The terms that govern your use of EazeAccounts software and services.
These Terms & Conditions (“Terms”) are a legally binding agreement between you and Erihaan Business Services Inc., dba EazeAccounts. Please read them carefully. By using our Services, you agree to be bound by these Terms.
Jump to key areas
These Terms & Conditions (“Terms”) are a legally binding agreement between you and Erihaan Business Services Inc., a Delaware corporation, doing business as EazeAccounts (“EazeAccounts,” “we,” “us,” or “our”) governing your access to and use of our websites, applications, platform, software, tools, content, communications, and related services, including without limitation the website located at eazeaccounts.com and any subdomains, dashboards, portals, APIs, AI features, and related services (collectively, the “Services”).
By accessing, browsing, clicking “I agree,” creating an account, purchasing a subscription, or otherwise using any part of the Services, you agree to be bound by these Terms. If you do not agree, do not access or use the Services.
If you are using the Services on behalf of a company, partnership, firm, or other entity, you represent and warrant that you have authority to bind that entity, and “you” includes that entity.
You may use the Services only if:
You may not use the Services if doing so would violate any applicable law, regulation, sanction, or contractual restriction.
EazeAccounts provides software and related services intended to support accounting operations, bookkeeping workflows, payroll-related workflows, tax-related workflows, reporting, automation, AI-assisted workflows, business operations support, and related functions.
The Services may include, without limitation:
The Services may change over time. We may add, remove, modify, suspend, or discontinue features, functionality, integrations, or portions of the Services at any time, with or without notice, to the maximum extent permitted by law.
Related policies
Final U.S. Nationwide Version
This Subscription Agreement (“Agreement”) is a legally binding agreement between the customer identified in the applicable online checkout, order form, quote, statement of work, invoice, or account registration (“Customer,” “you,” or “your”) and Erihaan Business Services Inc., a Delaware corporation doing business as EazeAccounts (“EazeAccounts,” “we,” “our,” or “us”).
By purchasing, activating, accessing, or using a paid subscription plan, you agree to this Agreement, the Terms & Conditions, Privacy Policy, Data Processing Addendum, Cookie Policy, EazeAI Use and Disclosure Policy, Acceptable Use Policy if published, and any additional terms incorporated by reference.
To the maximum extent permitted by applicable law, any dispute, claim, or controversy arising out of or relating to this policy, agreement, addendum, disclosure, or your use of the Services will be resolved under the arbitration agreement, class action waiver, limitation of liability, and exclusive remedy provisions in the EazeAccounts Terms & Conditions or other governing customer agreement. Nothing in this section limits rights that cannot be waived under applicable law, including rights to submit complaints to regulators or rights that must remain available under state or federal law.
EazeAccounts provides software-as-a-service and related business workflows for accounting, bookkeeping, invoicing, expense management, bank connectivity, transaction categorization, financial dashboards, document management, AI-powered automation, payroll facilitation through partners, tax-support workflows, entity-formation support, reporting, and related features (“Subscription Services”). Features vary by plan, geography, partner availability, regulatory requirements, and customer configuration.
EazeAccounts may offer plan levels such as Free, Smart, Pro, Enterprise, Bookkeeping, Payroll, Tax, Compliance, or custom plans. Plan features, usage limits, company/entity limits, user seats, storage, bank connections, invoice volume, payroll limits, API calls, support level, AI usage, and partner access may vary by plan.
We may add, remove, modify, suspend, discontinue, or replace features as part of product improvement, security, compliance, partner changes, or business needs. We will provide reasonable advance notice of materially adverse changes to paid core features where legally required.
EazeAccounts intends to offer services across the United States. However, availability and scope of accounting, payroll, tax, entity-formation, sales-tax, occupancy-tax, business-license, and compliance workflows may vary by state, locality, industry, customer facts, partner availability, and law. Customer acknowledges that state and local requirements can differ materially and can change without advance notice.
Customer must provide accurate account, billing, company, user, tax, payroll, and compliance information. Customer is responsible for all activity under its account, including activity by invited users, administrators, employees, contractors, accountants, bookkeepers, CPAs, partners, and integrations. Customer must maintain secure credentials, enable security features where available, and promptly remove user access when no longer needed.
Customer retains ownership of data submitted to the Services (“Customer Data”). Customer grants EazeAccounts a worldwide, non-exclusive, royalty-free license to host, process, transmit, display, copy, back up, analyze, secure, and use Customer Data as necessary to provide, support, secure, improve, and develop the Services, comply with law, prevent fraud, enforce agreements, and create aggregated or de-identified analytics.
EazeAccounts does not sell Customer Data. EazeAccounts may use aggregated or de-identified data to improve system performance, code architecture, product design, workflows, algorithms, fraud detection, AI quality, benchmarks, and internal research and development.
During an active subscription, Customer may export certain data using available export tools. Export formats may vary by module. After termination, access may be limited or unavailable. EazeAccounts may delete Customer Data after ninety (90) days following termination unless law, backup cycles, dispute needs, security, tax, accounting, or contractual obligations require or permit longer retention. Customer is responsible for exporting data before cancellation or termination.
The Services may integrate with Stripe, Plaid, AWS, banks, payroll providers, tax providers, payment processors, CRM tools, email/SMS providers, analytics providers, AI infrastructure providers, and other third-party services. Third-party services are governed by their own terms, privacy policies, fees, availability, uptime, data practices, and compliance obligations. EazeAccounts is not responsible for third-party service failures, data errors, changes, outages, denials, verification decisions, or compliance obligations except as expressly required by law or written agreement.
Unless a separate signed engagement letter or statement of work expressly states otherwise, EazeAccounts does not provide legal advice, tax advice, investment advice, audit services, attestation services, or CPA services. Software outputs, dashboards, reports, EazeAI responses, estimates, reminders, categorizations, and calculations are informational and may be incomplete, outdated, or inaccurate. Customer is solely responsible for reviewing outputs, approving filings and payments, verifying obligations, and consulting qualified professionals.
Where EazeAccounts provides bookkeeping or compliance support, the service is limited to the scope stated in the applicable order form or statement of work. Federal, state, and local tax returns, payroll filings, annual reports, business licenses, sales tax, occupancy tax, estimated taxes, 1099/W-2 filings, and other compliance items are included only if expressly listed in writing.
EazeAI and automated features may categorize transactions, suggest mappings, generate insights, preliminary explanations, detect anomalies, estimate tax/compliance issues, and answer questions. Outputs are suggestions and must be reviewed by Customer or a qualified professional. EazeAI is not a human professional and does not provide legal, tax, accounting, financial, payroll, or investment advice. Additional terms are in the EazeAI Use and Disclosure Policy.
EazeAccounts uses commercially reasonable administrative, technical, and physical safeguards designed to protect the Services. Customer is responsible for endpoint security, secure passwords, MFA where available, user access review, integration authorization, device protection, phishing prevention, and internal controls. No system is guaranteed to be error-free or secure.
Each party may receive non-public information from the other party. Each party agrees to protect confidential information using reasonable care and to use it only for purposes of the Agreement. Confidential information excludes information that is public, independently developed, lawfully received from another source, or required to be disclosed by law.
The Services are provided “AS IS” and “AS AVAILABLE” to the maximum extent permitted by law. EazeAccounts disclaims all warranties, including implied warranties of merchantability, fitness for a particular purpose, title, non-infringement, accuracy, uninterrupted operation, error-free performance, regulatory compliance, tax outcome, financial outcome, or professional suitability. Customer uses the Services at its own risk.
To the fullest extent permitted by law, EazeAccounts will not be liable for indirect, incidental, special, consequential, exemplary, punitive, or enhanced damages; lost profits; lost revenue; lost business; lost data; substitute services; loss of goodwill; penalties; interest; tax liabilities; payroll liabilities; state filing penalties; regulatory fines; or damages arising from customer data errors, third-party services, partner services, or reliance on AI/software outputs.
To the fullest extent permitted by law, EazeAccounts’ total cumulative liability under this Agreement will not exceed the greater of: (a) USD $1,000; or (b) the fees paid by Customer to EazeAccounts for the affected Services during the three (3) months preceding the event giving rise to the claim. Some jurisdictions do not allow certain limitations, so the above limitations apply only to the maximum extent permitted by law.
Customer will defend, indemnify, and hold harmless EazeAccounts and its officers, directors, employees, contractors, affiliates, and partners from claims, damages, liabilities, penalties, costs, and expenses arising from Customer Data, Customer’s use of the Services, inaccurate or unlawful data, violation of law, violation of this Agreement, user misuse, filings or payments approved by Customer, or disputes between Customer and its employees, vendors, customers, accountants, bookkeepers, CPAs, partners, or government authorities.
This Agreement is governed by the laws of the State of Delaware, without regard to conflict-of-law principles. Unless prohibited by law, disputes will be resolved by binding individual arbitration in Henrico County, Virginia, under the arbitration terms in the Terms & Conditions. Customer waives the right to participate in class actions, class arbitration, private attorney general actions, or representative proceedings to the fullest extent permitted by law.
EazeAccounts may update this Agreement from time to time. Material changes will be posted or otherwise communicated. Continued use after the effective date means Customer accepts the updated Agreement to the extent permitted by law. If Customer does not agree, Customer must stop using the Services and cancel before renewal.
Erihaan Business Services Inc. dba EazeAccounts 1717 E Cary St, Richmond, VA 23223 Email: info@eazeaccounts.com
Expanded AI Transparency, Safety, and State Compliance Version
To the maximum extent permitted by applicable law, any dispute, claim, or controversy arising out of or relating to this policy, agreement, addendum, disclosure, or your use of the Services will be resolved under the arbitration agreement, class action waiver, limitation of liability, and exclusive remedy provisions in the EazeAccounts Terms & Conditions or other governing customer agreement. Nothing in this section limits rights that cannot be waived under applicable law, including rights to submit complaints to regulators or rights that must remain available under state or federal law.
This EazeAI Use and Disclosure Policy explains how EazeAccounts uses artificial intelligence, machine learning, automation, rules engines, conversational tools, classification systems, and related technologies (“EazeAI”) in connection with the Services. EazeAI may support accounting workflows, bookkeeping, payroll coordination, tax-estimation support, compliance reminders, entity-formation guidance, document review, transaction categorization, reporting, anomaly detection, and productivity recommendations.
This Policy applies to all users of EazeAI, including business owners, employees, accountants, bookkeepers, CPAs, advisors, administrators, and invited users. It should be read with the Privacy Policy, Data Processing Addendum, Cookie Policy, Subscription Agreement, and Terms & Conditions.
EazeAccounts intends to serve customers across the United States. Because U.S. privacy, security, tax, payroll, consumer protection, professional-services, and breach-notification requirements vary by state and can change frequently, this document is structured as a nationwide framework. Where a state, federal, or local law gives you additional rights or requires different procedures, EazeAccounts will apply the rights and procedures required by that law to eligible individuals and covered processing activities. If there is a conflict between this policy and a mandatory legal requirement, the mandatory legal requirement controls.
EazeAI is not a human professional and does not provide legal, tax, accounting, audit, payroll, financial, investment, employment, immigration, insurance, or regulatory advice. EazeAI outputs are suggestions, preliminary work product, estimates, classifications, or informational responses for user review. You remain solely responsible for verifying outputs and decisions, consulting qualified professionals, approving filings and payments, and complying with federal, state, local, and international law.
Feature Type
Description
Conversational assistant
Answers questions about workflows, reports, transactions, dashboard data, and EazeAccounts features.
Transaction categorization
Suggests chart-of-account categories, vendors, match candidates, duplicate detection, and bank reconciliation actions.
Document and receipt assistance
Extracts or suggests information from uploaded documents, bills, invoices, statements, or receipts where enabled.
Anomaly and fraud indicators
Flags unusual transactions, duplicate payments, missing documentation, suspicious patterns, or workflow exceptions.
Tax and compliance support
Provides reminders, preliminary schedules, estimates, or checklist guidance based on user data and configured jurisdictions.
Payroll and workforce workflow support
Assists with setup, reminders, wage classifications, payroll status, and partner coordination where enabled.
Productivity automation
Finals emails, explanations, notes, task lists, closing checklists, and customer/vendor communications.
EazeAccounts does not intentionally use Customer Data to train public third-party AI models unless expressly disclosed and authorized. Where third-party AI infrastructure is used, EazeAccounts intends to use secure, contractual, enterprise, private, or no-training configurations where available and appropriate for the Services.
EazeAI may generate incomplete, inaccurate, outdated, biased, inconsistent, or imprecise outputs. It may misunderstand context, apply incorrect assumptions, misclassify transactions, fail to identify legal or tax nuances, or produce confident-sounding responses that are wrong. EazeAI should be used as an assistant, not as the final decision-maker.
EazeAccounts will identify AI-powered features through user interface labels, documentation, help text, policy disclosures, or workflow design where appropriate. Users should understand when they are interacting with AI or using AI-generated suggestions.
Certain state AI laws and regulations may require additional disclosures, risk management, impact assessments, human review, appeals, or notices when AI is used for high-risk or consequential decisions. EazeAccounts does not intend EazeAI to be used as the sole basis for such decisions. If Customer uses EazeAI or exported outputs in a high-risk decision context, Customer is responsible for complying with applicable law unless a separate written agreement expressly states otherwise.
Jurisdiction / Area
Compliance Consideration
Colorado
High-risk AI requirements and AI-interaction disclosure obligations may apply to certain developers or deployers.
California
Automated decision-making, privacy, and consumer disclosure rules may apply depending on final regulations and use context.
Other U.S. states
Consumer privacy, profiling, automated decision-making, biometric, employment, and unfair/deceptive practices laws may apply based on use.
Federal
FTC Act, sector rules, discrimination laws, financial services laws, tax-professional rules, employment laws, and consumer-protection rules may apply depending on context.
Users should minimize sensitive data in prompts. Do not include full Social Security numbers, full bank account numbers, full payment card numbers, passwords, authentication codes, personal health information, children’s data, immigration records, or highly sensitive information unless necessary for an approved feature and permitted by the applicable agreement and law. If sensitive data is needed, use structured platform fields instead of free-text prompts where possible.
EazeAI may use EazeAccounts-hosted models, third-party AI infrastructure providers, cloud providers, vector databases, search systems, rules engines, and other vendors. EazeAccounts will use commercially reasonable confidentiality, security, and data-protection safeguards appropriate to the sensitivity of data and nature of processing. Vendor use may vary by plan, feature, customer configuration, enterprise settings, and legal requirements.
EazeAccounts may monitor EazeAI usage to detect abuse, improve safety, troubleshoot errors, enforce terms, prevent fraud, secure the platform, and improve quality. Human reviewers or support personnel may access prompts, outputs, and related context where necessary for support, security, compliance, or quality assurance, subject to confidentiality obligations and access controls.
EazeAccounts may maintain logs of AI prompts, outputs, user actions, accepted/rejected suggestions, overrides, and workflow decisions to support auditability, customer review, support, security, dispute resolution, compliance, and product improvement. Retention is governed by the Privacy Policy, DPA, and account settings where available.
EazeAI is provided “AS IS” and “AS AVAILABLE.” EazeAccounts disclaims warranties concerning accuracy, completeness, tax outcome, financial outcome, compliance outcome, suitability, non-infringement, or error-free operation. To the maximum extent permitted by law, EazeAccounts is not liable for losses, penalties, interest, filings, payroll errors, tax positions, business decisions, professional decisions, or other consequences arising from reliance on EazeAI outputs. Liability is limited as stated in the Terms & Conditions, Subscription Agreement, or other governing agreement.
We may update this Policy as EazeAI evolves or laws change. Continued use of EazeAI after updates take effect means you accept the updated Policy to the extent permitted by law.
Erihaan Business Services Inc. dba EazeAccounts 1717 E Cary St, Richmond, VA 23223 Email: info@eazeaccounts.com
Final U.S. Nationwide Version
To the maximum extent permitted by applicable law, any dispute, claim, or controversy arising out of or relating to this policy, agreement, addendum, disclosure, or your use of the Services will be resolved under the arbitration agreement, class action waiver, limitation of liability, and exclusive remedy provisions in the EazeAccounts Terms & Conditions or other governing customer agreement. Nothing in this section limits rights that cannot be waived under applicable law, including rights to submit complaints to regulators or rights that must remain available under state or federal law.
This Privacy Policy explains how EazeAccounts collects, uses, discloses, stores, protects, and otherwise processes personal information in connection with our websites, applications, mobile experiences, platform, AI features, accounting tools, bookkeeping workflows, payroll facilitation, tax-support workflows, entity-formation support, payment integrations, bank-connectivity features, customer support, marketing, and related services (collectively, the "Services").
This Policy applies to business customers, account owners, administrators, employees, contractors, invited users, accountants, bookkeepers, CPAs, vendors, customers of our customers, website visitors, job or partner applicants, and other individuals whose personal information we process. It should be read together with the Terms & Conditions, Subscription Agreement, Data Processing Addendum, EazeAI Use and Disclosure Policy, Cookie Policy, and any order form or statement of work.
EazeAccounts intends to serve customers across the United States. Because U.S. privacy, security, tax, payroll, consumer protection, professional-services, and breach-notification requirements vary by state and can change frequently, this document is structured as a nationwide framework. Where a state, federal, or local law gives you additional rights or requires different procedures, EazeAccounts will apply the rights and procedures required by that law to eligible individuals and covered processing activities. If there is a conflict between this policy and a mandatory legal requirement, the mandatory legal requirement controls.
Depending on the context, EazeAccounts may act as a controller/business that decides why and how personal information is processed, or as a processor/service provider that processes personal information on behalf of a customer. For example, we generally act as a controller for account registration, billing, platform security, marketing, support, fraud prevention, and product analytics. We generally act as a processor or service provider when we process end-user, payroll, accounting, vendor, customer, or transaction data submitted by a business customer for use within the Services.
Unless separately agreed in writing, EazeAccounts is not acting as a HIPAA business associate and the Services are not intended to store protected health information. Customers should not upload health data, government identifiers, children’s data, biometric data, or other highly sensitive data unless necessary for the specific Service and permitted by the applicable agreement and law.
Category
Examples
Primary Purposes
Identifiers and contact data
Name, email, phone number, business address, mailing address, login ID, account ID, signature, IP address, and related identifiers.
Create and manage accounts, authenticate users, provide support, billing, security, compliance, communications.
Business profile and professional data
Company name, entity type, EIN or tax ID when required, industry, role, job title, CPA/bookkeeper relationship, business licenses, ownership or officer information.
Customer onboarding, entity-support workflows, accounting/payroll/tax support, compliance, partner matching, account administration.
Financial, accounting, and transaction data
Bank transactions, chart of accounts, invoices, bills, receipts, statements, journal entries, reports, payment status, customer/vendor balances, tax schedules, reconciliation data.
Deliver accounting, bookkeeping, reporting, reconciliation, payment, and advisory-support workflows.
Banking and payment data
Tokenized bank-connection data, payment identifiers, partial account details, payment method metadata, Stripe/Plaid/bank integration status, ACH or card payment status.
Payment processing, bank connectivity, fraud prevention, reconciliation, invoicing, subscription billing.
Payroll and workforce data
Employee names, addresses, compensation, payroll elections, tax withholding details, time/payroll records, benefit-related data if enabled, payroll partner IDs.
Payroll setup, payroll processing facilitation, compliance support, employer reporting, employee access.
Tax and compliance data
Tax forms, filing status, estimated tax information, federal/state/local filing data, tax-payment confirmations, occupancy tax, sales tax, 1099, W-2, and other compliance records.
Tax-support workflows, compliance reminders, preparation support, audit trail, customer recordkeeping.
Device, log, and usage data
Device type, operating system, browser, language, access time, pages visited, clickstream, error logs, session activity, API usage, security telemetry.
Security, debugging, analytics, performance, fraud detection, compliance, product improvement.
Cookies and tracking data
Cookie IDs, advertising IDs, analytics identifiers, browser settings, consent choices, referral URLs, campaign attribution.
Authentication, preferences, analytics, marketing measurement, consent management.
Support and communications
Emails, chats, calls, tickets, feedback, survey responses, attachments, screen recordings or screenshots submitted by users.
Support, training, dispute resolution, quality assurance, product improvement.
EazeAI prompts and outputs
Prompts, questions, uploaded context, generated suggestions, AI interaction logs, feedback, corrections, and workflow actions.
Operate EazeAI, improve workflows, detect errors, support customers, maintain safety and quality controls.
Sensitive personal information
Government identifiers, financial account details, credentials or tokens, precise geolocation if enabled, tax information, payroll information, and other legally sensitive data.
Only as necessary to provide requested Services, secure accounts, comply with law, or with consent where required.
Where laws such as GDPR, UK GDPR, or similar frameworks apply, we process personal information based on one or more legal bases: performance of a contract; legitimate interests in operating, improving, securing, and supporting the Services; compliance with legal obligations; consent where required; and protection of vital interests or public-interest obligations in limited circumstances.
Recipient Category
Examples
Purpose
Service providers and subprocessors
Cloud hosting, security, analytics, customer support, email/SMS, storage, logging, AI infrastructure, payment processors, payroll partners, accounting integrations, and data processing vendors.
Operate and support the Services under contractual obligations.
Payment, banking, and financial partners
Stripe, Plaid, banks, card networks, ACH processors, payroll companies, tax-payment or compliance partners, and similar providers.
Bank connections, payment processing, payroll, tax-support, compliance, fraud prevention.
Authorized users and customer-designated parties
Account owners, admins, employees, accountants, bookkeepers, CPAs, advisors, vendors, or other users authorized by the customer.
Collaboration, delegated access, service delivery, customer instructions.
Professional advisors
Attorneys, auditors, accountants, insurers, consultants, and compliance advisors.
Legal, audit, financial, insurance, compliance, and risk-management purposes.
Government, regulators, and law enforcement
Tax authorities, courts, regulators, law enforcement, or government agencies.
Compliance with legal obligations and lawful requests.
Business transfers
Potential or actual acquirers, investors, lenders, or successors.
Merger, acquisition, financing, reorganization, bankruptcy, or transfer of assets.
Aggregated or de-identified data recipients
Partners, analytics providers, research, benchmarking, or product-performance recipients.
Product analytics, benchmarking, market insights, and platform improvement where individuals are not reasonably identifiable.
EazeAccounts does not sell personal information for money. We do not knowingly sell or share personal information of minors. If we use advertising or analytics technologies that are considered a “sale,” “sharing,” targeted advertising, or cross-context behavioral advertising under applicable law, we will provide required notices and opt-out controls, including cookie controls and applicable browser-based opt-out signals where required.
Marketing emails may be opted out of at any time using the unsubscribe link or by contacting us. Transactional, security, billing, legal, and service-related notices may still be sent as permitted by law.
Residents of certain U.S. states may have rights regarding personal information, depending on the law that applies and the context in which we process the information. These rights may include:
To submit a request, contact us at info@eazeaccounts.com or use any privacy request form made available through the Services. We may verify your identity and authority before responding. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and verification of the consumer. Response times, appeal rights, and verification standards vary by state.
| State / Jurisdiction | Representative Law or Framework | Status |
|---|---|---|
| California | California Consumer Privacy Act, as amended by CPRA | In effect |
| Virginia | Virginia Consumer Data Protection Act | In effect |
| Colorado | Colorado Privacy Act | In effect |
| Connecticut | Connecticut Data Privacy Act / Act Concerning Personal Data Privacy and Online Monitoring | In effect; amendments effective in 2026 |
| Utah | Utah Consumer Privacy Act | In effect; correction-right amendment effective July 1, 2026 |
| Florida | Florida Digital Bill of Rights | In effect for covered entities meeting statutory thresholds |
| Texas | Texas Data Privacy and Security Act | In effect |
| Oregon | Oregon Consumer Privacy Act | In effect |
| Montana | Montana Consumer Data Privacy Act | In effect |
| Delaware | Delaware Personal Data Privacy Act | In effect |
| Iowa | Iowa Consumer Data Protection Act | In effect |
| Nebraska | Nebraska Data Privacy Act | In effect |
| New Hampshire | New Hampshire Privacy Act / Expectation of Privacy law | In effect |
| New Jersey | New Jersey Data Privacy Act | In effect |
| Tennessee | Tennessee Information Protection Act | In effect |
| Minnesota | Minnesota Consumer Data Privacy Act | In effect |
| Maryland | Maryland Online Data Privacy Act | In effect |
| Indiana | Indiana Consumer Data Protection Act | In effect January 1, 2026 |
| Kentucky | Kentucky Consumer Data Protection Act | In effect January 1, 2026 |
| Rhode Island | Rhode Island Data Transparency and Privacy Protection Act | In effect January 1, 2026 |
For U.S. residents in states not listed above, EazeAccounts will comply with applicable state privacy, consumer protection, data security, electronic communications, biometric, children’s privacy, and breach-notification requirements as they apply to the Services. State-specific laws may include narrower requirements for particular data types, such as biometric data, health data, education data, children’s data, employee data, social security numbers, driver’s license numbers, or breach notices.
This section supplements the rest of the Privacy Policy for California residents. The categories of personal information we may collect are described in Section 3. The categories of sources are described in Section 4. The purposes for collection, use, and disclosure are described in Sections 5 and 7. Retention periods are described in Section 16.
California residents may request to know, access, delete, correct, opt out of sale or sharing, limit the use and disclosure of sensitive personal information, and exercise the right to non-discrimination. Where legally required, EazeAccounts will honor Global Privacy Control signals for browsers or devices used to access our websites or services. If a “Do Not Sell or Share My Personal Information” or “Limit the Use of My Sensitive Personal Information” link is required for a particular service or website, EazeAccounts will provide such a link or a compliant alternative opt-out mechanism.
CA Category
Collected?
Disclosed To
Sold/Shared?
Identifiers
Yes
Service providers; authorized users; financial/payment partners; regulators where required
No monetary sale; possible sharing for analytics/ads only if enabled and legally disclosed
Customer records and financial data
Yes
Service providers; authorized users; payment/banking/payroll partners; advisors; regulators
No
Commercial information
Yes
Service providers; analytics; payment partners; authorized users
No monetary sale; possible advertising attribution if enabled
Internet or network activity
Yes
Security, analytics, hosting, support, advertising tools if enabled
Possible sharing/targeted advertising only if enabled and opt-out controls provided
Geolocation
Approximate from IP; precise only if feature-enabled
Service providers and security tools
No
Professional or employment-related information
Yes, if submitted for payroll or account management
Payroll partners, service providers, authorized users
No
Sensitive personal information
Yes, where necessary for tax, payroll, payments, security, or account services
Service providers, partners, regulators, authorized users
No
Inferences
Limited, for analytics, fraud, categorization, and product features
Service providers and authorized users where feature-enabled
No monetary sale; targeted advertising only if enabled
For residents of states with comprehensive consumer privacy laws, EazeAccounts provides rights consistent with the law applicable to the individual and processing activity. Where EazeAccounts acts as a processor/service provider for a customer, we may direct the individual to the customer/controller or assist the customer in responding as required by the Data Processing Addendum. Where EazeAccounts acts as controller, we will respond directly to eligible requests.
If your state grants appeal rights and we deny your request, you may appeal by replying to our decision email or by contacting info@eazeaccounts.com with the subject “Privacy Appeal.” We will respond within the timeframe required by applicable law. If your appeal is denied, we will provide information required by law, which may include how to contact the relevant attorney general or regulator.
Nevada residents may have the right to opt out of certain sales of covered information under Nevada law. EazeAccounts does not currently sell covered information as defined by Nevada law. Nevada residents may still submit an opt-out request to info@eazeaccounts.com.
The Services are intended for business use and are not directed to children under 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us without appropriate consent, contact us and we will take appropriate steps to delete or restrict the information.
Because EazeAccounts may process financial, payroll, accounting, tax, and business records, we maintain administrative, technical, and physical safeguards designed to protect customer information. Safeguards may include encryption in transit and at rest, access controls, least-privilege permissions, audit logging, vulnerability management, backups, monitoring, vendor due diligence, employee confidentiality obligations, and incident-response procedures. Customers and professionals using EazeAccounts remain responsible for their own compliance obligations, including any written information security plans, tax-professional obligations, and professional standards applicable to their business.
EazeAccounts is based in the United States. We and our vendors may process personal information in the United States and other countries where we or they operate. Where required, we use appropriate transfer safeguards such as Standard Contractual Clauses, data-processing terms, consent, adequacy decisions, or other lawful transfer mechanisms.
Record Type
Retention Approach
Account and profile records
For the life of the account plus a reasonable period for audit, legal, fraud-prevention, and business continuity purposes.
Financial, accounting, tax, and payroll records
As instructed by the customer, as required by law, or as reasonably needed for accounting, tax, audit, dispute, and compliance purposes.
Payment and billing records
As required for tax, accounting, chargeback, anti-fraud, and payment-processing obligations.
Support tickets and communications
As needed for support history, training, dispute resolution, security, and legal compliance.
Security logs and telemetry
For a reasonable period based on security, fraud-prevention, incident-response, and compliance needs.
Marketing records
Until opt-out, deletion, or no longer needed for lawful marketing and analytics purposes.
De-identified or aggregated data
May be retained without time limit where individuals are not reasonably identifiable and legal requirements are met.
If we become aware of a security incident involving personal information, we will investigate, take appropriate containment and remediation steps, and provide notifications required by applicable federal, state, and international laws. U.S. breach notification laws vary by state and may require notices to affected individuals, attorneys general, consumer reporting agencies, financial institutions, regulators, or other parties depending on the facts. Customer contracts may include additional notice obligations.
We may update this Privacy Policy from time to time. If changes are material, we will provide notice by posting an updated policy, sending email notice, providing in-product notice, or using another legally appropriate method. Continued use of the Services after the effective date of an updated policy means you accept the updated policy to the extent permitted by law.
Erihaan Business Services Inc. dba EazeAccounts 1717 E Cary St, Richmond, VA 23223 Email: info@eazeaccounts.comPrivacy requests and appeals: info@eazeaccounts.com
EazeAccounts maintains a written information security program with administrative, technical, and organizational safeguards designed to protect the data you entrust to us. Our infrastructure runs on Amazon Web Services, and we apply access controls, encryption in transit, monitoring, logging, and backup and incident-response procedures appropriate to the data we process.
How we safeguard personal, financial, and taxpayer information — and how we notify you of security incidents — is described in the Privacy Policy (see “Financial, Taxpayer, and Professional Data Safeguarding” and “Security Incidents and Breach Notification”) and in the Data Processing Addendum (see “Security Measures”) below.
No system is perfectly secure, and you are responsible for your own credentials, device security, and access management. To report a security concern, contact info@eazeaccounts.com.
Expanded Processor Terms and U.S. State Privacy Addendum
To the maximum extent permitted by applicable law, any dispute, claim, or controversy arising out of or relating to this policy, agreement, addendum, disclosure, or your use of the Services will be resolved under the arbitration agreement, class action waiver, limitation of liability, and exclusive remedy provisions in the EazeAccounts Terms & Conditions or other governing customer agreement. Nothing in this section limits rights that cannot be waived under applicable law, including rights to submit complaints to regulators or rights that must remain available under state or federal law.
This Data Processing Addendum (“DPA”) forms part of the Terms & Conditions, Subscription Agreement, order form, statement of work, or other written agreement between EazeAccounts and the customer (“Agreement”). It governs EazeAccounts’ processing of Customer Personal Data when EazeAccounts processes such data on behalf of the customer in connection with the Services.
This DPA is designed to support processing under U.S. state privacy laws, GDPR, UK GDPR, CCPA/CPRA, and similar privacy frameworks where applicable. It does not replace any separate professional engagement agreement that may apply to tax, payroll, bookkeeping, CPA, advisory, or entity-formation services.
Term
Meaning
Customer Personal Data
Personal information or personal data submitted to or accessed by EazeAccounts on behalf of Customer through the Services.
Controller / Business
The party that determines the purposes and means of processing personal data, including “business” under the CCPA/CPRA where applicable.
Processor / Service Provider / Contractor
The party that processes personal data on behalf of a controller/business under documented instructions.
Subprocessor
A third party engaged by EazeAccounts to process Customer Personal Data in connection with the Services.
Security Incident
A confirmed unauthorized access, acquisition, disclosure, or loss of Customer Personal Data under EazeAccounts’ control that triggers contractual or legal notice obligations.
Applicable Data Protection Laws
All privacy, data protection, breach notification, consumer protection, and data-security laws applicable to the relevant processing activity.
Customer is the controller/business of Customer Personal Data unless the Agreement states otherwise. EazeAccounts is the processor/service provider/contractor for Customer Personal Data processed to provide the Services. Each party will comply with obligations applicable to its role under Applicable Data Protection Laws.
Where EazeAccounts independently determines the purposes and means of processing, including for billing, fraud prevention, product security, legal compliance, account administration, and de-identified analytics, EazeAccounts may act as an independent controller/business and such processing is governed by the Privacy Policy.
EazeAccounts will process Customer Personal Data only:
Processing Element
Description
Subject matter
Providing EazeAccounts software and related services, including accounting, bookkeeping, bank connectivity, payroll facilitation, tax-support workflows, entity-formation support, payments, reporting, document management, and AI-powered automation.
Duration
For the term of the Agreement and any post-termination retention period required or permitted by law, contract, backup, audit, or security obligations.
Processing activities
Collection, recording, organization, storage, hosting, retrieval, consultation, use, transmission, disclosure, restriction, deletion, de-identification, aggregation, analysis, and support.
Data subjects
Customer users, employees, contractors, vendors, customers, account owners, administrators, accountants, bookkeepers, CPAs, beneficial owners, officers, applicants, support contacts, and other individuals whose data Customer submits.
Data categories
Identifiers, contact details, financial records, accounting records, payroll records, tax records, payment records, banking data, business data, documents, support communications, device data, usage data, and AI prompts/outputs.
Sensitive data
Government identifiers, financial account data, payroll and tax data, credentials or access tokens, and other sensitive data submitted by Customer or required for the Services.
EazeAccounts will ensure that personnel authorized to process Customer Personal Data are subject to confidentiality obligations and receive appropriate privacy and security awareness training. Access to Customer Personal Data will be limited to personnel and systems with a legitimate business need.
Control Area
Measures
Access control
Role-based access, least privilege, password controls, multi-factor authentication where feasible, administrative access review, user permission settings.
Encryption
Encryption in transit using TLS where technically feasible; encryption at rest for databases, backups, storage, and sensitive fields where technically feasible.
Logging and monitoring
Application logs, system logs, security monitoring, alerting, anomaly detection, audit trails, and retention of security records.
Network and infrastructure security
Firewalls, security groups, cloud security controls, vulnerability management, patching, segmentation, and secure configuration standards.
Data lifecycle controls
Retention schedules, deletion procedures, backups, restoration testing, data export, and secure disposal procedures.
Incident response
Incident triage, containment, investigation, remediation, customer notice, regulator support, and post-incident review.
Vendor management
Subprocessor due diligence, contractual data protection obligations, security reviews, and ongoing oversight appropriate to risk.
Business continuity
Backup, recovery, disaster recovery planning, availability monitoring, and continuity procedures.
Customer authorizes EazeAccounts to use subprocessors to provide the Services. Subprocessors may include cloud hosting providers, database and storage providers, payment processors, banking-connectivity providers, payroll providers, tax-support vendors, AI infrastructure providers, analytics providers, support-ticket providers, email/SMS providers, monitoring/logging providers, and professional service providers.
EazeAccounts will enter into written agreements with subprocessors that impose confidentiality, security, and data-protection obligations appropriate to the nature of the processing. EazeAccounts remains responsible for subprocessors to the extent required by Applicable Data Protection Laws and the Agreement, subject to the limitations of liability in the Agreement. Customer acknowledges that some third-party services, such as Stripe, Plaid, payroll companies, banks, or tax-payment partners, may act as independent controllers for certain processing governed by their own terms.
Taking into account the nature of the processing and information available to EazeAccounts, EazeAccounts will provide reasonable assistance to Customer in responding to data subject requests, including access, deletion, correction, portability, opt-out, limitation, objection, and appeal requests where required. EazeAccounts may direct individuals to Customer when Customer is the controller/business.
EazeAccounts will notify Customer without undue delay after becoming aware of a confirmed Security Incident involving Customer Personal Data under EazeAccounts’ control. Where feasible and legally permitted, EazeAccounts will aim to notify Customer within 48 hours of confirmation. Notice will include available information reasonably necessary for Customer to meet legal obligations, such as the nature of the incident, categories of data affected, approximate number of affected individuals if known, mitigation steps, and contact information for follow-up.
EazeAccounts’ notification of a Security Incident is not an admission of fault or liability. Customer is responsible for any notifications to individuals, regulators, employees, customers, vendors, or third parties unless EazeAccounts is legally required to provide notice directly or separately agrees in writing.
For Customer Personal Data subject to U.S. state privacy laws, including the laws listed below and any similar state laws that become effective, EazeAccounts will process Customer Personal Data as a processor, service provider, or contractor as applicable. EazeAccounts will not retain, use, disclose, sell, share, or process Customer Personal Data outside the business purposes described in the Agreement except as permitted by law.
| State / Jurisdiction | Representative Law or Framework | Status |
|---|---|---|
| California | California Consumer Privacy Act, as amended by CPRA | In effect |
| Virginia | Virginia Consumer Data Protection Act | In effect |
| Colorado | Colorado Privacy Act | In effect |
| Connecticut | Connecticut Data Privacy Act / Act Concerning Personal Data Privacy and Online Monitoring | In effect; amendments effective in 2026 |
| Utah | Utah Consumer Privacy Act | In effect; correction-right amendment effective July 1, 2026 |
| Florida | Florida Digital Bill of Rights | In effect for covered entities meeting statutory thresholds |
| Texas | Texas Data Privacy and Security Act | In effect |
| Oregon | Oregon Consumer Privacy Act | In effect |
| Montana | Montana Consumer Data Privacy Act | In effect |
| Delaware | Delaware Personal Data Privacy Act | In effect |
| Iowa | Iowa Consumer Data Protection Act | In effect |
| Nebraska | Nebraska Data Privacy Act | In effect |
| New Hampshire | New Hampshire Privacy Act / Expectation of Privacy law | In effect |
| New Jersey | New Jersey Data Privacy Act | In effect |
| Tennessee | Tennessee Information Protection Act | In effect |
| Minnesota | Minnesota Consumer Data Privacy Act | In effect |
| Maryland | Maryland Online Data Privacy Act | In effect |
| Indiana | Indiana Consumer Data Protection Act | In effect January 1, 2026 |
| Kentucky | Kentucky Consumer Data Protection Act | In effect January 1, 2026 |
| Rhode Island | Rhode Island Data Transparency and Privacy Protection Act | In effect January 1, 2026 |
If a state law requires additional contract terms, such terms are incorporated to the extent required. This includes restrictions on selling or sharing personal data, processing for targeted advertising, combining personal data except as permitted, processing sensitive data, engaging subprocessors without appropriate contract terms, or failing to assist with consumer rights requests.
For personal information subject to CCPA/CPRA, EazeAccounts will act as a service provider or contractor for Customer Personal Data processed on behalf of Customer. EazeAccounts will not sell or share Customer Personal Data, retain/use/disclose Customer Personal Data outside the direct business relationship except as permitted by CCPA/CPRA, or combine Customer Personal Data with other personal information except as permitted by law. Customer grants EazeAccounts the right to process Customer Personal Data for the business purposes described in the Agreement.
Where EazeAccounts transfers Customer Personal Data from the EEA, UK, Switzerland, or another jurisdiction requiring transfer safeguards, the parties will use appropriate transfer mechanisms, such as Standard Contractual Clauses, the UK Addendum, adequacy mechanisms, or another lawful mechanism. Customer authorizes such transfers for providing the Services.
Upon reasonable written request and subject to confidentiality, security, and operational limitations, EazeAccounts will provide information reasonably necessary to demonstrate compliance with this DPA. EazeAccounts may satisfy audit requests by providing security summaries, certifications, third-party audit reports, questionnaires, policies, or other documentation. On-site audits require prior written agreement, reasonable notice, narrow scope, protection of other customers’ data, and reimbursement of reasonable costs unless prohibited by law.
Upon termination of the Services or written request, EazeAccounts will delete or return Customer Personal Data within a commercially reasonable period, typically within ninety (90) days, unless retention is required or permitted by law, contract, backup, disaster recovery, audit, security, fraud prevention, tax, accounting, or dispute-resolution obligations. Backup copies may remain until overwritten or deleted according to backup cycles. A certificate of deletion may be provided upon request where feasible.
EazeAccounts may create and use de-identified, anonymized, or aggregated data for analytics, benchmarking, product improvement, security, system reliability, algorithm optimization, and internal research and development. EazeAccounts will not attempt to re-identify de-identified data except to test de-identification controls or as permitted by law.
Each party’s liability under this DPA is subject to the exclusions, limitations, disclaimers, arbitration agreement, and exclusive remedy provisions in the Agreement, except to the extent such limitations are prohibited by applicable law.
This DPA is governed by the law and dispute-resolution provisions in the Agreement. Unless the Agreement states otherwise, governing law is the State of Delaware and arbitration venue is Henrico County, Virginia, subject to mandatory legal requirements that cannot be waived.
Erihaan Business Services Inc. dba EazeAccounts 1717 E Cary St, Richmond, VA 23223 Email: info@eazeaccounts.com
This page is provided for general information and does not constitute legal advice. For questions, contact info@eazeaccounts.com.
We use cookies for analytics and to improve the site. Essential cookies are always on. You can accept all or just essentials.