EasyPassport logoEasyPassport

Privacy Policy

Last updated 2026-07-15

What we collect

Your account email and authentication data (including the basic profile — name and email — returned when you sign in with Google); the lineage and family-tree information you enter or import (including any GEDCOM file you upload); your eligibility answers, checklist progress, and cost-tracker entries; and, if you buy a service, a payment confirmation from Stripe (never your card number). If you book or message an expert, we store the booking details and the messages exchanged in that thread.

Google Calendar data (experts)

What we access.Experts who offer bookings can connect a Google Calendar so clients only see times they're actually free. We connect through Nylas and access your calendar only to read free/busy availability and to create, update, or delete the calendar events for the bookings you receive. We do not read your email, message content, or contacts, and we do not read the titles, attendees, or details of your existing calendar events.

How we use it. Google Calendar data is used solely to provide the scheduling feature described above — to show your open times to clients and to place, reschedule, or cancel a confirmed booking on your calendar. It is never used for any other purpose.

Who we share it with. To provide scheduling we transfer your Google Calendar data to Nylas, our calendar-connectivity provider, which brokers the connection to Google on our behalf under its own security and data-protection commitments. We do not sell your Google Calendar data or share it with data brokers, advertisers, or any other third party for advertising, credit, or similar purposes.

What we store and for how long. We do not copy or store the contents of your calendar. We keep only the Nylas connection token (held as a server-side credential) and the identifiers of the booking events we created, for as long as your calendar stays connected. You can disconnect your calendar at any time in Admin → Availability; disconnecting revokes our Nylas grant so our access to Google ends immediately, and we delete the stored connection token. Disconnecting or deleting your account also stops all Google Calendar access.

EasyPassport's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Calendar data is never sold, never used for advertising, and never used to develop, improve, or train any AI/ML model, nor transferred to any third-party service that would use it to train its models.

Limited Use of Google Workspace data

EasyPassport's use of information received from Google Workspace APIs (including the Google Calendar API) will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We use Google Workspace data only to provide and improve the user-facing scheduling features described above.
  • We do not transfer or sell Google Workspace data to third parties, except as needed to provide those features (our calendar-connectivity provider, Nylas), to comply with applicable law, or as part of a merger or acquisition.
  • We do not use Google Workspace data for serving advertisements, and we do not allow humans to read it unless we have your affirmative consent for specific data, it is necessary for security purposes (such as investigating abuse), or we are required to by law.
  • We do not use Google Workspace data to develop, improve, or train generalized or non-personalized AI and/or ML models, and we do not transfer it to any third-party tool or service that would use it to train such models.

Scope of our Google API use

The only Google API EasyPassport uses is the Google Calendar API, and its only purpose is the expert scheduling feature described above. We do notuse the Gmail, Drive, Chat, Meet, Data Portability, Photos, or YouTube APIs, and our use of Google data does not involve any of Google's prohibited use cases. In particular, we do not send commercial or cold email through Google, offer email warming, use any Google service as a content-delivery network, or reward users for interacting with content. Every Google Calendar action we take is initiated by the expert who connected the calendar, to place, update, or cancel a booking.

What we never collect

We do not store passports, government IDs, or identity documents. EasyPassport is a guidance, organization, and scheduling tool — not a document vault.

How we use your data

To provide the product: generate eligibility guidance, save your tree and checklist, match you with experts, schedule and run bookings, process payments and expert payouts, and send transactional email. We do not sell your personal data or use it for third-party advertising.

How we protect your data

We recognize that some of the information you provide is sensitive — including heritage and ancestry details, and the Google Calendar free/busy data experts connect. We protect all of it, and sensitive data in particular, with the following mechanisms:

  • Encryption in transit.All traffic between your browser or an expert's device and our servers, and between our servers and every processor listed below, is encrypted with TLS (HTTPS). We do not transmit personal data over unencrypted channels.
  • Encryption at rest. Your data is stored in a managed database (Neon) that encrypts data at rest. Especially sensitive fields are additionally encrypted at the application layer with AES-256-GCM using dedicated keys that are kept separate from our authentication secrets.
  • Access controls. Access to your account data requires authentication, and application-level authorization checks restrict each request to only the data that account is entitled to see. Administrative and processor access is limited to the minimum needed to operate the service.
  • Data minimization. We collect only what the product needs and deliberately do not store passports, government IDs, or identity documents. Google Calendar access is limited to reading free/busy availability and managing booking events — we never access your email, message content, or contacts.
  • Vetted processors. We share data only with the established providers listed below, each of which maintains its own industry-standard security and data-protection commitments.

No system can be guaranteed perfectly secure, but we work to protect your information using these safeguards and review them as the product evolves. If you have a security concern, contact privacy@easypassport.co.

Processors

We share data only with the providers that run the product: Neon (database), Stripe (payments and expert payouts), Nylas and Google (calendar scheduling for experts), Vercel (hosting and privacy-respecting analytics), and Resend (transactional email).

Cookies

We use essential cookies for authentication and anonymous analytics only. No advertising or tracking cookies. Anonymous wizard progress is kept in your browser for 14 days.

Retention

We keep your data for as long as your account is active. Waitlist emails are deleted within 90 days of launch notification. On account deletion we remove your data within 30 days, except records we must retain for legal, tax, or payment-dispute reasons.

Your choices

You can edit or delete your tree and checklist data, disconnect a connected Google Calendar, and request account deletion at any time. To exercise any of these, contact privacy@easypassport.co.