Privacy Policy

Easter Flow is operated by Easter Studio Ltd, a company registered in the United Kingdom. This Privacy Policy explains how we collect, use, and process personal data when you use our platform. We are committed to protecting your data and ensuring transparency in how it is handled.

1. What Data We Collect

We may collect the following types of personal data:

• Account information (e.g. name, email, job title, profile image)
• Contact information (e.g. phone number, if provided)
• User-generated content (e.g. project files, comments, messages)
• Technical data (e.g. IP address, system logs)

2. How We Use Your Data

We use your data to:

• Provide and operate the platform
• Enable communication and collaboration within projects
• Maintain system security and monitor performance
• Improve the functionality of our services

3. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contract – to provide and operate the service
• Consent – for optional features (e.g. additional contact details or communications)
• Legitimate interest – for security, monitoring, and system improvement

4. Data Storage and Transfers

Your data is stored using third-party infrastructure providers, including Supabase and Vercel. Data may be stored or processed outside the United Kingdom, including in Singapore. Where applicable, appropriate safeguards are implemented to protect your data.

5. Data Sharing

We use trusted third-party providers to operate our platform, including:

• Supabase (database and authentication)
• Vercel (hosting and deployment)
• Resend (email service)
• AI service providers (e.g. OpenAI)

These providers may process data on our behalf. Data shared is limited to what is necessary for system functionality.

6. Use of AI Features

Our AI translation feature uses OpenAI Service to translate user-generated content on demand.

• Data minimisation: Only the specific text to be translated is sent. Personal data is not included in translation payloads by design.
• User control: Translation is triggered manually by you. It does not happen automatically.

Users should avoid submitting sensitive or confidential information into AI-powered features unless necessary. AI providers act as sub-processors for translation features only.

7. User Responsibilities

Users are responsible for ensuring that any data they upload complies with applicable laws. Easter Flow does not control user-generated content but processes it on behalf of users.

8. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Restrict processing of your data
• Withdraw consent where applicable

You can exercise these rights by contacting us.

9. Data Retention

We retain personal data for as long as necessary to provide our services.

• Account data is retained until the account is deleted
• Archived project data is deleted after 60 days
• System logs may be retained for 90 days for security purposes

10. Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption and secure data transmission (HTTPS)
• Access controls and role-based permissions
• Secure infrastructure and storage

11. Contact

If you have any questions or requests regarding your data, please contact us at: easterstudio.hello@gmail.com