Privacy Policy

This explains what data EzzySync collects when you use our travel CRM platform, why we collect it, and what we do with it. It's written in plain language on purpose — if something's unclear, email support@ezzysync.com.

1. What we collect

When you sign up and use EzzySync, we collect:

• Account info — your name, email, phone, agency/company name, and password (stored hashed, never in plain text).
• CRM data you enter — leads, bookings, customer names/contacts, itineraries, invoices, and notes you add for your own agency's use.
• Payment info — handled directly by Razorpay for paid plans; we don't store your card details ourselves.
• Basic usage data — page views on our marketing site via Vercel Analytics, which doesn't use invasive tracking cookies.

2. Why we collect it

To run the CRM: store your leads and bookings, generate invoices, send OTPs for login, process your subscription payment, and let you optionally connect WhatsApp or Gmail for client communication. We don't sell your data, and we don't use your CRM data to advertise to you or anyone else.

3. Third-party services we use

To provide the platform, we send limited data to:

• Resend — sends system emails (OTPs, password resets).
• Razorpay — processes subscription payments.
• Google Gemini — powers AI features (itinerary generation, chat parsing), if you use them.
• Meta WhatsApp Cloud API — only if you connect your own WhatsApp Business account in Settings.
• Google OAuth / Gmail API — only if you choose to connect your own Gmail account for sending emails.

Each of these only receives the specific data needed for the feature you're using.

4. How your data is stored

Everything is stored in a PostgreSQL database. Every agency's data is isolated at the database level — one agency can never read or write another agency's leads, bookings, or customer records. Passwords are hashed with bcrypt; login sessions use signed JWT tokens.

5. Your CRM data belongs to you

The leads, bookings, and customer records you enter are yours. We access them only to operate the platform (e.g. to render your dashboard) or if you ask us for support. We don't use them for any other purpose.

6. Cookies and analytics

Our marketing site uses Vercel Analytics for basic, privacy-friendly page-view stats — it doesn't set tracking cookies or build advertising profiles. The CRM app uses a session cookie or token to keep you logged in; that's required for the app to function.

7. Your rights

You can ask us to:

• Export a copy of your account and CRM data.
• Correct inaccurate account information.
• Delete your account and associated data (subject to what we're legally required to keep, e.g. financial records for tax purposes).

Email support@ezzysync.com for any of these.

8. Data retention

We keep your data for as long as your account is active. If you close your account, we delete your CRM data within a reasonable period, except records we're required to retain for legal or tax purposes.

9. Changes to this policy

If we change how we handle data, we'll update the date at the top of this page. Significant changes will be communicated by email.

10. Contact

Questions about your data? Email support@ezzysync.com.