Privacy Policy

1. Scope

This Privacy Policy applies to personal data processed in connection with easycards.io and the EasyCards services that reference this policy. “EasyCards,” “we,” “us,” and “our” refer to the EasyCards operator identified in the Contact section. “Personal data” means information that identifies or can reasonably be linked to an individual.

It does not replace a customer’s own privacy obligations. If a business customer provides personal data to EasyCards, the customer remains responsible for giving required notices, obtaining any necessary permissions, and using the services lawfully.

2. Information we collect

Depending on the service and approved program, we may collect:

• Business and account information, such as names, work contact details, job titles, login details, account roles, and communication preferences.
• Onboarding and due-diligence information, such as business ownership, registration, tax, identity, sanctions, and verification information required for KYB, KYC, AML, risk, or regulatory reviews.
• Card program and cardholder information, such as cardholder identifiers, approved card profiles, limits, controls, status, and program configuration.
• Transaction and funding information, such as merchant name and category, amount, currency, timestamps, authorization status, settlement status, and related program records.
• Device and usage information, such as IP address, browser type, operating system, pages visited, referring URLs, timestamps, API request metadata, and security logs.
• Support and communications, including questions, feedback, recorded preferences, and information you choose to provide to our team.

Some onboarding or program information may be considered sensitive under applicable law. We process it only where needed for an approved service, compliance requirement, fraud prevention, or another permitted purpose.

3. Sources of information

We may receive personal data:

• directly from you or your organization;
• from authorized users, cardholders, or program managers;
• from issuing, banking, network, identity, compliance, risk, and other service partners;
• automatically when you use our website, portals, or APIs; and
• from public records or commercially available sources when permitted for verification, compliance, or fraud prevention.

4. How we use information

We use personal data to:

• provide, operate, maintain, and support the services;
• evaluate onboarding, eligibility, program configuration, and customer requests;
• process card program activity, instructions, authorizations, funding, settlement, disputes, and related records;
• verify identity and businesses, manage risk, detect fraud, and meet legal or partner requirements;
• secure accounts, investigate incidents, troubleshoot, and prevent abuse;
• communicate about services, changes, support, and relevant product updates;
• analyze and improve performance, reliability, usability, and program operations; and
• establish, exercise, or defend legal rights and comply with lawful requests.

5. How we share information

We may share personal data with:

• Your organization and authorized users as required to administer the account or card program.
• Program partners, including issuers, banks, networks, processors, funding providers, and wallet or tokenization providers, when required for an approved program.
• Service providers that support hosting, communications, identity verification, compliance, fraud prevention, analytics, support, and professional services.
• Authorities and other parties when reasonably necessary to comply with law, respond to lawful process, enforce agreements, protect rights or safety, or investigate suspected misconduct.
• Transaction participants in connection with a merger, financing, reorganization, acquisition, or sale of assets, subject to appropriate protections.

EasyCards does not sell personal data for monetary consideration. We do not use cardholder or transaction data for cross-context behavioral advertising.

6. Legal bases

Where applicable law requires a legal basis, we rely on one or more of the following: performance of a contract; compliance with legal obligations; legitimate interests such as security, fraud prevention, service improvement, and business operations; and consent where required. You may withdraw consent where consent is the basis, without affecting earlier lawful processing.

7. International transfers

EasyCards and its service or program partners may process information in countries other than the country where it was collected. Where required, we use contractual, organizational, or other legally recognized safeguards for international transfers.

8. Data retention

We retain personal data for as long as reasonably necessary to provide the services, administer an account or program, comply with financial and regulatory recordkeeping, resolve disputes, enforce agreements, prevent fraud, and protect legal rights. Retention periods vary by data type, program partner, contractual requirement, and applicable law.

When data is no longer required, we delete, anonymize, or otherwise handle it in accordance with our retention processes and legal obligations.

9. Security

We maintain administrative, technical, and organizational measures designed to protect personal data in proportion to its sensitivity and the relevant risk. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

For more information, see our Security page.

10. Privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection; withdraw consent; or appeal a decision. You may also have the right to complain to a data protection authority.

To make a request, contact us using the details below. We may need to verify your identity and authority. If EasyCards processes your information only on behalf of a business customer, we may direct the request to that customer.

11. Cookies and analytics

Our website may use cookies or similar technologies that are necessary for security, preferences, and operation. We may also use analytics to understand service performance and website use. Where consent is required for non-essential technologies, we will provide the applicable notice or controls.

Browser settings can limit cookies, but disabling required storage may affect website or service functionality.

12. Children

EasyCards services are intended for businesses and authorized program users, not children. We do not knowingly collect personal data directly from children through this website. Approved programs involving minors, if any, require separate program documentation and appropriate authorization.

13. Program partners

Card availability, transaction processing, wallet provisioning, compliance review, and related services may involve independent program partners. Those partners may determine how they process personal data for their own legal and operational purposes. Review the notices supplied with the applicable card program.

14. Changes to this policy

We may update this policy to reflect service, legal, or operational changes. We will post the revised version here and update the effective date. Where required, we will provide additional notice of material changes.

15. Contact us

Questions or requests about this policy can be sent to EasyCards.