Public Alpha. Easel is in early development, so expect rough edges.

Easel

Privacy Policy

Last updated: October 2026

Easel is run by ParaVoce LLC ("we" and "us" below).

The short version

We collect only what we need to run Easel. We don't track your customers, and your business data stays yours.

What we collect

Your account

  • Email address, for logging in and essential messages
  • Password, stored hashed
  • When you created your account
  • Subscription status and billing details

Your store

  • The products, stock, and prices you add
  • Customer information your store collects
  • Orders and transactions
  • Store settings

Technical data

  • Login cookies
  • Server logs for debugging and security, including IP address, time, and request details
  • Error reports when something breaks

What we don't collect

  • Tracking cookies or pixels
  • Behavioral analytics or profiles
  • Social media data
  • Advertising identifiers
  • Location data beyond what you give us
  • Device fingerprints

How we use it

  • Running your store: processing orders, tracking stock, and taking payments
  • Your account: managing your subscription and answering support requests
  • Essential messages: service updates, security alerts, and billing notices
  • Security: preventing fraud and abuse
  • Legal compliance: tax records and other legal requirements

Who we share it with

Only these, and only what each needs:

  • Stripe processes payments, under its own privacy policy.
  • Fastmail sends transactional email, such as order confirmations and password resets, under its own privacy policy.
  • ShipStation, if you connect your own account, receives the recipient's name and address and the parcel's weight and size for each label you buy, under its own privacy policy.
  • Authorities, when the law or a court order requires it.

We never sell, rent, or trade your data for marketing.

Where it's stored and who can see it

  • Location: servers in the EU, with off-site backups in Helsinki.
  • Encryption: all data is encrypted in transit
  • Access: only the people who run Easel
  • Retention: kept while your account is active, and deleted within 90 days after you close it

Your rights

  • Access: download your store data from the Exports page, or ask us for a copy of your account data
  • Correction: update your information in your account
  • Deletion: erase customer data in the dashboard, or ask us to delete your merchant account
  • Portability: export your data as CSV or JSON, or run your own copy of Easel with the AGPL source ↗
  • Objection: contact us about any processing you object to

Data Requests has the exact steps.

Cookies

We only use cookies Easel needs to work:

  • Login: keep you and your customers signed in
  • Cart: keep a shopper's cart
  • Preferences: remember a shopper's currency, ship-to country, and guest wishlist
  • Short-lived: carry a one-time message or form input across a page load, and hold a pending account signup until it's confirmed

We don't use tracking, analytics, or advertising cookies.

Children

Easel isn't meant for children under 16, and we don't knowingly collect their data. If you think your child has given us personal data, contact us and we'll remove it.

International transfers

We process and store data in the European Union. If you're outside the EU, your data is transferred to EU servers with appropriate safeguards.

Changes to this policy

We'll tell you about significant changes by email or in your dashboard. If you keep using Easel after a change, you accept the updated policy.

Contact

Questions about privacy, or a request under GDPR, CCPA, or another privacy law? Email privacy@easel.engineering.