Privacy policy

Who is responsible for your data

Peasy HR is the controller of the personal data described here. You can reach us about privacy at privacy@peasyhr.com.

What we collect

We only collect what we need to run the service:

• Account and contact details: your name, email address, job title, company name, and company website.
• Content you create: the Functions, competencies, role tracks, and levels you build, plus any text you enter.
• Support messages: the email address and message you send us through the support widget or contact form.
• Billing details: when you subscribe, our payment processor (Stripe) handles your card data. We never see or store your full card number.
• Technical and usage data: basic logs such as your IP address, browser type, pages you visit, and timestamps, used to keep the service secure, working, and to measure our advertising.

How we use your data

• To provide the service: build, save, and export your competency frameworks.
• To generate content with AI: when you ask us to draft competencies, we send your inputs to an AI provider on our behalf.
• To sign you in: we use one-time email codes instead of passwords.
• To bill you: manage subscriptions and payments for paid plans.
• To support you: answer your questions and fix problems.
• To send service emails: confirmations, sign-in codes, and account notices. We only send marketing email if you opt in, and you can unsubscribe anytime.
• To keep things safe and legal: prevent abuse and meet our legal obligations.
• To measure marketing: understand whether our advertising brings people to Peasy HR and how the site is used, through tools such as Google Ads.

Our legal bases (EU, UK, and Brazil)

If you are in the European Economic Area, the United Kingdom, or Brazil, we rely on these legal bases:

• Performance of a contract: to give you the service you signed up for.
• Consent: for optional marketing email, advertising cookies where required by law, and any non-essential processing. You can withdraw consent at any time.
• Legitimate interests: to keep the service secure, prevent abuse, and improve it.
• Legal obligation: to comply with laws that apply to us.

AI processing

Peasy HR uses AI to draft competency content. When you use an AI feature, the inputs you provide are sent to a third-party AI provider (such as OpenAI, Anthropic, or Google) that generates the output for us. We choose providers that do not use this data to train their models. AI output can be inaccurate, so review it before you rely on it.

Who we share data with

We do not sell your personal data. We share it only with service providers who help us run Peasy HR, and only as needed:

• Vercel: application hosting.
• Neon: database hosting (United States).
• Stripe: payment processing.
• Mailgun: sending email.
• AI providers (OpenAI, Anthropic, Google): generating competency content.
• Google (Google Ads): measuring advertising performance and site usage related to our ads.

These providers act on our instructions under contract. We may also disclose data if the law requires it or to protect Peasy HR and its users.

International data transfers

Because our data is hosted in the United States, using Peasy HR from outside the US involves transferring your data to the US. Where required, we use approved safeguards such as the European Commission's Standard Contractual Clauses to protect your data during these transfers.

How long we keep data

We keep your account data for as long as your account is active. If you close your account or ask us to delete your data, we remove it within 30 days, except where we must keep some records to meet legal, tax, or security obligations.

How we protect your data

We use encryption in transit, access controls, and reputable infrastructure providers. No system is perfectly secure, but we work to protect your data and will notify you and regulators of a breach when the law requires it.

Your privacy rights

Depending on where you live, you have rights over your personal data. We honor these rights for everyone, wherever you are:

• Access: get a copy of the data we hold about you.
• Correction: fix data that is wrong or incomplete.
• Deletion: ask us to delete your data.
• Portability: receive your data in a portable format.
• Objection and restriction: object to or limit certain processing.
• Withdraw consent: opt out of marketing or other consent-based processing.

To exercise any right, email privacy@peasyhr.com. We respond within the timelines set by the law that applies to you. You can also complain to your local data protection authority (in Brazil, the ANPD).

US privacy rights

We do not sell your personal information. We use Google Ads to measure our marketing, which may involve sharing limited technical and usage data with Google for advertising measurement. If you are a California resident, you have the right to know, delete, and correct your personal information, and to opt out of certain sharing for advertising where the law applies. We will not discriminate against you for using these rights. To make a request, email privacy@peasyhr.com.

Cookies and advertising

We use an essential cookie to keep you signed in. We also use the Google Ads tag, which may set cookies and collect usage data (such as pages visited and your IP address) to measure our advertising and, where applicable, show or limit Peasy HR ads.

You can read more in Google's privacy policy and use Google's ad settings or your browser's cookie controls to opt out of personalized ads where available.

Children

Peasy HR is a workplace tool and is not directed to children. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.

Changes to this policy

We may update this policy as the product or the law changes. We will update the date at the top and, for important changes, let you know by email or in the app.

Contact us

Questions about privacy or your data? Email privacy@peasyhr.com.