Privacy Policy
Last updated: April 2026
Short version: we collect as little as possible, we sell nothing, and your data stays yours. Below is the plain-language explanation.
What data do we collect?
For MSP partners and direct customers: name, email, organisation and billing details to create your account and invoice you. Inside the app: the content you enter yourself (policies, evidence, scope, notes). For end clients of an MSP: their data lives in the bundle the MSP manages; we only see it if the MSP opts into cloud mode.
What do we use it for?
To deliver the service, log you in, provide support, bill you, and send you a newsletter or release notes if you sign up. We do not use your content to train AI models and we share nothing with advertisers.
Where is your data?
ECP stores your client portfolio, records and files, with our cloud provider, Cloudflare. At any time you can export everything as a .ecpbundle.zip with a digitally signed manifest that you can verify offline, and leave. The full sub-processor list is available on request at privacy@easycyberprotection.com.
Who else processes your data?
A short category list, all needed to run the service: an EU-based cloud provider (hosting, storage and AI), a transactional email provider (login and invites), a calendar/booking provider (Cal.com), and a payment provider for billing. No analytics tools, no ad networks. The full sub-processor list with name, address and purpose is available on request at privacy@easycyberprotection.com.
Your rights
Under the GDPR you can view, correct, export or delete your data. Email us and we will sort it within 30 days. Unhappy? You can file a complaint with the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be).
Cookies
Only what is strictly needed to keep you logged in and remember your language. No analytics cookies, no advertising cookies, and nothing that records your session. Visitor numbers come from Cloudflare Web Analytics, which counts page views at the network edge without cookies and without identifying you. That is why this site has no cookie banner: there is nothing to ask you to accept.
Changes
If we change this policy in a way that genuinely affects you, we will email you at least 30 days in advance. Small editorial updates just get a new date at the top.
Contact
Questions about privacy? Email us:
Core bv, VAT: BE 0861.455.911