Privacy Policy
This policy explains what personal information Easyy collects from you, why we collect it, how we use it, and the rights you have over it.
It applies when you visit our website, sign up for the waitlist, or chat with Easyy on WhatsApp.
If anything here is unclear, write to us at himanshu@easyy.in and we'll explain.
1. Who we are
Easyy is operated by Surevish Technologies Private Limited, a company registered in India. We're the people responsible for protecting your data.
Easyy is a service operated by Surevish Technologies Private Limited, a private limited company incorporated under the Companies Act, 2013, having its registered office at GF-553/16, Civil Lines, Gurugram, Haryana - 122001 ("Easyy", "we", "us", or "our").
For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Easyy is the Data Fiduciary in respect of the personal data described in this policy.
You can reach us about anything in this policy at himanshu@easyy.in.
2. What we collect
To give you a debt plan, we need to know about your money and the situation around it. So we collect:
- Your name and WhatsApp number (when you join the waitlist)
- Anything you tell us in a chat: your income, your loans, your EMIs, what you can't give up, your goals
- Basic info about how you're using the service so we can keep it working
We don't ask for your bank login, PAN, or any document you wouldn't comfortably share with a friend.
The categories of personal data we collect are:
(a) Contact information. Your full name and WhatsApp mobile number, which you provide when you join the waitlist or initiate a conversation with Easyy.
(b) Conversation content. The messages you send to Easyy and that Easyy sends to you on WhatsApp, including any financial information you choose to share. This typically includes details such as your monthly income, the loans you are paying, EMI amounts, outstanding balances, interest rates, expenses, financial goals, lifestyle preferences, and any context you provide about your situation.
(c) Optional question. Any free-text response you provide in the "Your question" field of the waitlist form.
(d) Service usage data. Limited technical and usage information necessary to operate the service, such as message timestamps, error logs, device type (where shared by WhatsApp), and approximate access times.
We do not require, request, or store: your bank account credentials, debit/credit card numbers, OTPs, PAN, Aadhaar, or any government-issued identity documents. If you share these voluntarily in a message, we will ask you to delete them and we will not retain them.
3. Why we collect it
We use what you tell us only to do the thing you asked us to do: give you a debt plan, follow up on it, and improve how the service works for everyone. That's it.
We process your personal data for the following purposes:
- Service delivery. To understand your situation, build a personalised debt-clearance plan, generate accompanying documents (such as a PDF plan and a calculator spreadsheet), and check in with you on your progress.
- Communication. To send you a single WhatsApp message when our beta opens, and to communicate with you during ongoing conversations once you've started using Easyy.
- Service improvement. To analyse how users interact with Easyy in aggregate, fix bugs, improve the quality of the conversations and plans we generate, and train our internal models on de-identified patterns.
- Legal compliance. To comply with applicable Indian law, respond to lawful requests from authorities, and protect the legal rights of Easyy and its users.
We process your personal data on the basis of the consent you provide when you sign up and continue using the service, in accordance with Section 6 of the DPDP Act.
4. Who we share it with
We don't sell your data. We don't share it with banks, lenders, NBFCs, or anyone trying to sell you something.
Some parts of our service rely on trusted infrastructure providers. For example, an AI service that helps generate Easyy's responses, and cloud hosting that keeps the service running. These providers process your data only on our instructions, never for their own purposes.
We do not sell, rent, or commercially share your personal data with any third party.
We do, however, rely on a small number of trusted service providers ("Data Processors") who process your personal data on our behalf, strictly to enable the delivery of our service. These include:
- Large Language Model (LLM) providers (such as OpenAI, Anthropic, or similar) who process your conversation messages to help generate Easyy's responses.
- Cloud hosting and infrastructure providers (such as AWS or Google Cloud) who store and process your data on secure servers.
- Analytics and monitoring providers who help us understand how the service is used and detect technical issues.
- WhatsApp / Meta Platforms, which is the channel through which the conversation takes place, and which has its own data handling practices governed by its own privacy policy.
Each of these processors is contractually bound to (i) process your data only on our documented instructions, (ii) maintain industry-standard security safeguards, (iii) not use your data for their own purposes, and (iv) delete or return your data when our engagement with them ends.
We may also disclose your personal data where required by Indian law, by a valid legal process, or to enforce our Terms of Use or protect against fraud or harm.
5. How long we keep it
We keep your data for up to 12 months after your last interaction with Easyy. After that, we delete it.
You can ask us to delete it sooner. Just write to us.
We retain your personal data only for as long as is necessary to fulfil the purposes set out in Section 3, and in any case for a maximum of 12 months from the date of your last interaction with the service.
After this retention period, your personal data is either permanently deleted or irreversibly anonymised. Anonymised data (data from which you can no longer be identified) may be retained indefinitely for service improvement purposes.
You may request earlier deletion of your data at any time by writing to us at himanshu@easyy.in. We will action this request within a reasonable period, typically within 30 days.
Some data may be retained beyond the 12-month period only where retention is required by applicable law (for example, financial records required for tax or audit purposes), and only for the minimum period required.
6. Your rights
It's your data. You can:
- Ask us what we have
- Ask us to correct anything that's wrong
- Ask us to delete it
- Take back the permission you gave us, anytime
- File a complaint if you think we got it wrong
Email himanshu@easyy.in for any of the above. We'll respond within 30 days.
As a Data Principal under the DPDP Act, you have the following rights in respect of your personal data:
(a) Right to access information. You may request a summary of the personal data we hold about you and the purposes for which it has been processed.
(b) Right to correction and erasure. You may request correction of inaccurate or incomplete personal data, and request erasure of personal data that is no longer necessary for the purpose for which it was collected.
(c) Right to grievance redressal. You may raise a grievance with our Grievance Officer (see Section 10) regarding any aspect of our processing of your personal data.
(d) Right to nominate. You may nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity.
(e) Right to withdraw consent. You may withdraw, at any time, the consent you have given us to process your personal data. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. Once consent is withdrawn, we will cease processing your data and delete it within a reasonable period unless retention is required by law.
To exercise any of these rights, please write to us at himanshu@easyy.in. We will respond to your request within 30 days, and may need to verify your identity before doing so.
7. How we protect your data
We use industry-standard security to protect your data: encryption in transit, encrypted storage, restricted access, and the minimum number of people who actually need to see anything.
No system is perfectly secure. If something goes wrong, we'll tell you and the regulator promptly.
We implement and maintain reasonable technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:
- Encryption of personal data in transit using TLS / HTTPS
- Encryption of personal data at rest in our databases
- Access controls limiting access to personal data to authorised personnel on a strict need-to-know basis
- Regular security reviews and updates to our infrastructure
- Contractual security obligations on our Data Processors
Notwithstanding these safeguards, no method of transmission over the internet or electronic storage is one hundred percent secure. In the unlikely event of a personal data breach affecting your data, we will notify you and the Data Protection Board of India within the timelines required under the DPDP Act.
8. Children
Easyy is not for anyone under 18. If we find out we've collected information from a child, we delete it.
Easyy is intended exclusively for use by individuals aged 18 years or above. We do not knowingly collect personal data from any individual under the age of 18.
If we become aware that we have inadvertently collected personal data from a person under 18, we will delete such data without undue delay. If you believe we may have collected information from a person under 18, please write to us at himanshu@easyy.in.
9. Changes to this policy
If we change this policy, we'll update the date at the top and tell you on WhatsApp if the change is significant.
We may update this Privacy Policy from time to time to reflect changes to our service, applicable law, or operational practices. The updated policy will be posted at this URL with a revised "Last updated" date.
For material changes that affect how we process your personal data, we will notify you through your registered WhatsApp number or by email (if applicable) at least 7 days before the changes take effect, and will obtain fresh consent where required by law.
10. Contact and grievances
For any question, complaint, or request relating to your data, write to himanshu@easyy.in.
If we don't get back to you within 30 days, you can escalate to the Data Protection Board of India.
For any question, request, complaint, or grievance relating to this Privacy Policy or our processing of your personal data, please contact our Grievance Officer:
Grievance Officer: Himanshu Gupta
Email: himanshu@easyy.in
Address: GF-553/16, Civil Lines, Gurugram, Haryana - 122001
We will acknowledge your grievance promptly and resolve it within 30 days. If you are not satisfied with our response, or if we do not respond within the prescribed timelines, you may file a complaint with the Data Protection Board of India in accordance with the DPDP Act.