Privacy Notice

Last updated: 13 September 2026

1. Who we are

EZ-Munny is operated by William Hardman. For the personal data described in this notice, William Hardman is the data controller and decides how and why your data is processed.

2. What we collect and why

  • Account data (email address, password credentials): to create and secure your account and sign you in. Legal basis: performance of our contract with you.
  • Business records you enter (invoices, client names, products, expenses, payroll entries, uploaded logo): to provide the bookkeeping service. Legal basis: performance of our contract with you.
  • Subscription status (plan, renewal and payment-status events received from Paddle): to give or restrict access to paid features. Legal basis: performance of our contract and our legitimate interest in operating the service.
  • Support and suggestion messages: to answer you and improve the product. Legal basis: legitimate interests.
  • Technical data (IP address, device and browser information, error and usage logs): for security, fraud prevention, troubleshooting and product improvement. Legal basis: legitimate interests.

Card and billing details are collected and processed by Paddle, not by us. We never see or store your full payment card information.

3. Who we share data with

  • Hosting, database and infrastructure providers that run the service for us.
  • Paddle.com Market Ltd, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance and invoicing.
  • Professional advisers such as accountants and lawyers, where necessary.
  • Authorities where we are required to disclose by law.

We do not sell your personal data.

4. International transfers

Our providers may process data in the United States and other countries. Where data is transferred out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

5. How long we keep data

We keep your account and business records for as long as your account exists. If your subscription lapses we retain your records so they are available if you return. When you delete your account from Settings, your records are deleted. Some records may be retained longer where required for legal, tax or accounting purposes, after which they are deleted or anonymised.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent. You also have the right to complain to your data protection supervisory authority. We aim to respond to requests within one month. You can exercise several of these rights directly in the app by editing your records or deleting your account in Settings.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, hashed credentials and per-user access controls in the database, so that each account can only read its own records.

8. Cookies and local storage

We use only essential cookies and browser storage needed to keep you signed in and to operate the service. We do not use advertising or third-party tracking cookies. Paddle may set cookies necessary to complete checkout. You can clear or block cookies in your browser, but signing in will not work without the essential ones.

9. Contact

For privacy questions or requests, contact William Hardman using the contact details shown on your Paddle receipt, or through the Suggestions page in your account.