of our service providers are in the United States. Your personal information may therefore be transferred to, stored in and processed in Brazil, the United States and other countries whose data protection laws may differ from yours. Where the law requires it, we protect these transfers with appropriate safeguards, such as adequacy decisions, the EU-US Data Privacy Framework for certified providers, standard contractual clauses approved by the European Commission, the UK International Data Transfer Addendum, or the standard contractual clauses approved by Brazil's data protection authority (ANPD).

Children

The Service is meant for businesses and adults. It is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

Other sites and services

The Service links to and integrates with sites and services we do not run, such as Skool, YouTube, Instagram, Stripe and the tools our clients use. Their own privacy policies apply, and we are not responsible for their practices.

Changes to this policy

We may update this policy from time to time. When we do, we change the date at the top of the page. If a change is material, we will give notice on the site or by email before it takes effect. Previous versions are available on request.

How to contact us

To ask a question or exercise a privacy right, contact:

• Email: team@easyhive.pro, with "Privacy" in the subject line
• Company: Easy Hive Ltda, CNPJ 60.290.383/0001-01, São Paulo, SP, Brazil. Our postal address is available on request.

US state privacy rights notice

This section applies to residents of US states with consumer privacy laws that apply to us, such as California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Iowa, Indiana, Tennessee, Delaware, New Hampshire, New Jersey, Nebraska, Minnesota, Maryland, Kentucky and Rhode Island (the "State Privacy Laws"). In this section, "personal information" and "sensitive personal information" have the meanings those laws give them. Not every right is available in every state, and rights have exceptions.

Your rights. Depending on your state, you may have the right to:

• Know and access: the categories of personal information we collected, the sources, our purposes, the categories of third parties we disclosed it to, and a copy of the personal information we hold about you;
• Correct inaccurate personal information;
• Delete personal information we collected from you;
• Portability: receive your personal information in a portable format;
• Opt out of the sale of personal information, the sharing of it for cross-context behavioral advertising, targeted advertising, and profiling that produces legal or similarly significant effects;
• Appeal our decision on your request, by replying to our decision email with "Appeal" in the subject line; and
• Non-discrimination: we will not discriminate against you for exercising these rights.

What we do. In the past 12 months we have not sold personal information for money. We have used advertising tools that may count as "selling" or "sharing" for targeted advertising, as described in Advertising and the sale or sharing of data. We do not knowingly sell or share the personal information of consumers under 16. We do not use sensitive personal information to infer characteristics about you, and we do not engage in profiling that produces legal or similarly significant effects.

How to make a request. Email team@easyhive.pro with "Privacy request" in the subject line, or, for opt-outs, use Cookie settings on our site or a GPC signal. To protect you, we verify requests by matching the email address and details you give us with our records, and may ask for more information. You may use an authorized agent; we may ask the agent for proof of authority and ask you to confirm your identity directly. We respond within the time the law requires (usually 45 days).

Categories of personal information. In the past 12 months we collected the following categories, for the purposes described in How we use personal information:

California "Shine the Light". California residents may ask which third parties we disclosed personal information to for their own direct marketing in the prior year. We do not make such disclosures.

Notice to European users

This section applies if you are in the European Economic Area, the United Kingdom or Switzerland ("Europe").

Controller. Easy Hive Ltda is the controller of your personal data described in this policy, except where we process it for a client as described in Who we are and what this policy covers. Contact us at team@easyhive.pro.

Legal bases. We rely on:

Your rights. You may ask us to give you access to your personal data, correct it, delete it, restrict its processing, give you a portable copy, or stop processing it based on legitimate interests. You can object to direct marketing at any time, and where we rely on consent you can withdraw it at any time without affecting earlier processing. Email team@easyhive.pro. We reply within one month, which can be extended where the law allows.

Complaints. You can complain to the data protection authority where you live or work. In the UK this is the Information Commissioner's Office (ico.org.uk). EU authorities are listed at edpb.europa.eu. We would appreciate the chance to resolve your concern first.

Transfers. Your data is transferred outside Europe to Brazil and the United States, protected as described in International transfers. You can ask us for a copy of the safeguards we use.

Automated decisions. We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

Notice to users in Brazil (LGPD)

This section applies to the processing of personal data under Brazil's General Data Protection Law (Lei nº 13.709/2018, "LGPD").

Controller and contact. Easy Hive Ltda (CNPJ 60.290.383/0001-01) is the controller of the personal data described in this policy. You can reach the person responsible for data protection (encarregado) at team@easyhive.pro.

Legal bases. We process personal data on the bases in Article 7 of the LGPD, mainly: performance of a contract or preliminary steps at your request; compliance with legal or regulatory obligations; the regular exercise of rights; our legitimate interests, always respecting your fundamental rights; credit protection; and your consent, for marketing and for analytics and advertising cookies.

Your rights. Under Article 18 of the LGPD you may request: confirmation that we process your data; access to it; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary or excessive data or data processed against the LGPD; portability; deletion of data processed with your consent; information about the public and private entities we share data with; information about the possibility of not giving consent and its consequences; and withdrawal of consent. You may also ask for a review of decisions made solely by automated processing. Send requests to team@easyhive.pro.

International transfers. We transfer personal data to other countries, mainly the United States, to use the service providers named in this policy, under Article 33 of the LGPD and the rules of the National Data Protection Authority (ANPD), including standard contractual clauses where required.

Complaints. You can file a complaint with the ANPD (www.gov.br/anpd).