Privacy policy

1. Who we are

EasyID is a service of Flexys.ai, established in the Netherlands. EasyID provides a digital business card platform allowing freelancers and entrepreneurs to share their contact details professionally via QR code or link.

For questions about this privacy policy you can contact us at info@flexys.ai.

2. What data we collect

Profile data

When you create an EasyID profile, we process the following data:

• Name, job title and company name
• Email address and phone number
• Profile photo and cover photo
• Social media links (LinkedIn, Instagram, etc.)
• Website URL and address
• Biography / description

Account data

• Email address (for login)
• Password (stored encrypted as a bcrypt hash)

Network and contact data

When you use the "Save contact" feature, we store which profiles you have saved, including any notes and tags you add.

Scan & Win promotions and leads

If a user runs a Scan & Win promotion or receives leads, we process from the participants/visitors the data they themselves enter: name, email address, phone number and optionally a message. The participant gives consent for this themselves via the promotion terms before participating.

For this data, the user (for example the shop owner) is the data controller and EasyID acts as data processor: we process the data solely to make it available to that user in their leads overview. The user is responsible for lawful use and the timely deletion of this data.

AI features

EasyID offers AI features (including the AI card scanner and the optional AI assistant on your card). Text or images that you submit for this are processed via an AI service provider to generate the result. This data is not used to train AI models and is not retained longer than necessary for the feature.

Analytical data

With your consent (via the cookie banner) we collect:

• Number of profile views
• Clicks on links and action buttons
• vCard downloads
• Referrer information (where visitors come from)

On our marketing and information pages we use Google Analytics (GA4) to measure visitor numbers. On your public profile pages (flexys.ai/p/…) we use no external tracking or tracking pixels — those statistics are kept in our own database.

3. Legal basis for processing

We process personal data on the basis of:

• Consent (Art. 6(1)(a) GDPR) — for analytical cookies and sharing your profile
• Performance of a contract (Art. 6(1)(b) GDPR) — for creating and managing your profile and account
• Legitimate interest (Art. 6(1)(f) GDPR) — for security, fraud prevention and improving our service

4. Storage and security

• Your data is stored on European servers (Germany)
• All connections are via HTTPS (TLS encryption)
• Passwords are stored encrypted (bcrypt)
• Sensitive data is additionally encrypted (AES-256-GCM)
• We make regular backups of all databases

5. Retention periods

We retain your data for as long as your account is active. When you delete your account, your profile data, saved contacts and analytics are permanently deleted. We do not retain data longer than necessary.

6. Third parties

We do not share your data with third parties for marketing purposes. The following services are used:

• Stripe — for processing payments (paid subscriptions). Stripe processes payment data under their own privacy policy.
• Google Fonts — for loading the Inter font. Google may process your IP address.

We never sell personal data to third parties.

7. Cookies

We use minimal cookies and localStorage items for the operation of our service. See our cookie policy for a complete overview.

8. Your rights

Under the GDPR (General Data Protection Regulation) you have the following rights:

• Right of access — You can request what data we process about you
• Right of rectification — You can have incorrect data corrected
• Right to erasure — You can request deletion of your data
• Right to restriction — You can have processing restricted
• Right to object — You can object to processing based on legitimate interest
• Right to data portability — You can export your data (CSV or vCard via the Network dashboard)

You can exercise these rights by contacting us at info@flexys.ai. We will respond within 30 days.

9. Complaints

If you are dissatisfied with the way we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

10. Amendments

We may update this privacy policy from time to time. For material changes we will inform you by email or via a notification in the portal. The most recent version is always available on this page.