Privacy Policy

What We Collect

easyfunnel.co collects analytics data on behalf of our customers (website and app owners). This data is used to help our customers understand how visitors interact with their products.

• Anonymous session ID (random UUID, not fingerprinting)
• Page URLs visited
• Events triggered (button clicks, form submissions)
• Browser, OS, screen size, language, timezone (from User-Agent and JS APIs)
• Optional: user ID if the developer explicitly calls .identify()
• Approximate network/organization and coarse location derived from the visitor's IP address. The raw IP address is encrypted at rest and retained for up to 30 days to enable on-demand Visitor Reveal, then permanently deleted; only a salted hash of the IP is retained long-term

What We Do NOT Collect

• Email addresses (unless the developer explicitly passes them in event properties)
• Third-party cookies — we never set or read third-party cookies
• Device fingerprints
• Any PII by default

Cookies

By default, easyfunnel uses localStorage for session continuity and sets no cookies. If a developer enables cross-subdomain mode, a single first-party cookie (_ef_sid) is set on the root domain to maintain session identity across subdomains. This is a functional/analytics cookie, not a tracking cookie. No third-party cookies are ever used.

Voice Calls & Recording

Some EasyFunnel agents can talk to visitors by voice. When a visitor starts a voice call:

• We request microphone access through the browser. The call does not begin until the visitor allows it.
• The visitor's speech and the agent's replies are processed in real time by our voice sub-processor, ElevenLabs, Inc., to power the conversation.
• A text transcript of every voice call is saved so the site owner can review the conversation.
• If the site owner has enabled call recording for their agent, an audio recording of the call is also saved. When recording is on, the visitor is shown a recording notice in the chat widget before the call begins, and the agent states that the call is recorded.

Retention. Audio recordings are automatically deleted 90 days after the call. Text transcripts are retained under the site owner's plan and are deleted when the account or the underlying conversation data is deleted.

Your rights. If you spoke to an EasyFunnel-powered agent and want a copy of, or the deletion of, your recording or transcript, contact the site owner whose website you used, or email us at privacy@easyfunnel.co and we will route your request. The full list of our sub-processors is at easyfunnel.co/subprocessors.

GDPR

For the basic analytics SDK — no third-party cookies, no PII by default — most jurisdictions do not require a cookie consent banner. This does not extend to the chat or voice features: if you enable the chat widget or voice calls, you process visitor personal data (messages, and, for voice, audio and transcripts) and are responsible for any notice or consent your jurisdiction requires. Consult your legal advisor for your specific case.

Our Data Processing Agreement (DPA) governs how we process personal data on your behalf, and our sub-processors are listed publicly. Users can request data deletion by emailing privacy@easyfunnel.co.

Data Storage & Security

• All data is stored in Supabase (PostgreSQL) with row-level security
• All API communication is over HTTPS
• Project API keys can only write events (no read access)
• Account API keys provide full read/write access and can be rotated
• Tenants can never access each other's data

Data Retention

Event data retention is defined by your plan. After account deletion, all data is permanently removed within 30 days. Visitor Reveal company results are retained for up to 365 days and person results for up to 180 days, unless you delete the project/account or withdraw person-reveal consent sooner. Disabling person reveal deletes stored person-reveal results.

Contact

For privacy-related inquiries, contact privacy@easyfunnel.co.