Privacy Policy

We respect your privacy. This page explains what data we collect, why we collect it, how we process it, and the rights you have.

Responsible

Paul Graf

kaotech e.U.

Ragnitzstrasse 221, 8047 Graz, Austria

Contact Us

Paul Graf

kaotech e.U.

Ragnitzstrasse 221, 8047 Graz, Austria

contact@easepop.dev

How We Process Data

Unless otherwise specified, your personal data is stored and processed in the European Union and is not passed on to third parties beyond the providers listed on this page.

As a Site Visitor

We use Plausible Analytics to understand overall usage trends and ensure a secure, stable website. Plausible does not use cookies and does not collect identifiable personal data. The data is aggregated and anonymized. For details, see the Plausible privacy policy.

Reference: plausible.io/privacy

As a Customer

Hosting and Infrastructure

We host and secure customer data on servers operated by Hetzner, a European company. Your site data remains in the EU and is protected by EU data privacy laws.

Reference: hetzner.com/legal/privacy-policy

For our managed database services, we use Scaleway, a European company. Database data is processed within the EU and protected by EU data privacy laws.

All data is encrypted at rest using LUKS disk encryption and encrypted in transit using TLS protocols.

Reference: scaleway.com/en/privacy-policy

For global content delivery, DNS, and DDoS protection, we use Bunny, a European provider. Visitor data processed for these services is handled on European‑owned infrastructure.

Reference: bunny.net/privacy

Account Data and Authentication

When you create an EasePop account, we collect your email address and a name. This enables authentication, account personalization, and essential service communications.

We set a first‑party cookie to keep you logged in between sessions. You can control cookie retention in your browser and delete stored cookies at any time.

Payments

Paid plans are processed by Creem, a European company. We do not store your payment card details; payment information is handled by Creem as our payment processor.

Reference: creem.io/privacy

Popups, Media, and Submissions

When you design popups in EasePop, the configuration and content you enter are stored to provide the service. Media files you upload for use in your popups are stored with Intercolo, a European cloud storage provider.

Reference: intercolo.de/en/privacy

If you enable user submissions on a popup, EasePop processes those submissions on your behalf as your data processor. You act as the data controller. Submission data is stored in the EU. Ensure you have a lawful basis to collect and process your users’ data and provide any required notices.

You can delete individual submissions at any time from your dashboard. Deletion removes the submission from our active systems completely.

Emails

We send transactional, usage, and optional marketing emails via Mailjet. Open and link tracking are disabled.

Reference: mailjet.com/legal/privacy-policy

Support Correspondence

If you contact us for help, we retain your message and email address to assist you and maintain a history of prior correspondence. We use this information only to respond to your inquiries.

Data Retention

We retain your information for as long as your account is active and as needed to provide the services. We also retain information as necessary to comply with legal obligations. For paying customers, required billing‑related personal information, including email, name, and references to your Creem account, may be stored for up to 14 years to satisfy tax regulations.

Your Rights under the GDPR

Right of access: Request information about whether and which personal data we process about you.
Right to rectification: Request correction or completion of inaccurate or incomplete data.
Right to erasure: Request deletion where data is no longer needed, subject to legal retention obligations.
Right to restriction of processing: Request restricted processing in certain cases, such as when accuracy is disputed.
Right to data portability: Receive your data in a structured, commonly used, machine‑readable format, and have it transmitted where technically feasible.
Right to object: Object to processing unless we have compelling legitimate grounds to continue.
Right not to be subject to automated decision‑making: We do not make automated decisions about you; if this changes, you have the right not to be evaluated solely by algorithms.

To exercise your rights, please contact us using the details above.

If you believe your data protection rights have been violated, you can lodge a complaint with the Austrian Data Protection Authority: data-protection-authority.gv.at.

Voluntary Nature of Data Provision

You are under no statutory obligation to provide data to kaotech e.U. However, certain services may not be available if you choose not to provide the data required to deliver them.

Withdrawal of Consent

You can withdraw consent at any time with effect for the future. Processing prior to withdrawal remains lawful.

Changes to this Policy

We may update this policy from time to time. The latest version applies when you revisit this page.

Privacy Policy

We respect your privacy. This page explains what data we collect, why we collect it, how we process it, and the rights you have.

Responsible

Paul Graf

kaotech e.U.

Ragnitzstrasse 221, 8047 Graz, Austria

Contact Us

Paul Graf

kaotech e.U.

Ragnitzstrasse 221, 8047 Graz, Austria

contact@easepop.dev

How We Process Data

Unless otherwise specified, your personal data is stored and processed in the European Union and is not passed on to third parties beyond the providers listed on this page.

As a Site Visitor

Reference: plausible.io/privacy

As a Customer

Hosting and Infrastructure

We host and secure customer data on servers operated by Hetzner, a European company. Your site data remains in the EU and is protected by EU data privacy laws.

Reference: hetzner.com/legal/privacy-policy

For our managed database services, we use Scaleway, a European company. Database data is processed within the EU and protected by EU data privacy laws.

All data is encrypted at rest using LUKS disk encryption and encrypted in transit using TLS protocols.

Reference: scaleway.com/en/privacy-policy

For global content delivery, DNS, and DDoS protection, we use Bunny, a European provider. Visitor data processed for these services is handled on European‑owned infrastructure.

Reference: bunny.net/privacy

Account Data and Authentication

When you create an EasePop account, we collect your email address and a name. This enables authentication, account personalization, and essential service communications.

We set a first‑party cookie to keep you logged in between sessions. You can control cookie retention in your browser and delete stored cookies at any time.

Payments

Paid plans are processed by Creem, a European company. We do not store your payment card details; payment information is handled by Creem as our payment processor.

Reference: creem.io/privacy

Popups, Media, and Submissions

Reference: intercolo.de/en/privacy

You can delete individual submissions at any time from your dashboard. Deletion removes the submission from our active systems completely.

Emails

We send transactional, usage, and optional marketing emails via Mailjet. Open and link tracking are disabled.

Reference: mailjet.com/legal/privacy-policy

Support Correspondence

If you contact us for help, we retain your message and email address to assist you and maintain a history of prior correspondence. We use this information only to respond to your inquiries.

Data Retention

Your Rights under the GDPR

Right of access: Request information about whether and which personal data we process about you.
Right to rectification: Request correction or completion of inaccurate or incomplete data.
Right to erasure: Request deletion where data is no longer needed, subject to legal retention obligations.
Right to restriction of processing: Request restricted processing in certain cases, such as when accuracy is disputed.
Right to data portability: Receive your data in a structured, commonly used, machine‑readable format, and have it transmitted where technically feasible.
Right to object: Object to processing unless we have compelling legitimate grounds to continue.
Right not to be subject to automated decision‑making: We do not make automated decisions about you; if this changes, you have the right not to be evaluated solely by algorithms.

To exercise your rights, please contact us using the details above.

If you believe your data protection rights have been violated, you can lodge a complaint with the Austrian Data Protection Authority: data-protection-authority.gv.at.

Voluntary Nature of Data Provision

You are under no statutory obligation to provide data to kaotech e.U. However, certain services may not be available if you choose not to provide the data required to deliver them.

Withdrawal of Consent

You can withdraw consent at any time with effect for the future. Processing prior to withdrawal remains lawful.

Changes to this Policy

We may update this policy from time to time. The latest version applies when you revisit this page.