Privacy Policy

1. Information We Collect

In short: we only collect what we need to run your training and keep your account working.

• Email address: you give us this when you create an account or join our waitlist. It's how we send you sign-in links.
• Name: you provide this during setup or waitlist signup.
• Payment information: handled entirely by our payment processor. We never see or store your credit card number, bank details, or other payment credentials.
• Training progress and quiz results: we track which modules you've completed and your quiz scores so you (and your admin) can see your progress.
• Device and browser information: our servers automatically log your IP address, browser type, operating system, and referral URL. This is standard for any website.
• Bot protection signals: we use a privacy-friendly bot detection service to keep automated scripts from abusing our forms. It may collect browser interaction data to tell humans from bots.

We don't collect Protected Health Information (PHI). EZBunny is a training platform. We don't store, process, or transmit any patient data.

2. How We Use Your Information

In short: we use your info to run the service, send you what you need, and fix problems.

• Run the training platform: track your progress and issue certificates.
• Process payments and manage your subscription through our payment processor.
• Send you sign-in links, training reminders, and certificate notifications.
• Let waitlist members know when the product is available.
• Fix technical problems and prevent abuse.

3. Third-Party Services

In short: we share the minimum data needed with a handful of service providers. We never sell your information.

• Payment processing: We send your email and payment details to our payment processor so they can handle your subscription. Your card number never touches our servers.
• Email delivery: We share your email address with our email provider so you get sign-in links, reminders, and notifications.
• Waitlist CRM: If you join our waitlist, we share your email and name with our CRM provider to keep you updated.
• Cloud hosting: Your account data lives on our cloud provider's servers, encrypted both in transit and at rest.
• Content delivery and DNS: Our CDN provider processes IP addresses and request logs to serve the website.
• Bot protection: Our bot detection service checks browser interaction data to verify form submissions come from real people.
• Authentication: Your login sessions use secure, HTTP-only cookies.

We don't sell your personal information. Period. If you want to know exactly which providers we use, email us at the address below.

4. Cookies

In short: one cookie to keep you signed in. That's it.

We use authentication session cookies only. These are secure, HTTP-only cookies that keep you logged in. We don't use tracking cookies, analytics cookies, or advertising cookies.

Since we only use strictly necessary cookies, no cookie consent banner is required under current regulations.

5. Data Retention

In short: we keep your data while your account is active. Ask us to delete it and we will.

We keep your account data for as long as your account is active. Training records and certificates stick around so your organization has ongoing compliance documentation.

If you ask us to delete your account, we'll remove your personal information within 30 days, unless we're legally required to keep certain records.

6. California Privacy Rights (CCPA)

In short: California residents have extra rights. Here's what you can ask us to do.

If you're a California resident, the California Consumer Privacy Act (CCPA) gives you these rights:

• Right to Know: Ask us what personal information we've collected about you.
• Right to Delete: Ask us to delete your personal information (with some legal exceptions).
• Right to Correct: Ask us to fix inaccurate personal information.
• Right to Opt Out of Sale/Sharing: We don't sell or share your personal information for advertising. There's nothing to opt out of.

We don't sell or share your personal information for cross-context behavioral advertising.

To use any of these rights, email privacy@ezbunny.com. We'll respond within 45 days as the law requires. We won't treat you differently for exercising your rights.

7. Data Security

In short: your data is encrypted everywhere, and we don't touch patient information.

• All data is encrypted in transit using HTTPS/TLS.
• Data at rest is encrypted by our cloud provider.
• Login sessions use secure, HTTP-only cookies with magic link verification.
• We don't collect or store Protected Health Information (PHI).

8. Children's Privacy

EZBunny isn't built for children under 13, and we don't knowingly collect their information. If we find out we have, we'll delete it right away. If you think a child under 13 has given us personal information, please let us know at privacy@ezbunny.com.

9. Changes to This Policy

We may update this policy from time to time. If we make a big change, we'll let you know by email (if you have an account) or by posting a notice on our site. If you keep using the Service after changes take effect, that counts as accepting the updated policy.

10. Contact Us

Questions about this policy or want to exercise your privacy rights? Reach out:

Easy Synergy Corp
Email: privacy@ezbunny.com