easier access

How we protect your data

Last updated: 17 October 2026. This page explains how EASIER MARKETING LTD keeps the data behind Easier Access safe. It applies to Google user data and to every other account you connect. Our privacy policy covers what we collect and why.

Encrypted in transit

easieraccess.co is served only over HTTPS (TLS). Our servers also use HTTPS for every call to Google, Meta, LinkedIn, TikTok, Klaviyo and Shopify.

Encrypted at rest

Our application encrypts access tokens and API keys with AES-256-GCM before saving them. The encryption key is kept apart from the data, as a secret in our hosting settings, never in our code or database. The database itself is also encrypted at rest by our hosting provider (Cloudflare D1). If encryption is not available, we do not store a new key at all.

Used on the server only

Tokens and keys are decrypted inside our server code only at the moment they make a request you approved. They are never sent to a browser, shown in our admin screens, emailed or written to logs.

Restricted access

Only named Easier staff with a super-admin account can use a stored connection. Admin screens need a signed-in session or a server-held admin key. Staff passwords are stored only as salted PBKDF2 hashes, and session cookies are HttpOnly and Secure. Internal files are not served from our website.

Least privilege

We ask only for the permissions a feature needs. For view-only links we ask for view-only roles, such as Viewer in Google Analytics, Read only in Google Ads, View performance on Meta and a read-only key in Klaviyo. We never ask for, see or store your platform passwords.

Deletion

You can end our access at any time from the platform itself: revoke Easier Access in your Google Account, remove our partner access on Meta, delete the key in Klaviyo, or remove our user. You can also ask us to delete your data, and we delete the stored connection within 30 days of your request.

If something goes wrong

If we become aware of a security incident affecting your data, we will tell you without undue delay and report it to the UK Information Commissioner's Office where the law requires.

AI and model training

We do not use Google user data, or data from any connected account, to develop, improve or train artificial intelligence or machine learning models.

Changes

If we change how we protect or use your data, we will update this page and tell affected users before the change applies.

Questions

Have a security question or found a problem? Send us a message.