Privacy & Cookie Policy

This Privacy & Cookie Policy explains how EzHR ("EzHR," "we," "us") collects, uses, protects, and shares information in connection with our website (goezhr.com) and our HR software (the "Service"). By using the Service, you agree to the practices described here.

Our role: controller vs. processor

EzHR is a platform that businesses use to manage their employees' HR information. For the employee and HR data that a company enters into the Service, that company is the "data controller" and EzHR acts as a "data processor" on its behalf — we process that data only to provide the Service. If you are an employee of a company that uses EzHR and you have questions about your HR data, please contact your employer directly. For our website visitors and account/billing information, EzHR is the controller.

Information we collect

• Account & company information — names, work email addresses, company name, and billing contact details provided when an account is created.
• HR data your employer provides — employee records, documents, time-off, reviews, and similar information a company chooses to store in the Service.
• Files you upload — documents, signed forms, and attachments.
• Usage & technical data — log information such as IP address, browser type, pages accessed, and timestamps, used for security and to operate the Service.

How we use information

• To provide, maintain, and secure the Service and authenticate users.
• To communicate with you about your account (e.g., onboarding, password resets, service notices).
• To detect, prevent, and investigate security incidents and misuse.
• To comply with legal obligations.

We do not sell your personal information, and we do not use it for advertising.

Cookies we use

EzHR uses only strictly necessary and preference cookies — all first-party. We do not use advertising, marketing, or third-party tracking cookies, and we do not run third-party analytics that profile you. Because of this, no cookie consent banner is required to use the Service.

• Session cookies (e.g. ezhr_session, and the platform-admin session) — keep you securely signed in. Essential; the Service cannot function without them.
• Impersonation cookie — used only when a platform administrator provides support; security-essential.
• Theme preference (ezhr_theme) — remembers your light/dark mode choice. Functional.

You can block or delete cookies through your browser settings, but doing so will prevent you from signing in and using the Service.

How we share information

We share information only as needed to operate the Service: with service providers that host our infrastructure and deliver email on our behalf, when required by law, or in connection with a business transfer. Providers are bound to use the data only to provide their services to us.

How we protect information

• Encryption in transit — all traffic is served over HTTPS/TLS.
• Tenant data isolation — each company's data is separated at the database level so one company cannot access another's.
• Role-based access — employees, managers, and admins see only what their role permits.
• Audit logging — administrative actions are recorded.

No method of transmission or storage is 100% secure, but we work to protect your information using reasonable safeguards.

Data retention

We retain information for as long as an account is active or as needed to provide the Service. When a company's account is closed or a tenant is deleted, its data is removed from the live system; uploaded files are held briefly in a quarantine area before being permanently purged. We may retain limited records where required by law.

Your rights & choices

Depending on your location, you may have rights to access, correct, or delete your personal information. If you are an employee, the fastest route for HR data is through your employer (the controller). For website or account data, or to exercise a right, contact us using the details below.

Children's privacy

The Service is intended for businesses and is not directed to children. We do not knowingly collect information from children.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify account administrators.

Contact us

Questions about this policy or your information? Email privacy@goezhr.com.