Privacy Policy

What we collect

Your account email and authentication data (including the basic profile — name and email — returned when you sign in with Google); the lineage and family-tree information you enter or import (including any GEDCOM file you upload); your eligibility answers, checklist progress, and cost-tracker entries; and, if you buy a service, a payment confirmation from Stripe (never your card number). If you book or message an expert, we store the booking details and the messages exchanged in that thread.

Your phone number, if you book a call. When you book a call with your account manager we ask for a phone number as a backup way to reach you if the video link fails. We store it on your account, encrypted at the application layer with a dedicated key (see below), and our account-manager team can see it in our internal console so they can dial it. It is also written into the calendar invite for that call, which means it reaches Google Calendar and your own copy of the event. We use it to reach you about that call, and we keep a one-way fingerprint of it so that one person cannot book unlimited free calls across many accounts. We do not use it for anything else: no marketing, no text messages, and we do not share it with advertisers or any other third party. Experts you book paid work with are not shown it. It is deleted with the rest of your account.

Google Calendar data (experts)

What we access.Experts who offer bookings can connect a Google Calendar so clients only see times they're actually free. We connect through Nylas and access your calendar only to read free/busy availability and to create, update, or delete the calendar events for the bookings you receive. We do not read your email, message content, or contacts, and we do not read the titles, attendees, or details of your existing calendar events.

How we use it. Google Calendar data is used solely to provide the scheduling feature described above — to show your open times to clients and to place, reschedule, or cancel a confirmed booking on your calendar. It is never used for any other purpose.

Who we share it with. To provide scheduling we transfer your Google Calendar data to Nylas, our calendar-connectivity provider, which brokers the connection to Google on our behalf under its own security and data-protection commitments. We do not sell your Google Calendar data or share it with data brokers, advertisers, or any other third party for advertising, credit, or similar purposes.

What we store and for how long. We do not copy or store the contents of your calendar. We keep only the Nylas connection token (held as a server-side credential) and the identifiers of the booking events we created, for as long as your calendar stays connected. You can disconnect your calendar at any time in Admin → Availability; disconnecting revokes our Nylas grant so our access to Google ends immediately, and we delete the stored connection token. Disconnecting or deleting your account also stops all Google Calendar access.

EasyPassport's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Calendar data is never sold, never used for advertising, and never used to develop, improve, or train any AI/ML model, nor transferred to any third-party service that would use it to train its models.

Limited Use of Google Workspace data

EasyPassport's use of information received from Google Workspace APIs (including the Google Calendar API) will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google Workspace data only to provide and improve the user-facing scheduling features described above.
• We do not transfer or sell Google Workspace data to third parties, except as needed to provide those features (our calendar-connectivity provider, Nylas), to comply with applicable law, or as part of a merger or acquisition.
• We do not use Google Workspace data for serving advertisements, and we do not allow humans to read it unless we have your affirmative consent for specific data, it is necessary for security purposes (such as investigating abuse), or we are required to by law.
• We do not use Google Workspace data to develop, improve, or train generalized or non-personalized AI and/or ML models, and we do not transfer it to any third-party tool or service that would use it to train such models.

Scope of our Google API use

The only Google API EasyPassport uses is the Google Calendar API, and its only purpose is the expert scheduling feature described above. We do notuse the Gmail, Drive, Chat, Meet, Data Portability, Photos, or YouTube APIs, and our use of Google data does not involve any of Google's prohibited use cases. In particular, we do not send commercial or cold email through Google, offer email warming, use any Google service as a content-delivery network, or reward users for interacting with content. Every Google Calendar action we take is initiated by the expert who connected the calendar, to place, update, or cancel a booking.

What we never collect

We do not store passports, government IDs, or identity documents. EasyPassport is a guidance, organization, and scheduling tool — not a document vault.

How we use your data

To provide the product: generate eligibility guidance, save your tree and checklist, match you with experts, schedule and run bookings, process payments and expert payouts, and send transactional email. We do not sell your personal data.

Advertising measurement. We advertise on Google, and we use Google Ads conversion tracking and remarketing to see which ads bring people to EasyPassport. The advertising tag receives standard web measurement signals — the address of the page you are on, and whether a visit resulted in a signup or a purchase (with the amount). It does not receive your family tree, your documents, your eligibility results, or anything you type into the product. In the EEA, the UK and Switzerland this is off unless you accept it; elsewhere you can turn it off at any time from the control on the Cookie Policy page.

How we protect your data

We recognize that some of the information you provide is sensitive — including heritage and ancestry details, and the Google Calendar free/busy data experts connect. We protect all of it, and sensitive data in particular, with the following mechanisms:

• Encryption in transit.All traffic between your browser or an expert's device and our servers, and between our servers and every processor listed below, is encrypted with TLS (HTTPS). We do not transmit personal data over unencrypted channels.
• Encryption at rest. Your data is stored in a managed database (Neon) that encrypts data at rest. Especially sensitive fields are additionally encrypted at the application layer with AES-256-GCM using dedicated keys that are kept separate from our authentication secrets.
• Access controls. Access to your account data requires authentication, and application-level authorization checks restrict each request to only the data that account is entitled to see. Administrative and processor access is limited to the minimum needed to operate the service.
• Data minimization. We collect only what the product needs and deliberately do not store passports, government IDs, or identity documents. Google Calendar access is limited to reading free/busy availability and managing booking events — we never access your email, message content, or contacts.
• Vetted processors. We share data only with the established providers listed below, each of which maintains its own industry-standard security and data-protection commitments.

No system can be guaranteed perfectly secure, but we work to protect your information using these safeguards and review them as the product evolves. If you have a security concern, contact privacy@easypassport.co.

Processors

We share data only with the providers that run the product: Neon (database), Stripe (payments and expert payouts), Nylas and Google (calendar scheduling for experts), Vercel (hosting and privacy-respecting analytics), Resend (transactional email), Intercom (in-app support chat, which receives your name, email and account id), Sentry (error monitoring), and Google (Google Ads conversion measurement and remarketing — see Cookies below).

Cookies

Essential cookies for authentication, aggregate analytics that does not identify you across sites, and — with your consent — Google Ads cookies that let us see which advertising brings people here. In the EEA, the UK and Switzerland the advertising cookies are off by default; elsewhere you can reject them at any time using the control on the Cookie Policy page. If your browser sends a Global Privacy Control signal we treat that as a rejection automatically. Full detail is in the Cookie Policy.

Retention

If you start using EasyPassport without signing up, we create a workspace for you with no email address attached to it. That workspace is not permanent: we delete it — the account and everything in it, including the family details you entered — 60 days after it is created, unless you are still using it. While you keep coming back we keep it; once you stop, it is deleted on the next sweep after that. Because we have no address for you we cannot warn you first, so adding an email address is what makes the workspace yours and keeps it either way.

We keep your data for as long as your account is active. Waitlist emails are deleted within 90 days of the launch notification for the country you signed up for; if that country has not launched, we keep your email until it does or until you ask us to remove it — write to us and we will delete it. On account deletion we remove your data within 30 days, except records we must retain for legal, tax, or payment-dispute reasons.

If you ask us to tell you when a country's citizenship law changes, we store that email address against that country and nothing else — no account, no answers, no IP. Nothing is sent until you click the confirmation link we email you, which is how we make sure nobody can sign up an address they do not own; an unconfirmed address is deleted within 30 days. Once confirmed we keep it until you ask us to delete it. Every message carries a one-click unsubscribe link, which stops the emails immediately; it suppresses your address rather than erasing the record that you subscribed, so if you want it deleted outright, write to us and we will remove it.

Your choices

You can edit or delete your tree and checklist data, disconnect a connected Google Calendar, and request account deletion at any time. To exercise any of these, contact privacy@easypassport.co.