Privacy policy

Who is responsible

The controller is MED GROUPE LLC, a limited liability company formed in the State of Wyoming, United States, with its address at 5830 East 2nd Street, Ste 7000, Casper, WY 82609, United States. Contact: support@easypap.app.

What stays on your device

Your questionnaire answers, your EX-17 answers and the PDFs we generate are created in your browser and stored only in your browser’s local storage. They are never sent to our server.

You can delete them at any time with the “Delete my answers” button or by clearing your browser data.

What our server sees

If you buy the pack: your license key, which our server checks with Stripe to confirm the payment. We also record payment IDs and their status (for example “paid” or “refunded”) for support and refunds.

Like any website, our hosting provider (Vercel) processes technical data such as your IP address in server logs, to deliver and protect the site.

If our server hits an unexpected error, a technical error report is sent to Sentry (Functional Software, Inc.) so we can fix it. It contains the error and the page address without query parameters. We remove request contents, headers, cookies and any user details before it is sent. Nothing from your browser is reported, so your answers and documents are never included.

Payments

Payments are processed by Stripe. Stripe collects your email and payment details under its own privacy policy and sends your receipt. We never see your card details. After a confirmed payment, our server reads your buyer email from Stripe and sends it with your license key and product to Resend to deliver a transactional welcome email. No questionnaire answers or filled documents are included. We do not add buyers to a marketing list. If you use “Lost your key?”, our server uses the email you type only to look up your purchase in Stripe and, if one exists, to email your key to that same address through Resend. We don’t keep that email. Resend and Stripe keep their own delivery and payment records under their own privacy policies.

Optional case notifications

If you ask us to email you when we cover an unsupported case, we send only your email address and the selected case type to Resend, our contact-list provider. Your name, dates and other questionnaire answers stay on your device. We do not send a notification unless you have opted in.

This processing is based on your consent. You can withdraw it using the unsubscribe link in a notification or ask for deletion at support@easypap.app. Resend stores the contact for these notifications until deletion; unsubscribing stops future notifications. Resend may process data outside the EEA using appropriate transfer safeguards. See resend.com/legal/privacy-policy.

Analytics

We use Vercel Analytics to count page views and a few anonymous events (for example “questionnaire completed”). It does not use cookies, and we never send personal data or anything you type. Page addresses are sent without query strings; city guide paths are anonymised.

Cookies

We don’t use cookies. Local storage is used only to keep your own answers and your unlock on your device, which is strictly necessary for the service you ask for.

Legal basis

Processing the license key and order is necessary to perform our contract with you. Server logs and anonymous analytics are based on our legitimate interest in running and improving a secure website.

International transfers

Vercel, Stripe, Resend and Sentry may process data outside the European Economic Area. They rely on safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

How long we keep data

Order IDs and status: as long as required for accounting, refunds and support. Server logs: according to Vercel’s retention periods.

Your rights

You can ask for access, correction, deletion, restriction, portability or object to processing by writing to support@easypap.app. You can also complain to a data protection authority, for example the Spanish Agencia Española de Protección de Datos (aepd.es).