EasyCAN Privacy Policy

Effective date: 04.09.2026

This Policy describes personal-data processing when the easycan.pl website, EasyCAN software downloads, and the software's licensing and technical services are used. Additional rules apply to forum accounts and user content.

1. Data controller and contact

The controller of personal data is Andrzej Michalak EasyCAN, Polish tax ID (NIP) 8262031661, business register number (REGON) 545572898, address: ul. Ekologiczna 8/48, 02-798 Warszawa, Poland.

For privacy matters and requests concerning your rights, contact ebt25@easycan.pl, telephone +48 455 400 025, or use the postal address above.

2. Data that may be processed

• website and software downloads: IP address, request date and time, requested URL, response code, browser and system information, referrer and information about the downloaded file;
• licence and tokens: email address used as a user identifier, licence status, token balances, operation history and information needed to account for a requested function;
• token purchases: EasyCAN account email, transaction identifier and status, token type and quantity, currency, amounts, discounts, taxes and sales-document identifiers; card or payment-account data is submitted directly to the payment operator and is not stored by EasyCAN;
• purchase-terms records: the accepted Terms version, acceptance time and technical information needed to demonstrate the conditions under which checkout was started;
• key generation: operation type, seed sent by the software, the resulting module identifier or serial number, operation time and outcome, token-consumption status, retry data and IP address;
• vehicle-data services: VIN and technical vehicle data where the user knowingly starts a function that requires them;
• contact: email address, telephone number, messenger identifier and the content of a message sent by email or WhatsApp;
• security: error information, attempts to use a service without a licence, blocks, abuse and events needed to protect the service.

A seed, module identifier or VIN may be personal data where it can be linked to an identifiable person in the circumstances.

3. Purposes and legal bases

• providing the website, files, updates, licences, tokens and software functions — performance of a contract or steps taken at the user's request, Article 6(1)(b) GDPR;
• handling enquiries, complaints and technical problems — Article 6(1)(b) or 6(1)(f) GDPR;
• protecting the server, preventing abuse, accounting for tokens, diagnosing errors and establishing or defending legal claims — the controller's legitimate interests, Article 6(1)(f) GDPR;
• complying with legal obligations — Article 6(1)(c) GDPR.

Data is not used for behavioural advertising or marketing profiling.

4. Data recipients

Data may be processed by OVHcloud as the hosting provider, email-service providers, the technical administrator and authorities entitled by law. When tokens are purchased, the data needed to enter into and settle the transaction is disclosed to Lemon Squeezy, which handles checkout, payment, tax, sales documents, fraud prevention and buyer support as the authorised reseller. Lemon Squeezy's rules are described in its Privacy Policy. If the user invokes a function requiring an external vehicle-data source, the data necessary for that request, in particular the VIN, may be disclosed to that source provider solely to perform the requested operation.

Clicking the WhatsApp link takes the user to the WhatsApp/Meta service, which processes data under its own rules. Merely displaying the EasyCAN website does not connect to WhatsApp.

5. Forum

The forum uses an external Neon database and processes account data, technical messages and user content under the EasyCAN Forum Privacy Policy. Topics and posts are available only to active, signed-in users.

6. Transfers outside the EEA

Some providers, in particular Neon, Meta or Lemon Squeezy, may be established or use subprocessors outside the European Economic Area. Data is transferred only under the mechanism required by the GDPR and appropriate for the relevant recipient, in particular an adequacy decision or Standard Contractual Clauses. Details of the applicable mechanism may be requested from the controller.

7. Retention

• server logs — for the period resulting from hosting configuration and security or diagnostic needs;
• licence and token-balance data — while the service is used and then for the period needed to deal with complaints, settlements and legal claims;
• transaction data and records of accepted terms — for the period required by tax and accounting law and needed to handle refunds, chargebacks, complaints and legal claims, generally until the applicable limitation or statutory retention period expires;
• operation and security logs — until they are no longer needed to account for functions, detect abuse, diagnose problems or protect legal claims; their usefulness is reviewed periodically;
• correspondence — until the matter is completed and then for the period needed to defend claims or comply with legal obligations;
• forum data — as described in the forum Privacy Policy.

8. User rights

Subject to the GDPR, users may request access to and a copy of their data, rectification, erasure, restriction, portability, and may object to processing based on legitimate interests. Send requests to ebt25@easycan.pl.

Users may also lodge a complaint with the President of the Polish Personal Data Protection Office. Contact details are available at uodo.gov.pl.

9. Whether data is required

Browsing the basic website content does not require an account. Providing licence data, an operation identifier, seed or VIN is voluntary, but a function that requires the relevant data cannot be performed without it.

10. Cookies and local assets

The homepage does not use analytics, advertising or tracking cookies. Inter, JetBrains Mono and Font Awesome assets are hosted locally on the EasyCAN server, so displaying them does not require a connection to Google Fonts or an external CDN. The forum uses one essential session cookie for authentication, form security and language selection. When a purchase is started, the user is redirected to the external Lemon Squeezy checkout, which may use cookies and similar technologies under its Privacy Policy. External checkout resources are not loaded on the homepage.

11. Automated licence handling

The system automatically checks licence status and token balance and may automatically generate a key or refuse a function where no entitlement or token is available. This is necessary to perform the requested service. A user may request human review of the outcome by contacting the controller's email address.

12. Changes to this Policy

This Policy may be updated if the website, software, forum, providers or applicable law changes. The current version will remain available at the same URL.