Privacy Policy

A. Information you voluntarily provide

When you share an experience or review on Eazilee, you may choose to provide:

• A display name (optional — you can stay completely anonymous)
• Your country
• The age range of the person using the tool (e.g. 41–60)
• A description of the challenge you were trying to solve
• Ratings and written review content
• The condition or disability the tool relates to (optional)
• A photo of the tool in use (optional)
• A YouTube or TikTok video link (optional)
• An email address (optional) — lets you edit or delete that review later by logging in to My Eazilee

Everything marked optional can be skipped. We encourage you to share only what you're comfortable with. Many people choose to remain completely anonymous.

B. Information collected automatically

When you use Eazilee, we automatically collect:

• Pages visited and tools viewed (anonymised, no personal identifiers)
• Search queries entered on the site (anonymised for our own analytics)
• General location (country level only, derived from IP address — we do not store IP addresses)
• Device type and browser (for improving the site experience)

Separately from that anonymised analytics copy, the text of what you search or ask our AT Guide is sent, in real time, to our AI search providers (OpenAI and Anthropic) to generate your results — see How we use your information and Automated decision-making, below.

C. Manufacturer account information

If you register or claim a listing as a manufacturer, we collect your work email, company name, role, and the details of each product you claim, add, or submit (description, category, pricing, media). One manufacturer account can be linked to more than one product.

D. My Eazilee (consumer) account information

If you create a free My Eazilee account, we collect the email address you sign in with, link it to any reviews you've added an email to, and store the list of products you save.

We use the information collected to:

• Display your review to help others find the right AT
• Improve our search and recommendations
• Understand which AT tools are most useful for which conditions and settings (aggregated, anonymised)
• Improve the Eazilee platform
• Operate manufacturer and My Eazilee account dashboards, including multi-product manufacturer accounts and saved-tools lists
• Rank and surface assistive technology listings through AI-assisted search — combining keyword matching with a semantic search channel (OpenAI embeddings) and query expansion (Anthropic's Claude) — see Automated decision-making, below
• Send account-related emails (passwordless sign-in links, review-published confirmations, and manufacturer listing or dispute notifications) through our email provider, Resend

We do not sell your personal information to third parties.

We may share aggregated, anonymised datasets (where no individual can be identified) with research institutions, health organisations, and government bodies for the purpose of improving AT outcomes globally. This data never includes names, email addresses, or any directly identifying information.

Under Australian Privacy Principle 1.7–1.9 (effective 10 December 2026), and consistent with transparency obligations under other privacy laws, this section explains where Eazilee uses a computer program that uses personal information to make a decision, or to do something that substantially and directly informs a decision. None of the uses below make a decision solely by automated means that significantly affects your legal or similarly significant rights or interests — our search ranks a list for you to choose from, and the account/listing decisions below are either reversible, limited to business accounts, or backstopped by human review — but we're setting them out here for transparency.

We'll update this table as our use of automated decision-making changes. If the GDPR or UK GDPR applies to you, Article 22 gives you the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you, and to request human intervention, express your point of view, and contest the decision. As set out above, none of our automated processes currently make that kind of decision — but you can still contact us using the details in Contact us, below, to ask for a decision to be reviewed by a person.

Manufacturers sign in with a passwordless "magic link" sent to their work email. One manufacturer account can hold more than one product: once you've claimed a first listing, you can add further products directly from your dashboard, which first searches our existing catalogue so you link to a listing already in our database rather than create a duplicate.

If a product you try to add or claim is already claimed by a different manufacturer, we show it in the search results rather than hiding it, with a message that it's already claimed and a short "report an incorrect claim" form. That form is emailed to our team for manual review — we don't publish or store it as part of the public listing.

A manufacturer who is already logged in and verified can also fast-track a brand-new product listing: it's published immediately, without waiting for us to review it first, and is automatically flagged in our system for a human reviewer to check afterwards.

Anyone can create a free My Eazilee account with just an email address — no password. From your account you can see every review you've written, edit or delete it, and manage a list of saved products.

Reviews: if you add an email when submitting a review, we store it so you can log in later and edit or remove that review. Adding an email is optional; your review is published either way.

Saved tools: if you're logged in, saving a product just adds it to your list. If you're not logged in, you can still save a product by entering your email — we store the save against that email and send you a magic link to view your list. We don't verify that email address at the point of saving, so a mistyped address means that save can't be retrieved later.

Some information you share on Eazilee — such as conditions, disabilities, or health challenges, whether in a review's condition tags or in a search query — may be considered sensitive health information under applicable privacy laws.

We handle this information with extra care:

• Display names are optional — we actively encourage anonymity
• We do not link health information to email addresses or other identifying information in public displays
• Age ranges (not exact ages) are used to provide context
• Country (not precise location) is used for regional insights
• You can submit a review, or use search, without providing any health-related information at all

If you are submitting information on behalf of a child or another person, please ensure you have their consent (or appropriate authority as a parent/carer) to share their information.

Depending on where you are, this information may also be classed as:

• EU/UK (GDPR): a 'special category' of personal data under Article 9. Our lawful basis for processing it is your explicit consent, given when you choose to add it.
• United States: 'sensitive personal information' under state laws including the CCPA, as amended by the CPRA. You can ask us to limit our use of it — see Your rights, below.

If you upload a photo with your review:

• Photos are stored securely with Supabase (see Data storage, security, and international transfers below)
• Photos are publicly accessible by URL once uploaded
• Please only upload photos of tools and equipment — not photos that clearly identify individuals

You can request deletion of your photo at any time by contacting [email protected].

Your data is stored using Supabase, which uses Amazon Web Services (AWS) infrastructure. Data is stored in the AWS Asia Pacific (Seoul) region. Supabase maintains Standard Contractual Clauses (SCCs) with AWS for international data transfers in compliance with GDPR requirements. For more information see supabase.com/privacy.

Other parts of the service run through providers based, or with infrastructure, in other countries — including Vercel (hosting and compute), Cloudflare (content delivery and bot protection), OpenAI and Anthropic (AI search and query expansion — see How we use your information, above), Resend (transactional email), and Google (consent-gated analytics). Using Eazilee means your personal information may be transferred to, and processed in, countries other than the one you're in, including South Korea, the United States, and others these providers operate in. We take reasonable steps to require these providers to protect personal information consistent with applicable law, including contractual safeguards for international transfers — such as Standard Contractual Clauses where the GDPR or UK GDPR requires them — and to ensure overseas recipients don't breach the Australian Privacy Principles, consistent with APP 8.

We use appropriate technical measures to protect data including encrypted connections (HTTPS/TLS) and role-based access controls.

We use the following analytics services:

You can manage cookie preferences at any time using our cookie consent banner, or by adjusting your browser settings.

Depending on where you are located, you have the following rights.

Australia — you may request access to, or correction of, the personal information we hold about you; request we delete your information; object to certain uses of it; and request it in a portable format. To exercise these rights, contact [email protected] — we will respond within 30 days. If you're not satisfied with our response, you can escalate a complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

European Economic Area and United Kingdom — under the GDPR and UK GDPR, you can ask us to access, correct, delete, or port your personal information, object to or restrict our processing of it, and withdraw consent (such as the consent behind any sensitive information you've added) at any time, without affecting processing already carried out. You also have the automated decision-making rights described in Automated decision-making, above. You can lodge a complaint with your local data protection authority, or the UK Information Commissioner's Office (ico.org.uk) if you're in the UK. Our legal basis for processing your personal information under the GDPR/UK GDPR is, depending on the activity, your consent (for optional information you share, and for non-essential cookies), the performance of a contract (operating your manufacturer or My Eazilee account), or our legitimate interests (operating, securing, and improving Eazilee); for health and disability-related information, our basis is your explicit consent, as described in Health-related information, above.

United States — if you are a resident of a U.S. state with its own consumer privacy law (such as California's CCPA, as amended by the CPRA), you may have the right to know what personal information we hold about you, delete it, correct it, and limit our use of sensitive personal information. We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.

Note: Because most reviews on Eazilee are submitted anonymously or with only a display name, we may not be able to identify your specific submission without additional information from you.

We retain review and experience content indefinitely, as it forms part of our community knowledge base; if you ask us to delete a submission, we will remove or de-identify it promptly.

We retain manufacturer and My Eazilee account data — including any email address linked to a review, and your saved-tools list — for as long as your account is active, and will delete it on request, except where we need to keep limited records for a short period afterwards for legal, security, or fraud-prevention purposes.

Analytics data is retained in accordance with Google Analytics and Vercel's standard retention policies.

Eazilee is not directed at children under 13. However, carers and professionals may submit experiences on behalf of people they support, including children.

If you are submitting on behalf of a child, you confirm you have appropriate parental or guardian authority to share that information. We do not knowingly collect personal information from children directly.

We may update this policy from time to time. We will notify users of significant changes via a notice on the site. The "last updated" date at the top of this page will always reflect the most recent version.

The automated decision-making disclosure in section 3 takes effect 10 December 2026, in line with the amended APP 1.7–1.9 commencement date.

For any privacy questions, requests, or concerns:

We aim to respond to all privacy enquiries within 30 days.