Get Started

Privacy Policy

Last updated: August 2026

EZBunny ("we," "us," or "our") is a product of Easy Synergy Corp. This policy explains what personal information we collect when you use ezbunny.com and app.ezbunny.com (the "Service"), how we use it, and what choices you have.

1. Information We Collect

In short: we only collect what we need to run your training and keep your account working.

We don't collect Protected Health Information (PHI). EZBunny is a training platform. We don't store, process, or transmit any patient data.

Our free HIPAA tools do not collect consumer health data. The interactive tools on our site (for example the BAA decision tool, cost calculator, and audit-ready scorecard) ask about your organization's compliance practices, not any individual's health, and your answers are scored in your browser. If you ask us to email your report, we receive your email address and a general category of your result (for example a readiness band). We never receive your individual answers, patient information, or the free text of anything you type.

2. How We Use Your Information

In short: we use your info to run the service, send you what you need, and fix problems.

3. Third-Party Services

In short: a handful of service providers help us run EZBunny, and we never sell your information.

We name three more tools directly, so you can see what each one collects:

We don't sell your personal information. Period. If you want to know exactly which providers we use, email us at the address below.

4. Cookies

In short: some cookies keep you signed in, others tell us how the product is used and where your visit came from, and your browser can clear any of them.

Here is what each kind of cookie does:

Your browser is where you control them. Every major browser lets you see the cookies a site has set, delete them, and block new ones, usually under Settings and then Privacy. Clearing the authentication cookie signs you out. Clearing the other two costs you nothing: your training records live in your account, not in a cookie.

5. Data Retention

In short: we keep your data while your account is active, and some records stay longer. The table says which, and why.

Here is what we keep, for how long, and what an erasure request removes. Where the answer is no, the reason sits in the same row. Section 6 explains how to ask.

How long we keep each kind of information, and what an erasure request removes.
What we hold How long What decides that Erased if you ask?
Account and profile While your account is active We keep it while there is an account to serve. Yes
Training progress and quiz results While your account is active We keep it while there is an account to serve, and your organization's compliance record depends on it. Yes
Certificates While your account is active We keep it while there is an account to serve, and a certificate is your own evidence that you did the training. Yes
Email records 1 to 10 years, by kind We keep the record of what we sent you in full, your address included, to establish, exercise or defend legal claims. Contract and billing email, 10 years. Invitations, training reminders and certificate notices, 6 years, because your organization owes six years of documentation that its workforce was trained and reminded, and our send log is part of that evidence. Routine product email, 1 to 3 years. No
Payment and billing About 7 years Invoices, the payment method and the billing address are your organization's financial records, held by our payment processor. We keep them to answer questions about past charges and to support tax filings for earlier years. No
Sign-in history While your account is active A security record of who signed in to your account, and when. Yes
Admin and audit records Kept as a security record Retained by design, so there is a lasting record of who did what to an organization's account. No
Analytics and error data Kept as aggregate product data Not linked to your account. No

6. Your Privacy Rights

In short: you can ask us what we hold, get a copy, fix it, or have it erased. One email starts any of it.

Everyone gets the same privacy rights here, wherever you live. This is a commitment we make to you in this policy, and we keep it for anyone who asks.

We don't sell or share your personal information for cross-context behavioral advertising. That's the legal term for tracking you across other companies' sites to target ads at you, and we don't do it, so there's nothing here to opt out of. A Global Privacy Control signal from your browser has nothing to act on.

How to ask, and how we check it's you. Email [email protected]. We confirm that you control the email address on your account, and that's the only check we run: we will never ask you for a driver's license, a passport, or any other ID document. Asking for a passport to act on a privacy request would mean collecting more sensitive information about you than we started with, which defeats the point.

We'll respond within 45 days. We won't treat you differently for exercising your rights.

If we say no. You can appeal within 60 days of our decision by replying to the same address. If we turn down your appeal, we'll tell you how to contact your state Attorney General.

Your employer can't erase your training record. An organization admin can take you off their roster and free up your seat. They can't have your training history or your certificates deleted: those records are your own evidence that you completed the training, and only you can ask us to erase them. One exception: if you never accepted your invitation and have no training history, there's no record to protect, so we'll remove you at your organization's request.

7. Data Security

In short: your data is encrypted everywhere, and we don't touch patient information.

If we discover a security incident affecting your personal information, we will notify you and applicable authorities as required by law.

8. Children's Privacy

EZBunny isn't built for children under 13, and we don't knowingly collect their information. If we find out we have, we'll delete it right away. If you think a child under 13 has given us personal information, please let us know at [email protected].

9. Changes to This Policy

We may update this policy from time to time. If we make a big change, we'll let you know by email (if you have an account) or by posting a notice on our site. If you keep using the Service after changes take effect, that counts as accepting the updated policy.

10. Contact Us

Questions about this policy or want to exercise your privacy rights? Reach out:

Easy Synergy Corp
Email: [email protected]