01Introduction
This Privacy Policy is issued by EasyEcom (“EasyEcom”, “we”, “our”, “us”). EasyEcom is committed to protecting the privacy and integrity of the information entrusted to us. This Privacy Policy explains how we collect, use, process, and safeguard information in connection with our platform, products, and services.
EasyEcom is an omnichannel order, inventory, and warehouse management platform that helps e-commerce brands, retailers, and third-party logistics (3PL) providers manage and fulfill orders across marketplaces, webstores, and offline channels. In delivering these services, we process information both as a service provider to businesses and, in certain cases, as a direct operator of our platform. We recognize the responsibility that comes with handling commercial and customer data and apply appropriate safeguards to ensure that data is handled securely, lawfully, and transparently.
By accessing or using EasyEcom's website or services, you agree to the practices described in this Privacy Policy. For details on how to reach us, including our designated privacy contact, please see the Contact section at the end of this document.
02Information we collect
We collect information that is necessary to provide, maintain, improve, and secure EasyEcom's platform and services. The type of information we collect depends on how businesses, users, and visitors interact with EasyEcom.
Information you provide directly
We collect information that you voluntarily provide when you create an account, request a demo, contact us, subscribe to communications, or use our services. This may include:
- Name and designation
- Business or company information
- Email address and contact details
- Billing, subscription, and account-related information
- Marketplace, webstore, courier, and other integration credentials or access tokens you authorize us to connect
- Any other information you choose to share with us during onboarding, support interactions, or communications
We use this information to set up and manage accounts, configure integrations, provide support, communicate with users, and deliver our services effectively.
Usage and technical information
When users access or interact with EasyEcom, we automatically collect certain technical and usage-related information to help us understand platform performance, improve user experience, and maintain security. This may include:
- Device type and operating system
- Browser type and version
- IP address and approximate geographic location
- Log data and session activity
- Pages and features accessed and navigation patterns
- Referral sources and interaction timestamps
- Performance, error, and diagnostic information
This information helps us analyze how the platform is used, identify issues, optimize functionality, and improve the overall reliability and effectiveness of our services.
Order, inventory, and end-customer data
EasyEcom is designed to process orders, inventory, shipments, and related commercial operations on behalf of the businesses that use our platform. As part of these services, we may process data that flows through connected marketplaces, webstores, sales channels, and logistics systems. This may include:
- Order and transaction details
- End-customer information such as names, shipping and billing addresses, contact numbers, and email addresses
- Product, SKU, catalog, and inventory data
- Shipment, tracking, and fulfillment information
- Payment reconciliation and settlement data (we do not store complete card or financial credentials)
- Returns, cancellations, and customer communication records
In these cases, EasyEcom generally processes this information on behalf of the businesses using our platform, and those businesses remain responsible for determining how the data is collected and used within their own operations and customer relationships.
We do not collect more information than is reasonably necessary for the purposes described in this Privacy Policy, and we strive to ensure that data collection practices remain proportionate, transparent, and aligned with applicable privacy standards.
03How we use information
We use the information we collect to operate, maintain, and improve EasyEcom's platform and services. This includes processing and routing orders, synchronizing inventory across channels, enabling warehouse and fulfillment operations, supporting accounting and reconciliation workflows, managing user accounts, and ensuring reliable platform performance.
Information is also used to provide customer support, respond to inquiries, communicate important service updates, and improve the overall user experience by understanding how the platform is used.
In addition, we use information to maintain the security and integrity of our services, detect unauthorized or fraudulent activity, troubleshoot technical issues, enforce our policies, and comply with applicable legal, tax, and regulatory obligations.
Where appropriate, we may use aggregated or de-identified data for analytics, research, and product improvement purposes.
04Data processing and responsibility
Depending on the nature of the service and the data involved, EasyEcom may act either as a data processor or a data controller.
When businesses use EasyEcom to manage orders, inventory, fulfillment, and related operations, we process the associated data, including end-customer data, on their behalf and in accordance with their instructions. In these situations, the business using EasyEcom remains the data controller and is responsible for determining how data is collected, used, and managed, while EasyEcom acts as the data processor.
For information related to our own operations, such as account registration, business contact details, billing information, support communications, and platform administration, EasyEcom acts as the data controller. In these cases, we are responsible for determining how and why such information is processed.
Where required by applicable law, our processing of business customer data is governed by a data processing agreement that sets out each party's responsibilities. We handle all data with appropriate safeguards and process information only for legitimate and defined purposes consistent with the services we provide.
05Legal bases for processing
For individuals in the European Union, the European Economic Area, and the United Kingdom, we rely on the following lawful bases under the GDPR and UK GDPR when processing personal data as a data controller. The applicable basis depends on the purpose of processing:
| Purpose of processing | Lawful basis |
|---|---|
| Creating and managing accounts and delivering the platform and services | Performance of a contract |
| Billing, invoicing, and processing payments | Performance of a contract; Legal obligation |
| Providing customer support and responding to requests | Performance of a contract; Legitimate interests |
| Maintaining platform security and preventing fraud | Legitimate interests; Legal obligation |
| Analytics, research, and product improvement | Legitimate interests; Consent where required |
| Sending marketing or promotional communications | Consent; Legitimate interests |
| Meeting legal, tax, and regulatory requirements | Legal obligation |
| Processing end-customer data within the platform | Carried out on the documented instructions of the business customer (data controller) |
Where we rely on consent, you may withdraw it at any time. Where we rely on legitimate interests, we balance those interests against your rights and freedoms.
06AI and automated processing
EasyEcom uses AI and automated technologies to support operational efficiency across the platform, for example demand and inventory forecasting, order routing and allocation, anomaly and fraud detection, reconciliation, and workflow automation. These systems may process inputs such as order data, inventory levels, fulfillment signals, and usage patterns to generate outputs that help businesses operate more efficiently.
Our AI and automated systems are designed to operate within defined functional boundaries and process only the information necessary to deliver the intended capability. We continuously work to improve the accuracy, relevance, and reliability of these systems while maintaining appropriate safeguards around data handling and platform security.
In cases where third-party AI or infrastructure providers are involved, data processing may also be subject to the policies, terms, and security practices of those providers. EasyEcom evaluates such providers carefully and works with partners that support responsible and secure data processing standards.
08Subprocessors
To deliver our services, EasyEcom engages third-party companies known as subprocessors to perform certain functions on our behalf. We use subprocessors across categories such as:
- Cloud hosting and infrastructure services
- Communication, email, and notification delivery services
- Analytics, logging, and performance monitoring services
- Payment processing and reconciliation services
- Customer support and ticketing tools
- Security, backup, and fraud-prevention services
Each subprocessor is engaged under contractual terms that require it to protect personal data in a manner consistent with this Privacy Policy and applicable data protection laws, and to process data only as needed to provide the relevant service. EasyEcom remains responsible for the personal data we entrust to our subprocessors.
A current list of subprocessors is available to business customers on request, and we take reasonable steps to inform affected customers of material changes to our subprocessors where required.
09International data transfers
EasyEcom serves customers globally and may process and store information in countries other than the one in which you or your end customers are located. Where information is transferred across borders, we take appropriate steps to ensure it remains protected and that such transfers are carried out in accordance with applicable data protection laws, including, where required, the use of recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses or equivalent safeguards. EasyEcom offers multi-country data residency: customer accounts can be provisioned to store platform data in India, the United States, the EU, the UK or APAC, and the chosen region is honored for that account’s processing.
10Data retention
We retain information only for as long as necessary to provide our services, support legitimate business and operational needs, comply with legal, tax, and contractual obligations, and resolve disputes where required. When a customer relationship ends, customer personal data is deleted on written request within 90 days of termination, as committed in our Data Processing Addendum, except where retention is required by law.
The period for which we retain information depends on several factors, including the type of information involved, the purpose for which it was collected, the nature of the services being provided, and whether a legal, tax, regulatory, or contractual obligation requires us to keep it. In general, we retain account and business information for as long as a customer maintains an active relationship with us and for a reasonable period afterward to meet ongoing obligations.
Where EasyEcom processes data on behalf of a business customer, that data is retained in line with the customer's instructions and our agreement with them, and is deleted or returned following termination of the service, subject to any retention required by law. Residual copies may persist in routine backups for a limited time before being cycled out.
When information is no longer required, we take reasonable steps to securely delete, anonymize, or otherwise dispose of it in accordance with applicable laws and industry practices.
11Security
EasyEcom implements appropriate technical and organizational measures to protect information against unauthorized access, misuse, alteration, disclosure, or loss. These measures include access controls, encryption, secure infrastructure practices, and ongoing monitoring of platform and system activity.
We regularly review and strengthen our security practices to adapt to evolving technologies, operational requirements, and potential threats. Access to information is limited to authorized personnel and service providers who require it to perform legitimate business functions.
While we work to maintain a secure environment and follow industry-standard safeguards, no method of transmission or storage can be guaranteed to be completely secure. Accordingly, users should also take appropriate precautions to protect their account credentials and sensitive information.
13Children's privacy
EasyEcom's platform and services are intended for businesses and their authorized personnel, and are not directed to children. We do not knowingly collect personal information directly from children. Where applicable law requires parental or guardian consent for processing a child's personal data, EasyEcom will obtain or rely on such consent where required.
If we become aware that we have inadvertently collected personal information from a child without appropriate consent, we will take reasonable steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us using the details in the Contact section so we can take appropriate action.
14Your rights
Depending on applicable laws and regulations, you may have certain rights regarding your personal information. These may include the right to access, correct, update, delete, or request a copy of your information, as well as the right to restrict or object to certain types of processing. Where applicable, you may also have the right to withdraw consent for specific processing activities or request that your information be transferred to another service provider.
Where EasyEcom processes end-customer data on behalf of a business customer, requests from those end customers should generally be directed to the business that controls the data. We will support our business customers in responding to such requests as required.
15How to exercise your rights
To make a privacy request, please follow the steps below:
- Send your request to privacy@easyecom.io, describing the right you wish to exercise and the information it relates to.
- We may ask you to verify your identity before we act on the request, in order to protect your information from unauthorized access.
- We will acknowledge your request and respond within the timeframe required by applicable law, and we will let you know if we need additional time or information.
- If your request concerns data we process on behalf of a business customer, we will direct it to, or coordinate with, that business as the responsible controller.
- If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection or supervisory authority.
We do not charge a fee for most requests and we will not discriminate against you for exercising your privacy rights.
16Regional privacy disclosures
India (Digital Personal Data Protection Act, 2023)
If you are located in India, we process personal data in accordance with the Digital Personal Data Protection Act, 2023. You have the right to access, correct, and erase your personal data, to nominate another individual to exercise your rights, and to grievance redressal. We process personal data on the basis of consent or other lawful grounds permitted under the Act. Grievances may be addressed to our designated contact named in the Contact section.
European Union and United Kingdom (GDPR / UK GDPR)
If you are located in the EU, EEA, or UK, we process personal data in accordance with the General Data Protection Regulation and the UK GDPR. We rely on the lawful bases set out in the Legal bases for processing section. You have the right to access, rectify, erase, restrict, or object to processing, the right to data portability, the right to withdraw consent, and the right to lodge a complaint with your local supervisory authority.
United States (CCPA / CPRA and other state laws)
If you are a California resident, you have the right to know what personal information we collect, to access and delete that information, to correct inaccurate information, and to opt out of the sale or sharing of personal information. EasyEcom does not sell personal information. We will not discriminate against you for exercising any of your privacy rights. Residents of other US states with applicable privacy laws may have similar rights, which can be exercised using the process described above.
17Third-party services
EasyEcom may integrate with or rely on third-party platforms, marketplaces, tools, infrastructure providers, and services to support certain features, functionalities, or operational requirements. When users interact with such third-party services, the collection and processing of information may also be governed by the respective privacy policies and terms of those providers.
While we carefully evaluate the third-party services we work with, EasyEcom does not control and is not responsible for the privacy practices, content, security measures, or policies of external platforms and services. We encourage users and customers to review the privacy policies of any third-party services they choose to access or integrate with through EasyEcom.
18Changes to this policy
We may update or revise this Privacy Policy from time to time to reflect changes in our services, technologies, legal obligations, or operational practices. When material changes are made, we will take appropriate steps to notify users through the platform, website, or other reasonable communication channels where required.
The updated version of this Privacy Policy will become effective from the date specified at the top of the document. Continued access to or use of EasyEcom's platform and services after such updates constitutes acknowledgment and acceptance of the revised policy.
19Contact
If you have any questions, concerns, or requests related to this Privacy Policy or the way information is handled on EasyEcom, please contact us using the details below.
We will make reasonable efforts to respond to inquiries and requests in a timely manner and in accordance with applicable laws and regulations.