Easygenerator respects the privacy of its customers (clients) and their data subjects; and want you to understand how we collect, use, and share data about you. This privacy policy covers our data collection practices and describes your rights to access, correct, or restrict our use of your personal data.

Unless we link to a different policy or state otherwise, this privacy policy applies when you visit or use the Easygenerator web application, APIs or related services (the “Services”). It also applies to representatives of prospective customers of our business and enterprise products.

Services

The “Services” includes:

By using the services, you agree to the terms of this privacy policy.
You shouldn’t use the services if you don’t agree with this privacy policy or any other agreement that governs your use of the services.

1. What data we get

Easygenerator collects and processes personal data of customer representatives directly dealing with Easygenerator for contractual engagements. While availing Easygenerator application services, customers let Easygenerator process personal data of their end users although neither Easygenerator nor any sub-processor has direct access to any of their courses or personal data except in the case as mandated for help and support purposes for which the user gives explicit consent. Easygenerator collects certain personal data from you directly, like information you enter yourself, data about your consumption of content, and data from third-party platforms you connect with Easygenerator. We also collect some data automatically, like information about your device and what parts of our Services you interact with or spend time using.

1.1 Data you provide to us

We collect different data from or about you depending on how you use the services. Below are some examples to help you better understand the data we collect.

When you create an account and use the services, including through a third-party platform, we collect any data you provide directly, including:

Account data	In order to use certain features, you need to create a user account as an admin, author or learner. When you create or update your account, we process and store the data you provide like your email address, password, phone number, occupation, company name and account settings and assign you a unique identifying number.
Profile data	You can also choose to provide profile information like a photo, name, email, phone number.
Shared content	Course content created by authors will be shared among learners. Parts of the services let you interact with other users or share content including questions/answers in courses, course scores, learners’ satisfaction score.
Communications and support	If you contact us for support or to report a problem or concern (regardless of whether you have created an account), we collect and store your contact information, and other data about you like your name, email address, location, user ID, and any other related data you provide or that we collect through automated means (which we cover below). We use this data to respond to you and research your question or concern, in accordance with this Privacy Policy.
Additional services	If you participate in other services like customer satisfaction surveys, Easygenerator and our sub-processor will be able to process your personal data like name, job title, company details, email and phone number. If you use AI-powered add-on services, please refer to the EasyAI addendum for details.

The data listed above is stored by us and associated with your account.

1.2 Data we collect through automated means

When you access the Services (including browsing content), we collect certain data by automated means, including:

System data	Technical data about your computer or device like your mobile device used, operating system, internet provider, date and time of login and logoff, cookie IDs, IP address, device type, operating system type and version, unique device identifiers, browser, browser language, domain and other systems data, and platform types.
Usage data	Usage statistics about your interactions with the Services, including content accessed, time spent on pages or the Service, pages visited, features used, your search queries, click data, date and time, referrer, and other data regarding your use of the Services.
Approximate geographic data	An approximate geographic location, including information like country, city, and geographic coordinates, calculated based on your IP address.

2. How we get data about you

Data is mostly fed by the authors/learners into the application and stored on our cloud servers.

System data like user ID, mobile device used, operating system, internet provider, date and time of login and logoff, cookie IDs will be automatically collected from the end users and processed by the application.

Personal data is also processed by our suppliers via their respective applications. We have a legal base either as a contractual requirement, legitimate interest or exclusive consent for the processing of personal data.

3. What we use your data for

We use your data to provide our services, communicate with you, troubleshoot issues, improve and update our services, analyze how people use our services, and as required by law or necessary for safety and integrity. We consider that the legal bases for the processing of your personal data as set out in this privacy notice are as follows:

Our use of your personal data is necessary to perform our obligations under any contract with you (for example, to comply with the terms of use of our site which you accept by browsing our website and/or to comply with our contract to provide Services to you, your organization, your employer that may be providing you with access to our Services); or
Our use of your personal data is necessary for complying with our legal obligations; or
Our use of your personal data is necessary for our legitimate interests or the legitimate interests of our sub-processors. Our legitimate interests are to:
- run, grow and develop our business;
- operate our website and provide our services;
- provide onboarding and support to customers;
- for internal administrative and auditing purposes.
Consent, to send you certain communications or where you submit certain information to us, or where required to rely upon consent by privacy law.

4. Who we share your data with

With a legal basis for processing personal data like legitimate purpose, we share certain data about you with authors/learners, suppliers (sub-processors) performing services for us, Easygenerator affiliates.

We may also share your data as needed for security, legal compliance, or as part of a corporate restructuring. Lastly, we can share data for other business purposes only if we have your exclusive consent. The authoritative list of sub-processors is provided in the Trust Center – Easygenerator.

5. If you are a job applicant

At Easygenerator, we are committed to protecting the privacy and confidentiality of the personal data of job applicants. This Privacy Policy explains how we collect, use, store, and safeguard your personal data during the recruitment process.

Please read this policy carefully before submitting your application. By applying for a position with us, you agree to the collection and processing of your personal data as outlined in this policy.

5.1 What data we collect
We collect personal information to process your job application. This may include but is not limited to:

Personal Identification Information: Name, address, email, phone number.
Professional Information: Resume, work history, qualifications, references.
Job Application Information: Responses to interview questions, job-specific assessments, and other application materials.
Sensitive Information (if applicable and with consent): Data related to disability status, ethnicity, gender, or other special categories of data required for specific positions or compliance with equal opportunity laws.
Background Check Information: Criminal records, employment history, and reference checks, where permitted by law and consented to by you.

5.2 How we use your data
We process your personal data to:

Assess your qualifications and suitability for the job you applied for.
Contact you for further interviews or assessments.
Verify the information you provide, including reference checks, background checks, and verification of qualifications.
Comply with legal obligations related to recruitment and employment.

We will only process your personal data for the purposes of recruitment and related administrative functions. If you are not selected for the position, your personal data will be retained only for as long as necessary for legal or business purposes and in accordance with our data retention policy.

5.3 How we share your data
Your personal data may be shared with:

Internal Staff: Relevant employees involved in the hiring process, such as Human Resources, Recruitment, and hiring managers.
Third-Party Service Providers: Vendors or contractors we use for recruitment purposes, e.g., recruitment agencies, background check providers, and online testing platforms.
Legal and Regulatory Authorities: If required to do so by law, regulation, or a valid legal request.

We ensure that all third parties who process your personal data are obligated to safeguard your information and only use it for the purposes of the recruitment process.

5.4 Data Retention
We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected or as required by law. If you are not selected for the position you applied for, we may retain your data for future recruitment opportunities, with your consent. If you wish to have your personal data removed from our systems, please contact us using the contact details provided below.

5.5 Your Rights
As a job applicant, you have the following rights regarding your personal data:

Right to Access: You have the right to request access to the personal data we hold about you.
Right to Rectification: You have the right to request corrections to any inaccurate or incomplete data.
Right to Erasure: You can request that we delete your personal data, subject to legal or contractual obligations.
Right to Object: You can request to limit or object to the processing of your data under certain circumstances.
Right to Data Portability: You have the right to request a copy of your data in a commonly used, machine-readable format.

If you wish to exercise any of these rights, please contact us using the contact information provided below.

5.6 Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse during the recruitment process. This includes secure storage and encryption of data when necessary.

5.7 Transfers Outside the EU/EEA (if applicable)
If your personal data is transferred outside of the European Economic Area (EEA), we will ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

6. Security

We use appropriate security based on the type and sensitivity of data being stored. As with any internet-enabled system, there is always a risk of unauthorized access, so it’s important to protect your password and to contact us if you suspect any unauthorized access to your account. Easygenerator urges its authors and learners to enforce strong password policies. Easygenerator strongly urges its customer organizations to integrate SSO with the application for a better access management system.

Easygenerator takes appropriate organizational and technical security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal data that we collect and store. Easygenerator deploys industry-standard security solutions and measures for data privacy and security. Easygenerator complies with privacy laws like GDPR and aligns its business processes with ISO 27001 standard. Personal data is mostly processed in EU and in case data gets processed by our sub-processor in a non-EU country, DPA with EU standard contractual clauses is in place.

These measures vary based on the type and sensitivity of the data. Unfortunately, however, no system can be 100% secured, so we cannot guarantee that communications between you and Easygenerator, the services, or any information provided to us in connection with the data we collect through the services will be free from unauthorized access by third parties. Your credentials are an important part of our security system, and it is your responsibility to protect it. You should not share your password with any third party, and if you believe your password or account has been compromised, you should change it immediately and contact the support team immediately with any concerns.

7. Your rights

You have certain rights around the use of your data, including the ability to opt out of promotional emails, and collection of your data by certain third parties (like in customer satisfaction surveys). You can update or terminate your account from within our services and can also contact us for individual rights requests about your personal data.

You can choose not to provide certain data to us, but you may not be able to use certain features of the Services.

You can access and update your personal data that Easygenerator collects and maintains as follows:

To update data you provide directly, log into your account and update your account at any time.
You can also delete your profile and personal data instantly.

To stop receiving promotional communications from us, you can opt out by using the unsubscribe mechanism in the promotional communication you receive or by changing the email preferences. Note that regardless of your email preference settings, we will send you transactional and relationship messages regarding the services, including administrative confirmations, order confirmations, important updates about the services, and notices about our policies.

Easygenerator processes data on behalf of its clients (controllers) and the requests from clients regarding rights of their end users will be addressed in line with GDPR guidelines. Easygenerator will only access your account upon your request for assistance. You will be asked to provide explicit consent for that. No employee of Easygenerator will access your account without prior permission; unless required to do so by law and in such cases, where legally permissible, Easygenerator shall inform you.

Easygenerator has the option to track and trace the results from your learners. This option can be switched on or off for customer. These results will only be visible to the author (owner) and the admin from customer, not to anyone else. There is also the possibility to show the high-level aggregated results only.

Easygenerator does have the right to analyze this data for general trends and figures, but not on a personal or customer level unless that customer has approved or requested that.

8. Retention of personal data

We keep your personal data for no longer than necessary for the purposes for which the personal data is collected and processed. We only retain the contractual agreement data and not the personal data of customer end users. The length of time we retain personal data for depends on the purposes for which we collect and use it and/or as required to comply with applicable laws and to establish, exercise, or defend our legal rights.

End users can delete their profiles and their personal data; and before this they can export the courses to an external LMS system via HTML, XML or SCORM.

9. Website & Marketing Privacy Notice

This notice explains how Easygenerator (“Easygenerator”, “we”, “us”) collects and uses personal data from visitors to our website and marketing contacts – for example, people who browse easygenerator.com, submit a demo or trial request, download content, or register for an event or webinar.

This notice is separate from the Easygenerator End User License Agreement (EULA) , which governs personal data processed within the Easygenerator SaaS product on behalf of our customers (i.e. where our customer is the data controller and Easygenerator is the processor). This notice instead covers processing where Easygenerator itself is the data controller — our marketing and website activity.

9.1. Who We Are

Easygenerator is the data controller responsible for the personal data described in this notice.

Company: Easygenerator B.V./LLC-FZ
Data Protection contact: Hareenda Ranasinghe — [email protected]
General privacy queries: [email protected]

9.2. What Personal Data We Collect

Contact and business details you provide: name, business email address, job title, company name, phone number (e.g. via demo request forms, trial sign-up, content downloads, webinar/event registration).
Technical and usage data collected automatically: IP address, device and browser information, pages visited, referral source, and cookie/advertising identifiers.
Marketing engagement data: email opens/clicks, form submissions, and pages/content you interact with.

We only use business contact details that you have provided to us directly (first-party data). We do not purchase, enrich, or upload contact lists sourced from third-party data providers or scraped sources for advertising purposes.

9.3. How We Use Your Data & Our Legal Basis

Purpose	What this covers	Legal basis (GDPR Art. 6)
Responding to enquiries & providing requested materials	Demo requests, trial sign-ups, content downloads, webinar/event registration	Performance of a contract / steps prior to entering a contract (Art. 6(1)(b))
Direct marketing to business contacts	Follow-up emails, product updates, newsletters to business email addresses	Legitimate interests (Art. 6(1)(f)) — supported by a documented Legitimate Interest Assessment (LIA); you may object at any time (see “Opt-Out” below)
Website analytics	Understanding how visitors use our site to improve content and experience	Consent (Art. 6(1)(a)), obtained via our cookie banner (Google Consent Mode v2), except for strictly necessary analytics
Advertising & ad measurement (incl. Google Ads Enhanced Conversions)	Measuring the effectiveness of our advertising and sharing limited data with Google for that purpose	Consent (Art. 6(1)(a)) for the underlying advertising cookies/identifiers; legitimate interests (Art. 6(1)(f)) for the associated business-contact matching, per our LIA

Where we rely on legitimate interests, we have carried out and documented a Legitimate Interest Assessment (LIA), balancing our interests in marketing and measuring our advertising against your rights and expectations.

9.4. Advertising, Google Ads & Ad Measurement

We use Google Ads, including Enhanced Conversions and Google Consent Mode v2, to measure the effectiveness of our online advertising. This means that, only where you have given your consent via our cookie banner, we may share limited data with Google Ireland Limited / Google LLC (“Google”) for ad measurement purposes, such as a hashed version of your email address and information about your interaction with our ads and website.

The enhanced conversions tag only fires after you have accepted marketing/advertising cookies through our consent banner.
We do not currently use this data to build or expand Google Customer Match audiences for ad targeting — it is used for measurement purposes only.
For US-based traffic, we have enabled Google’s Restricted Data Processing setting, which limits Google to acting as our service provider for that data under applicable US state privacy laws.

Google acts as an independent controller for its own purposes in relation to some of this data, in accordance with Google’s Ads Data Processing Terms and Google’s own privacy policy.

9.5. Cookies & Consent

We use a cookie consent banner (built on Google Consent Mode v2) that lets you choose which categories of cookies to allow:

Strictly necessary — always on; required for the website to function.
Analytics — helps us understand site usage; requires your consent.
Advertising/marketing (incl. Google Ads tags, Enhanced Conversions) — requires your consent, and only fires after you actively accept this category.

You can change your cookie choices at any time via our cookie preference centre .

9.6. Who We Share Your Data With

Google (Google Ireland Limited / Google LLC) — for advertising and ad-measurement purposes described in Section 4, where you have consented.
Other Easygenerator group companies and service providers who support our marketing and website operations, under written data processing agreements.

We do not sell your personal data. Where data is transferred outside the European Economic Area (e.g. to Google or other US-based providers), we rely on the European Commission’s Standard Contractual Clauses or another valid transfer mechanism.

9.7. Data Retention

We retain marketing and website contact data for as long as needed for the purposes described above, after which it is deleted or anonymized, unless a longer period is required by law.

9.8. Your Rights

Subject to applicable law, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request erasure of your data.
Restrict or object to our processing of your data – including the right to object to direct marketing at any time, free of charge.
Withdraw consent at any time, where processing is based on consent (e.g. advertising cookies), without affecting the lawfulness of processing before withdrawal.
Request portability of your data, where technically feasible.
Lodge a complaint with a supervisory authority — in the Netherlands, the Autoriteit Persoonsgegevens , or your local data protection authority.

To exercise any of these rights, contact us at [email protected] .

9.9. Opt-Out & Your Choices

You can opt out of marketing and advertising at any time, through any of the following routes:

a) Opt out of marketing emails

Click the “unsubscribe” link included in every marketing email we send you — this takes effect immediately.

b) Opt out of advertising & measurement cookies

Withdraw or change your consent at any time via our cookie preference centre . This immediately stops the Google Ads / Enhanced Conversions tags from firing for your browser.
Manage or opt out of Google’s personalized advertising directly via Google Ads Settings .

c) Object to legitimate-interest marketing

Email [email protected] to object to any processing based on our legitimate interests (e.g. business-contact marketing follow-up); we will stop this processing unless we have compelling overriding legitimate grounds.

9.10. Children

Our website and marketing activities are directed at business professionals and are not intended for individuals under the age of 16. We do not knowingly collect personal data from children.

10. Modifications to This Privacy Policy

From time to time, we may update this privacy policy. If we make any material change to it, we will notify you via email, through a notification posted on the services, or as required by applicable law. Unless stated otherwise, modifications will become effective on the day they are posted.

As permitted by applicable law, if you continue to use the services after the effective date of any change, then your access and/or use will be deemed an acceptance of (and agreement to follow and be bound by) the revised privacy policy. The revised privacy policy supersedes all previous privacy policies.

11. Contact Us

If you have any questions, concerns, or disputes regarding our privacy policy, please feel free to contact Easygenerator at:

Data Protection Officer: Hareenda Ranasinghe – [email protected]
Privacy queries: [email protected]

Privacy Policy