Data Privacy Policy

Data Privacy Policy (GDPR‑aligned)

pareasy is the platform offered by ConnectEasy Technology Limited (registered at DIFC Innovation Hub), providing an AI-powered mobile-first solution for simplifying school-life and family event management.

1. identifiers & personal data

• Identifiers: Family ID, Event ID, User ID stored as UUIDs.
• Contact: Email and mobile numbers encrypted at rest and in transit.
• Payments: Processed by PCI‑DSS certified providers or app stores. No raw card data stored by pareasy.
• User media: Uploaded files stored on AWS S3 with encryption and strict key‑based access.

2. data deletion (right to erasure)

• Upon verified request, user data is deleted promptly.
• Limited, non‑identifiable operational logs may be retained up to 30 days, then purged.

3. security measures

• Encryption in transit (HTTPS/TLS) and at rest (AES‑256/SSE‑S3).
• Key management with AWS KMS; least‑privilege IAM; private S3 buckets; versioning/logging where applicable.
• Role‑based access control (RBAC) and ongoing monitoring.

4. user rights

Users may request access, correction, deletion, portability, and restriction in line with GDPR principles. Contact support@pareasy.io.

5. controller

ConnectEasy Technology Limited, Registered at DIFC Innovation Hub, Dubai, UAE.