Privacy Policy

What we collect

Your account email and authentication data (including the basic profile — name and email — returned when you sign in with Google); the lineage and family-tree information you enter or import (including any GEDCOM file you upload); your eligibility answers, checklist progress, and cost-tracker entries; and, if you buy a service, a payment confirmation from Stripe (never your card number). If you book or message an expert, we store the booking details and the messages exchanged in that thread.

Your phone number. When you open a case we ask for a phone number so a specialist can reach you about it. We store it on your account, encrypted at the application layer with a dedicated key (see below), and our account-manager team can see it in our internal console so they can dial it. If you book a call with your account manager, the same number is the backup way to reach you if the video link fails, and it is written into the calendar invite for that call, which means it reaches Google Calendar and your own copy of the event. We keep a one-way fingerprint of it so that one person cannot book unlimited free calls across many accounts. We do not use it for anything else: no marketing, no text messages, and we do not share it with advertisers or any other third party. Experts you book paid work with are not shown it. It is deleted with the rest of your account.

An email address you have typed but not yet confirmed. When we ask for your email address to save a case, we store what you type before you confirm it, so that you do not lose your place if you come back later. Until you confirm it, we treat it as unconfirmed: we never send anything to it, and it does not sign you in anywhere. Our account-manager team can see it, so that they can follow up on a case that was started and never finished. We delete it as soon as you confirm your address — at that point the confirmed address is the one on your account — and we also delete it if it turns out to belong to someone else's account. If you never come back, it is deleted with the unconfirmed workspace it belongs to, on the same schedule described under Retention below.

Google Calendar data (experts)

What we access. Experts who offer bookings can connect a Google Calendar so clients only see times they're actually free. We connect through Nylas and access your calendar only to read free/busy availability and to create, update, or delete the calendar events for the bookings you receive. We do not read your email, message content, or contacts, and we do not read the titles, attendees, or details of your existing calendar events.

How we use it. Google Calendar data is used solely to provide the scheduling feature described above — to show your open times to clients and to place, reschedule, or cancel a confirmed booking on your calendar. It is never used for any other purpose.

Who we share it with. To provide scheduling we transfer your Google Calendar data to Nylas, our calendar-connectivity provider, which brokers the connection to Google on our behalf under its own security and data-protection commitments. We do not sell your Google Calendar data or share it with data brokers, advertisers, or any other third party for advertising, credit, or similar purposes.

What we store and for how long. We do not copy or store the contents of your calendar. We keep only the Nylas connection token (held as a server-side credential) and the identifiers of the booking events we created, for as long as your calendar stays connected. You can disconnect your calendar at any time in Admin → Availability; disconnecting revokes our Nylas grant so our access to Google ends immediately, and we delete the stored connection token. Disconnecting or deleting your account also stops all Google Calendar access.

EasyPassport's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Calendar data is never sold, never used for advertising, and never used to develop, improve, or train any AI/ML model, nor transferred to any third-party service that would use it to train its models.

Limited Use of Google Workspace data

EasyPassport's use of information received from Google Workspace APIs (including the Google Calendar API) will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google Workspace data only to provide and improve the user-facing scheduling features described above.
• We do not transfer or sell Google Workspace data to third parties, except as needed to provide those features (our calendar-connectivity provider, Nylas), to comply with applicable law, or as part of a merger or acquisition.
• We do not use Google Workspace data for serving advertisements, and we do not allow humans to read it unless we have your affirmative consent for specific data, it is necessary for security purposes (such as investigating abuse), or we are required to by law.
• We do not use Google Workspace data to develop, improve, or train generalized or non-personalized AI and/or ML models, and we do not transfer it to any third-party tool or service that would use it to train such models.

Scope of our Google API use

The only Google API EasyPassport uses is the Google Calendar API, and its only purpose is the expert scheduling feature described above. We do not use the Gmail, Drive, Chat, Meet, Data Portability, Photos, or YouTube APIs, and our use of Google data does not involve any of Google's prohibited use cases. In particular, we do not send commercial or cold email through Google, offer email warming, use any Google service as a content-delivery network, or reward users for interacting with content. Every Google Calendar action we take is initiated by the expert who connected the calendar, to place, update, or cancel a booking.

What we never collect

We do not store passports, government IDs, or identity documents. EasyPassport is a guidance, organization, and scheduling tool — not a document vault.

How we use your data

To provide the product: generate eligibility guidance, save your tree and checklist, match you with experts, schedule and run bookings, process payments and expert payouts, and send transactional email. We do not sell your personal data.

Advertising measurement. We advertise on Google, and we use Google Ads conversion tracking and remarketing to see which ads bring people to EasyPassport. The advertising tag receives standard web measurement signals — the address of the page you are on, and whether a visit resulted in a signup or a purchase (with the amount). It does not receive your family tree, your documents, your eligibility results, or anything you type into the product. In the EEA, the UK and Switzerland this is off unless you accept it; elsewhere you can turn it off at any time from the control on the Cookie Policy page.

Using EasyPassport from an AI assistant. If you use EasyPassport through an AI assistant such as Claude or ChatGPT, by adding our connector to it or by giving it one of our research guides, we receive only what the assistant's request needs: for an eligibility check, the country and the answer choices you picked from our list of options (never your name, your email address or anything you typed in your own words); for a guide, which guide it asked for. Like any request to our servers, it also carries the network address it came from (usually the assistant provider's, not yours), which we use only to limit how often the connector can be called. We record those answers without your name or email address, as we do for the check on this website. The connector has no access to an EasyPassport account. If you follow the link your assistant gives you to continue on our website, your answers come with it and are treated like answers you give on the website; if you then save them to a new workspace, we also record on it that it started from an assistant's link. Everything else you say in the chat is between you and the assistant provider, whose own terms and privacy policy apply to it.

How we protect your data

We recognize that some of the information you provide is sensitive — including heritage and ancestry details, and the Google Calendar free/busy data experts connect. We protect all of it, and sensitive data in particular, with the following mechanisms:

• Encryption in transit. All traffic between your browser or an expert's device and our servers, and between our servers and every processor listed below, is encrypted with TLS (HTTPS). We do not transmit personal data over unencrypted channels.
• Encryption at rest. Your data is stored in a managed database (Neon) that encrypts data at rest. Especially sensitive fields are additionally encrypted at the application layer with AES-256-GCM using dedicated keys that are kept separate from our authentication secrets.
• Access controls. Access to your account data requires authentication, and application-level authorization checks restrict each request to only the data that account is entitled to see. Administrative and processor access is limited to the minimum needed to operate the service.
• Data minimization. We collect only what the product needs and deliberately do not store passports, government IDs, or identity documents. Google Calendar access is limited to reading free/busy availability and managing booking events — we never access your email, message content, or contacts.
• Vetted processors. We share data only with the established providers listed below, each of which maintains its own industry-standard security and data-protection commitments.

No system can be guaranteed perfectly secure, but we work to protect your information using these safeguards and review them as the product evolves. If you have a security concern, contact privacy@easypassport.co.

Processors

We share data only with the providers that run the product: Neon (database), Stripe (payments and expert payouts), Nylas and Google (calendar scheduling for experts), Vercel (hosting and privacy-respecting analytics), Resend (transactional email), Intercom (in-app support chat, which receives your name, email and account id), Sentry (error monitoring), and Google (Google Ads conversion measurement and remarketing — see Cookies below).

Cookies

Essential cookies for authentication, aggregate analytics that does not identify you across sites, and — with your consent — Google Ads cookies that let us see which advertising brings people here. In the EEA, the UK and Switzerland the advertising cookies are off by default; elsewhere you can reject them at any time using the control on the Cookie Policy page. If your browser sends a Global Privacy Control signal we treat that as a rejection automatically. Full detail is in the Cookie Policy.

Retention

If you start using EasyPassport without signing up, we create a workspace for you with no email address attached to it. That workspace is not permanent: we delete it — the account and everything in it, including the family details you entered — 60 days after it is created, unless you are still using it. While you keep coming back we keep it; once you stop, it is deleted on the next sweep after that. If you have not given us an email address we cannot warn you first, so confirming an email address is what makes the workspace yours and keeps it either way. If you typed an address but never confirmed it, we hold it as described above but still do not send to it — so we cannot warn you on that address either.

We keep your data for as long as your account is active. Waitlist emails are deleted within 90 days of the launch notification for the country you signed up for; if that country has not launched, we keep your email until it does or until you ask us to remove it — write to us and we will delete it. On account deletion we remove your data within 30 days, except records we must retain for legal, tax, or payment-dispute reasons.

If you ask us to tell you when a country's citizenship law changes, we store that email address against that country and nothing else — no account, no answers, no IP. Nothing is sent until you click the confirmation link we email you, which is how we make sure nobody can sign up an address they do not own; an unconfirmed address is deleted within 30 days. Once confirmed we keep it until you ask us to delete it. Every message carries a one-click unsubscribe link, which stops the emails immediately; it suppresses your address rather than erasing the record that you subscribed, so if you want it deleted outright, write to us and we will remove it.

Your choices

You can edit or delete your tree and checklist data, disconnect a connected Google Calendar, and request account deletion at any time. To exercise any of these, contact privacy@easypassport.co.