Privacy Policy
Last updated: March 2026
1. Who we are
EasyPricing is operated by [Company Name], [Address]. Email: contact@jonexlab.com.
We are the data controller for the personal data you provide when using EasyPricing.
2. What data we collect
- Account data: Email address, hashed password, preferred currency, subscription plan and status.
- Product data: URLs of product pages you choose to monitor, scraped prices, and price history.
- Payment data: Stripe customer ID and subscription ID. We do not store card numbers — payment is handled entirely by Stripe.
- Technical data: IP address and session cookies required to authenticate your session.
3. Why we collect it
| Purpose | Legal basis (GDPR) |
|---|---|
| Provide the monitoring service | Contract (art. 6(1)(b)) |
| Process payment and issue invoices | Contract + Legal obligation (art. 6(1)(b)(c)) |
| Send price-change alert emails | Contract (art. 6(1)(b)) |
| Authenticate sessions securely | Legitimate interest (art. 6(1)(f)) |
We do not use your data for marketing without your separate consent.
4. Data retention
- Account data: Retained while your account is active. Deleted within 30 days of an account deletion request.
- Price history: Retained for 12 months, then automatically deleted.
- Payment records: Retained for 7 years to comply with applicable accounting regulations.
- Session tokens: Expire after 30 days.
5. Third-party processors
We share data with the following processors, each bound by data processing agreements:
| Processor | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Payment processing | USA (SCCs apply) |
| Resend | Transactional email | USA (SCCs apply) |
We do not sell your personal data to third parties.
6. Cookies
We use one session cookie to keep you logged in. This cookie is:
- Strictly necessary for the service to function
- HttpOnly and Secure — not accessible by JavaScript
- Not used for tracking or analytics
We do not use Google Analytics, Facebook Pixel, or any other third-party tracking scripts.
7. Your rights
Under the GDPR you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your account and data
- Restriction — limit how we process your data in certain circumstances
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
To exercise any of these rights, email us at contact@jonexlab.com. We will respond within 30 days.
8. Complaints
If you believe we have processed your data unlawfully, you have the right to lodge a complaint with your local data protection authority. In the EU you can find your authority at edpb.europa.eu.
9. Changes to this policy
We may update this policy from time to time. The current version is always available at this URL. Significant changes will be communicated by email.