DULU-C LLC dba Eazy-C · GLBA Privacy Notice · Effective June 1, 2026

Federal Consumer Financial Privacy Notice

Issued under the Gramm-Leach-Bliley Act (GLBA) · FTC Privacy Rule, 16 CFR Part 313

Why?

Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.

What?

The types of personal information we collect and share depend on the product or service you have with us. This information can include:

Name, email address, phone number, and mailing address
Account balances and transaction history obtained from financial institutions you connect to Eazy-C
Income, expense, and tax-relevant transaction data
Mileage and platform trip data you provide or that we receive from connected gig platforms

When you are no longer our customer, we continue to share your information as described in this notice.

How?

All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons Eazy-C chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information	Does Eazy-C share?	Can you limit this sharing?
For our everyday business purposes — such as to process your transactions, maintain your account(s), connect to your financial institutions through our service providers, calculate estimated tax obligations, respond to court orders and legal investigations, or report to regulators.	Yes	No
For our marketing purposes — to offer our products and services to you.	No	We don't share
For joint marketing with other financial companies	No	We don't share
For our affiliates' everyday business purposes — information about your transactions and experiences.	No	We don't share
For our affiliates' everyday business purposes — information about your creditworthiness.	No	We don't share
For our affiliates to market to you	No	We don't share
For nonaffiliates to market to you	No	We don't share

To limit our sharing	Eazy-C does not share your personal information with affiliates, nonaffiliates, or joint marketers for marketing purposes. We share your personal information with service providers only as necessary to operate the service you have requested. There is no marketing-related sharing to opt out of.
Questions?	Email privacy@eazy-c.com or write to: DULU-C LLC, Attn: Privacy, 312 W 2nd St #A615, Casper, WY 82601, United States.

Who we are

Who is providing this notice?	This privacy notice is provided by DULU-C LLC, doing business as Eazy-C ("Eazy-C," "we," "us," or "our"), the operator of the Eazy-C application and website at https://eazy-c.com.

What we do

How does Eazy-C protect my personal information?	To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include: encryption of bank connection tokens at rest using Supabase Vault; TLS 1.2+ for all data in transit; row-level security on every database table; multi-factor authentication for personnel access to production systems; least-privilege access controls; security event monitoring; and a documented incident response procedure. We restrict access to nonpublic personal information to personnel who need to know that information to provide products or services to you.
How does Eazy-C collect my personal information?	We collect your personal information, for example, when you: Create an Eazy-C account or sign in Subscribe to a paid plan Connect a financial account through Plaid (United States) or Basiq (Australia) on your behalf, with your authorization Connect a gig platform account or upload platform earnings data Contact us for support We also receive information about you from your financial institutions through Plaid and Basiq, and from gig platforms you connect to Eazy-C.
Why can't I limit all sharing?	Federal law gives you the right to limit only: Sharing for affiliates' everyday business purposes — information about your creditworthiness Affiliates from using your information to market to you Sharing for nonaffiliates to market to you State laws and individual companies may give you additional rights to limit sharing.

Definitions

Affiliates	Companies related by common ownership or control. They can be financial and nonfinancial companies. Eazy-C currently has no affiliates.
Nonaffiliates	Companies not related by common ownership or control. They can be financial and nonfinancial companies. Eazy-C does not share your personal information with nonaffiliates for their own marketing purposes.
Joint marketing	A formal agreement between nonaffiliated financial companies that together market financial products or services to you. Eazy-C does not engage in joint marketing.

Service providers we use

We share nonpublic personal information with the following service providers solely to operate the Eazy-C service. Each service provider is bound by contract to protect your information and use it only for the purposes we specify.

Service provider	Purpose
Plaid Inc.	Bank account connectivity for users in the United States. Governed by Plaid's End User Privacy Policy at https://plaid.com/legal/#consumers.
Basiq Pty Ltd	Bank account connectivity for users in Australia under the Consumer Data Right (CDR) framework. Governed by Basiq's Privacy Policy and CDR Policy at https://basiq.io/privacy/.
Stripe, Inc.	Subscription billing and payment processing. Stripe collects and stores payment card information directly; Eazy-C does not receive or store full card numbers.
Clerk, Inc.	Account authentication, session management, and identity verification.
Supabase, Inc.	Database and backend infrastructure. Separate jurisdictional instances are used for U.S. and Australian user data.
Vercel, Inc.	Application hosting and content delivery for app.eazy-c.com.
Cloudflare, Inc.	DNS and content delivery for eazy-c.com and subdomains.
Anthropic, PBC	Artificial-intelligence services used to categorize transactions and identify deductible business expenses. Personally identifying details are excluded from prompts where not strictly necessary.
Twilio Inc.	Delivery of transactional SMS messages, including authentication codes and service notifications.
SendGrid (Twilio)	Delivery of transactional email, including receipts, account alerts, and service notifications.
Sentry	Error monitoring and application performance management. Sentry receives no raw personal information — an internal redaction layer strips identifiers, headers, and request bodies before transmission.
Plausible Insights	Cookieless website analytics on the eazy-c.com marketing site. No cross-site tracking, no cookies, no personally identifying information.
Termly, Inc.	Hosting and management of legal policies, cookie consent (where applicable), and consumer rights request handling.
Flagsmith	Feature-flag management for controlled feature rollouts.

Other important information

California	If your account has a California mailing address, we will not share personal information we collect about you with nonaffiliates except as permitted under California law.
Vermont	If your account has a Vermont mailing address, we will not share personal information we collect about you with nonaffiliates unless the law allows or you provide authorization.
Nevada	Eazy-C does not sell personal information of Nevada residents. To submit a verified request to opt out of any future sale, contact privacy@eazy-c.com.

Government identifiers

Eazy-C does not collect Social Security Numbers, Tax File Numbers, National Insurance Numbers, Social Insurance Numbers, or other government-issued identifiers. Eazy-C is a tax-tracking and quarterly-estimate tool. End-of-year tax filing remains the responsibility of the user (or the user's tax preparer). Because we do not collect these identifiers, we cannot share them.

How to contact us

If you have questions about this notice or about how Eazy-C handles your personal information, please contact us:

Email: privacy@eazy-c.com
Mail: DULU-C LLC, Attn: Privacy, 312 W 2nd St #A615, Casper, WY 82601, United States

Annual notice. Federal law requires us to provide this notice at least annually for as long as you remain our customer. The most current version is always posted at https://eazy-c.com/glba. We will notify you by email if we make material changes to this notice.