easier access
easier access
Last updated: 17 October 2026. EASIER MARKETING LTD ("we") is the data controller for Easier Access. How we keep data safe is set out on a separate page: How we protect your data.
Agency customers: name, email, billing details (held by Stripe, we never see card numbers), team roster details you configure (names, roles, emails, photos).
Checklist users (our customers' clients): the client/company name on the link, and progress events (which steps were opened or completed, and when). Checklist users never create accounts or enter passwords on the Service.
People who contact us: the name, email address and message you send through our contact form, used only to reply to you.
No platform passwords, ever. No tracking cookies on client checklists. Where you choose to connect an account (see below) we hold an access token or a read-only key, never a password.
To provide the Service (progress tracking, notifications to the agency, and audits you ask for), billing, and support. We do not sell personal data.
Emails from us. We may email businesses that use Easier Access through our own links about our services. To decide what is relevant we use the link and its progress, and public information about the business’s website (for example which shop platform it runs on and which tools its pages load). If you ask for an audit, we may also send you follow-up emails about your own audit that mention figures from it, such as your average order value or return rate. Those figures come from your Shopify, Klaviyo and Meta data, never from your Google accounts. We don’t use your connected data for anything else in our emails. Every email has an unsubscribe link, and unsubscribing stops all of them.
Connecting an account is optional. The Service works end to end as a manual checklist without it. If you do connect one, here is exactly what happens.
If you connect a Google account, you are asked to approve specific permissions on Google's own consent screen. Depending on what the link asks for, we request:
Limited Use. Easier Access's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google user data only to provide the features you choose, we do not use it for advertising, we do not sell it, we do not transfer it to third parties except as needed to provide the Service or where required by law, and we do not allow humans to read it except with your explicit consent (for example, when you ask the agency for an audit, its team reads the results to prepare your report), to resolve a support issue you have raised, for security purposes, or where required by law.
What we store. An access token and refresh token, the email address of the account that granted access, the permissions granted, and when. Tokens are encrypted and used only on our server (details on How we protect your data). For an audit you ask for, we keep the report data we read only as long as we need to prepare your report, and delete it within 30 days. We keep the finished report so you can come back to it; ask us and we delete it. Otherwise we do not store your analytics data, advertising data, campaign performance, search queries or website content.
Audit summaries. To help write an audit report we may send an AI service a small set of totals and rates worked out from the data we read (for example sales, average order value, return rate, ad spend and the return on it, and campaign names). We never send raw orders, customer records, email addresses or anything that identifies a customer, and we do not send figures that come from your Google accounts. The AI service does not train on what we send. What it returns is a suggestion: a person at Easier Access reads and edits it and approves your report before you see it. The figures are kept with your report data, and deleted within 30 days like the rest.
Revoking access. You can disconnect at any time from your Google Account permissions page, which immediately stops our tokens working. You can also ask us to delete the stored connection. Removing the agency as a user on a property is done in that platform's own settings, and is always yours to do.
Meta, LinkedIn, TikTok, Klaviyo and Shopify connections work the same way, under those platforms' equivalent permissions or a read-only key you create, and are covered by the same commitments above.
Cloudflare (hosting, EU/global), Stripe (payments), Resend (email notifications), Slack (internal alerts) and Anthropic (an AI service used to draft audit summaries, see "Audit summaries" above). Each processes data under their own DPAs. Anthropic does not train its models on data sent through its business API.
Progress events are kept while the agency's account is active. Connected-account tokens and keys are deleted when you revoke access or on request, and in any case when the agency's account is closed. Audit report data is deleted within 30 days. You can request access, correction or deletion of your personal data at any time through our contact form. You may also complain to the ICO (UK).