Privacy policy

Who we are

Easydone Studio is website and marketing software for small businesses, made in Perth, Western Australia. In this policy, “we”, “us” and “our” mean Easydone.

This policy covers:

• our website, easydone.studio
• the Studio app at app.easydone.studio, used by our customers and their teams
• the websites, forms and email lists Studio runs for our customers, where we handle information on their behalf (see Your customers’ information)

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). If you have a question, email hello@easydone.studio.

The short version

• We collect what we need to run Studio, answer your questions and look after your account.
• We don’t sell personal information.
• Studio runs on a server in Australia, and our email is in Australia. Some services we use are overseas, including our AI writing provider, which is in China. The list of services below says who does what.
• Information from your Google accounts is never sold, used for advertising or used to train AI.
• easydone.studio sets no cookies. We count visits with Cloudflare Web Analytics, which doesn’t use cookies.
• You can ask to see, correct or delete your information at any time.

What we collect

When you visit easydone.studio

• If you send us a message: your name, email address and message, your business name and phone number if you add them, and the page you sent it from. We send you an automatic thank-you email, and our team replies.
• Visit statistics: Cloudflare Web Analytics counts page views, the site you came from, and your browser, type of device and country. It doesn’t use cookies and doesn’t tell us who you are.
• Technical logs: like most websites, our hosting provider Cloudflare logs technical details of each visit, such as your IP address and browser, to keep the site working and secure.

When you use Studio

• Your account: your business name, industry, suburb and plan, the owner’s name, email address and phone number, your monthly AI spending limit, and notes our staff keep about your account.
• Logins: the name and email address of each person with access. Passwords are stored only as a one-way scrambled code (a hash), never as the password itself.
• What you add or import: your website content, photos and other uploads; your business details (email, phone, address, locations, opening hours and map link); team members you show on your website; and reviews or testimonials you bring across from your old website (the reviewer’s name, words, date and rating).
• Activity: a record of who did what in Studio, and when. When someone publishes your website, their name is saved with that version of it.
• AI use: how much AI each website and person uses, so we can track plan limits and costs.
• Emails we send you: a copy of the account emails Studio sends, such as invitations.
• Billing: when you pay for a plan, Stripe collects your payment and billing details. We keep only your Stripe customer number and whether your subscription is active. We never see or store your full card number.
• If you joined our waitlist or asked for a design: your name, email address, business, industry, chosen plan, current website, websites you like, your brief and any files you uploaded.

Accounts you connect

You can connect other accounts to Studio. Studio then stores a key that lets it act for you, and uses each connection only for the feature you connected it for:

• Facebook and Instagram: to list the Facebook Pages and Instagram accounts you manage, including those in your business portfolio, so you can choose one; to read your page’s or profile’s details and posts; and to publish the posts you create in Studio (captions, links and images). If you ask, Studio also imports your Instagram profile details and recent posts (photos and captions) to use on your website.
• LinkedIn and X: to publish the posts you create in Studio and to read basic details of your page or profile, such as its name and picture.
• Google Business Profile: to connect your business profile and read its details.
• Google Search Console, Google Analytics and Bing Webmaster Tools: to read your website’s search and visit statistics (such as searches, clicks, visits and positions in search results) and show them to you in Studio. This access is read-only.
• Your own Microsoft 365 mailbox: if you connect it, Studio can send email from it for you.
• Your own Resend account: to send your email campaigns and receive reports of deliveries, opens, clicks, bounces and spam complaints.
• Your own Ahrefs account: to look up search rankings, keywords and links for your website.

Information from Google. Studio uses information from your Google accounts only to show you your website’s search and visit statistics and your business profile, and to suggest improvements. It’s stored with your Studio account on our server in Australia, and deleted when you disconnect that Google account or delete your Studio account. We don’t sell it, use it for advertising or use it to train AI models. If you ask Studio’s AI for suggestions, the figures it needs go to our AI provider (see How Studio uses AI).

Easydone Studio’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove Studio’s access to any connected account at any time in that service’s own settings, or ask us.

Your customers’ information

Studio runs websites, forms and email lists for our customers. When someone uses one of them, Studio collects information for that business, and the business decides how it is used. This can include:

• Website enquiries: the person’s name, email, phone number, topic and message, the page they sent it from and their browser details. Studio emails the enquiry to the business.
• Bookings, if the business takes them through its website: name, email, phone, company, notes and the times booked.
• Email lists: each subscriber’s email address and name, how and when they agreed to receive emails, and whether they have unsubscribed. When emails go out, we receive reports of deliveries, opens, clicks, bounces and spam complaints.

If you contacted a business through its website and want to know what it holds about you, ask that business first. If you can’t reach them, email us and we’ll help. Businesses using Studio are responsible for telling their own visitors how they handle their information, and for having permission to email the people on their lists.

How we use it

• to run Studio: build, host and publish your websites, send your emails and posts, and run the features on your plan
• to answer your messages and help when you ask
• to send account emails, such as invitations, welcome emails and notices about your account
• to bill you for paid plans
• to keep Studio and our websites secure, and to stop spam and misuse
• to meet our legal obligations

We don’t sell personal information. We only send you marketing emails if you’ve agreed to them, and you can stop them at any time by replying or emailing us.

How Studio uses AI

Studio’s AI features send information to AI providers to get results back:

• Writing and image descriptions: DeepSeek, based in China, writes and edits text and describes images (for example, alt text for search engines). It receives your business brief, your website text, text imported from your old website or Instagram, research questions, and the images being described.
• Images and video: Higgsfield makes AI images and videos. It receives your instructions and up to eight of your photos for each request, and keeps the results for at least seven days.

Please don’t put sensitive personal information, such as health details, into AI requests. These providers handle what they receive under their own privacy policies.

Services we use

These services handle personal information for us, each only for the job listed.

We may also share information when the law requires it, to protect someone’s safety or our legal rights, or with a buyer if our business is sold. A buyer would have to keep following this policy.

Information sent overseas

Studio’s server and our email are in Australia. Several of the services above are overseas, mainly in the United States and China, and Cloudflare’s network runs worldwide, so a visit may pass through the data centre nearest to the visitor. When you use Studio’s AI features, your information goes to DeepSeek in China, or to Higgsfield, as described above. Accounts you connect may keep information in other countries too.

Cookies

• easydone.studio sets no cookies. Our fonts come from our own site, and the only outside script is Cloudflare Web Analytics, which doesn’t use cookies.
• The Studio app uses one cookie to keep you signed in, for up to seven days, and our staff use one more when previewing a customer’s website. Your browser also remembers your light or dark theme and your template shortlist. There are no advertising or tracking cookies.

Keeping it safe

• Connections to Studio and our websites are encrypted (HTTPS).
• Passwords are stored only as one-way hashes.
• Sign-ins last up to seven days, and invitation links expire after 48 hours.
• Only our own staff can sign in to Studio’s server.
• Forms limit repeat messages to stop spam. They use a scrambled (hashed) form of the sender’s IP address for a few minutes, and don’t store it with the message.

No system is completely secure. If a data breach is likely to cause serious harm, we’ll tell the people affected and the Office of the Australian Information Commissioner.

How long we keep it

• Your account: while your account is open. If you close your account, Studio takes your websites offline and signs everyone out, but keeps your information in case you come back. To remove it for good, see Delete your data.
• Messages and waitlist entries: for as long as we need them to reply and follow up, or until you ask us to delete them.
• Billing records: for as long as tax and company law require, usually five to seven years.
• Backups: deleted information can stay in our server backups until those backups are removed.

Your choices

• See or correct your information: most of it is in your Studio account. For anything else, email us.
• Delete it: see Delete your data.
• Stop marketing emails: reply to any of them, or email us.
• Disconnect an account: remove Studio’s access in that service’s settings, or ask us.

We’ll reply within 30 days. If you’re not happy with how we handled a privacy question or complaint, you can contact the Office of the Australian Information Commissioner.

Age

Studio is for businesses. You need to be 18 or older to create an account.

Changes to this policy

We’ll update this page when things change, and change the date at the top. If a change matters to Studio customers, we’ll also email them.